From 3244b550596e0330031b3f4547356927df83b0ad Mon Sep 17 00:00:00 2001 From: Pu Zhibing <393733352@qq.com> Date: 星期一, 19 五月 2025 11:48:35 +0800 Subject: [PATCH] 修改bug --- ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java | 41 ++++++++++++++++++++++++++++++++++++----- 1 files changed, 36 insertions(+), 5 deletions(-) diff --git a/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java b/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java index c561419..e2f680c 100644 --- a/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java +++ b/ruoyi-service/ruoyi-account/src/main/java/com/ruoyi/account/controller/TAppUserAddressController.java @@ -6,12 +6,16 @@ import com.ruoyi.account.service.TAppUserAddressService; import com.ruoyi.common.core.domain.R; import com.ruoyi.common.core.web.domain.AjaxResult; +import com.ruoyi.common.log.annotation.Log; +import com.ruoyi.common.log.enums.BusinessType; +import com.ruoyi.common.log.enums.OperatorType; import com.ruoyi.common.security.service.TokenService; import io.swagger.annotations.ApiOperation; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.*; import java.util.List; +import java.util.Objects; /** * <p> @@ -68,14 +72,18 @@ Long userId = tokenService.getLoginUserApplet().getUserId(); TAppUserAddress appUserAddress = appUserAddressService.getOne(Wrappers.<TAppUserAddress>lambdaQuery().eq(TAppUserAddress::getAppUserId, userId) .eq(TAppUserAddress::getDefaultAddress, 1)); + if(Objects.isNull(appUserAddress)){ + return AjaxResult.success(); + } appUserAddress.setUid(appUserAddress.getId().toString()); - return AjaxResult.ok(appUserAddress); + return AjaxResult.success(appUserAddress); } /** * 添加用户地址管理 */ + @Log(title = "【我的】添加用户地址", businessType = BusinessType.INSERT,operatorType = OperatorType.MOBILE) @ApiOperation(tags = {"小程序-用户地址"},value = "添加用户地址") @PostMapping(value = "/add") public AjaxResult<Boolean> add(@RequestBody TAppUserAddress dto) { @@ -89,12 +97,17 @@ /** * 修改用户地址 */ + @Log(title = "【我的】设置默认地址", businessType = BusinessType.UPDATE,operatorType = OperatorType.MOBILE) @ApiOperation(tags = {"小程序-用户地址"},value = "设置默认地址") @GetMapping(value = "/setDefaultAddress") public AjaxResult<String> setDefaultAddress(@RequestParam(value = "id") Long id) { + TAppUserAddress appUserAddress = appUserAddressService.getById(id); + Long userId = tokenService.getLoginUserApplet().getUserId(); + if(!appUserAddress.getAppUserId().equals(userId)){ + return AjaxResult.error("权限不足"); + } // 修改用户默认地址 appUserAddressService.updateDefaultAddress(1,tokenService.getLoginUserApplet().getUserId()); - TAppUserAddress appUserAddress = appUserAddressService.getById(id); appUserAddress.setDefaultAddress(1); appUserAddressService.updateById(appUserAddress); return AjaxResult.success(); @@ -103,11 +116,17 @@ /** * 修改用户地址 */ + @Log(title = "【我的】修改用户地址", businessType = BusinessType.UPDATE,operatorType = OperatorType.MOBILE) @ApiOperation(tags = {"小程序-用户地址"},value = "修改用户地址") @PostMapping(value = "/update") public AjaxResult<Boolean> update(@RequestBody TAppUserAddress dto) { + Long userId = tokenService.getLoginUserApplet().getUserId(); + TAppUserAddress userAddress = appUserAddressService.getById(dto.getId()); + if(!userAddress.getAppUserId().equals(userId)){ + return AjaxResult.error("权限不足"); + } // 用户id - dto.setAppUserId(tokenService.getLoginUserApplet().getUserId()); + dto.setAppUserId(userId); // 修改用户默认地址 appUserAddressService.updateDefaultAddress(dto.getDefaultAddress(),dto.getAppUserId()); return AjaxResult.ok(appUserAddressService.updateById(dto)); @@ -121,15 +140,27 @@ @ApiOperation(tags = {"小程序-用户地址"},value = "查询用户地址详情") @GetMapping(value = "/getDetailById") public R<TAppUserAddress> getDetailById(@RequestParam(value = "id")Long id) { - return R.ok(appUserAddressService.getById(id)); + TAppUserAddress appUserAddress = appUserAddressService.getById(id); + Long userId = tokenService.getLoginUserApplet().getUserId(); + if(!appUserAddress.getAppUserId().equals(userId)){ + return R.fail("权限不足"); + } + appUserAddress.setUid(appUserAddress.getId().toString()); + return R.ok(appUserAddress); } /** * 删除用户地址 */ + @Log(title = "【我的】删除用户地址", businessType = BusinessType.DELETE,operatorType = OperatorType.MOBILE) @ApiOperation(tags = {"小程序-用户地址"},value = "删除用户地址") @DeleteMapping(value = "/deleteById") - public AjaxResult<Boolean> deleteById(@RequestParam("id") Integer id) { + public AjaxResult<Boolean> deleteById(@RequestParam("id") Long id) { + TAppUserAddress appUserAddress = appUserAddressService.getById(id); + Long userId = tokenService.getLoginUserApplet().getUserId(); + if(!appUserAddress.getAppUserId().equals(userId)){ + return AjaxResult.error("权限不足"); + } return AjaxResult.ok(appUserAddressService.removeById(id)); } -- Gitblit v1.7.1