From 551bbcb098c99afc9f9b58aec7bc16a12f40ed0a Mon Sep 17 00:00:00 2001
From: 无关风月 <443237572@qq.com>
Date: 星期五, 21 二月 2025 18:23:07 +0800
Subject: [PATCH] 补充管理后台文件上传

---
 ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java |   30 +++++++++++++++++++++++++-----
 1 files changed, 25 insertions(+), 5 deletions(-)

diff --git a/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java b/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java
index e2a2dad..0ddf5fa 100644
--- a/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java
+++ b/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java
@@ -70,10 +70,10 @@
         TAppUserAddress appUserAddress = appUserAddressService.getOne(Wrappers.<TAppUserAddress>lambdaQuery().eq(TAppUserAddress::getAppUserId, userId)
                 .eq(TAppUserAddress::getDefaultAddress, 1));
         if(Objects.isNull(appUserAddress)){
-            return AjaxResult.ok(new TAppUserAddress());
+            return AjaxResult.success();
         }
         appUserAddress.setUid(appUserAddress.getId().toString());
-        return AjaxResult.ok(appUserAddress);
+        return AjaxResult.success(appUserAddress);
     }
 
 
@@ -96,9 +96,13 @@
     @ApiOperation(tags = {"小程序-用户地址"},value = "设置默认地址")
     @GetMapping(value = "/setDefaultAddress")
     public AjaxResult<String> setDefaultAddress(@RequestParam(value = "id") Long  id) {
+        TAppUserAddress appUserAddress = appUserAddressService.getById(id);
+        Long userId = tokenService.getLoginUserApplet().getUserId();
+        if(!appUserAddress.getAppUserId().equals(userId)){
+            return AjaxResult.error("权限不足");
+        }
         // 修改用户默认地址
         appUserAddressService.updateDefaultAddress(1,tokenService.getLoginUserApplet().getUserId());
-        TAppUserAddress appUserAddress = appUserAddressService.getById(id);
         appUserAddress.setDefaultAddress(1);
         appUserAddressService.updateById(appUserAddress);
         return AjaxResult.success();
@@ -110,8 +114,13 @@
     @ApiOperation(tags = {"小程序-用户地址"},value = "修改用户地址")
     @PostMapping(value = "/update")
     public AjaxResult<Boolean> update(@RequestBody TAppUserAddress dto) {
+        Long userId = tokenService.getLoginUserApplet().getUserId();
+        TAppUserAddress userAddress = appUserAddressService.getById(dto.getId());
+        if(!userAddress.getAppUserId().equals(userId)){
+            return AjaxResult.error("权限不足");
+        }
         // 用户id
-        dto.setAppUserId(tokenService.getLoginUserApplet().getUserId());
+        dto.setAppUserId(userId);
         // 修改用户默认地址
         appUserAddressService.updateDefaultAddress(dto.getDefaultAddress(),dto.getAppUserId());
         return AjaxResult.ok(appUserAddressService.updateById(dto));
@@ -125,7 +134,13 @@
     @ApiOperation(tags = {"小程序-用户地址"},value = "查询用户地址详情")
     @GetMapping(value = "/getDetailById")
     public R<TAppUserAddress> getDetailById(@RequestParam(value = "id")Long id) {
-        return R.ok(appUserAddressService.getById(id));
+        TAppUserAddress appUserAddress = appUserAddressService.getById(id);
+        Long userId = tokenService.getLoginUserApplet().getUserId();
+        if(!appUserAddress.getAppUserId().equals(userId)){
+            return R.fail("权限不足");
+        }
+        appUserAddress.setUid(appUserAddress.getId().toString());
+        return R.ok(appUserAddress);
     }
 
     /**
@@ -134,6 +149,11 @@
     @ApiOperation(tags = {"小程序-用户地址"},value = "删除用户地址")
     @DeleteMapping(value = "/deleteById")
     public AjaxResult<Boolean> deleteById(@RequestParam("id") Long id) {
+        TAppUserAddress appUserAddress = appUserAddressService.getById(id);
+        Long userId = tokenService.getLoginUserApplet().getUserId();
+        if(!appUserAddress.getAppUserId().equals(userId)){
+            return AjaxResult.error("权限不足");
+        }
         return AjaxResult.ok(appUserAddressService.removeById(id));
     }
     

--
Gitblit v1.7.1