From 74b0e0814e37d640596f44ec86d20fa9ecce9ed6 Mon Sep 17 00:00:00 2001
From: puzhibing <393733352@qq.com>
Date: 星期三, 05 二月 2025 10:42:06 +0800
Subject: [PATCH] Merge remote-tracking branch 'origin/master'

---
 ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TInvoiceInformationController.java |    9 +++++++++
 1 files changed, 9 insertions(+), 0 deletions(-)

diff --git a/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TInvoiceInformationController.java b/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TInvoiceInformationController.java
index f501947..b5cfe15 100644
--- a/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TInvoiceInformationController.java
+++ b/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TInvoiceInformationController.java
@@ -79,6 +79,10 @@
 	@ApiOperation(value = "获取开票抬头详情数据", tags = {"小程序-充电发票"})
 	public AjaxResult<TInvoiceInformation> getInvoiceInformationInfo(@PathVariable String id){
 		TInvoiceInformation information = invoiceInformationService.getById(id);
+		Long userId = tokenService.getLoginUserApplet().getUserId();
+		if(!information.getAppUserId().equals(userId)){
+			return AjaxResult.error("权限不足");
+		}
 		return AjaxResult.success(information);
 	}
 	
@@ -89,6 +93,11 @@
 	@ApiOperation(value = "编辑开票抬头数据", tags = {"小程序-充电发票"})
 	public AjaxResult editInvoiceInformation(@RequestBody TInvoiceInformation invoiceInformation){
 		Long userId = tokenService.getLoginUserApplet().getUserId();
+		TInvoiceInformation information = invoiceInformationService.getById(invoiceInformation.getId());
+		if(!information.getAppUserId().equals(userId)){
+			return AjaxResult.error("权限不足");
+		}
+		
 		//如果当前是默认抬头,则需要去除其他的默认配置
 		if(null != invoiceInformation.getIsDefault() && 1 == invoiceInformation.getIsDefault()){
 			TInvoiceInformation one = invoiceInformationService.getOne(new LambdaQueryWrapper<TInvoiceInformation>().eq(TInvoiceInformation::getDelFlag, 0)

--
Gitblit v1.7.1