From 9d994ea0eee51dbc87fe83ead985580545926b8a Mon Sep 17 00:00:00 2001
From: yeg <1347747024@qq.com>
Date: 星期二, 15 九月 2026 21:41:58 +0800
Subject: [PATCH] feat(merchant): 完善存量商户微信开通进度闭环
---
talent-card-server/src/main/java/com/talentcard/server/business/admin/auth/AdminAuthInterceptor.java | 6 ++++++
1 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/talent-card-server/src/main/java/com/talentcard/server/business/admin/auth/AdminAuthInterceptor.java b/talent-card-server/src/main/java/com/talentcard/server/business/admin/auth/AdminAuthInterceptor.java
index 4a712c7..b437641 100644
--- a/talent-card-server/src/main/java/com/talentcard/server/business/admin/auth/AdminAuthInterceptor.java
+++ b/talent-card-server/src/main/java/com/talentcard/server/business/admin/auth/AdminAuthInterceptor.java
@@ -26,12 +26,18 @@
request.setAttribute(OPERATOR_NAME_ATTRIBUTE, service.operatorName(operatorId));
String permission = permission(request.getMethod(), request.getRequestURI());
if (!permission.isBlank() && !service.hasPermission(operatorId, permission)) {
+ if (request.getRequestURI().startsWith("/api/admin/management/merchant-settlement/onboardings")) {
+ throw new com.talentcard.server.common.BusinessException(com.talentcard.server.common.ErrorCode.FORBIDDEN, "当前账号没有该操作权限");
+ }
throw new ResponseStatusException(HttpStatus.FORBIDDEN, "当前账号没有该操作权限");
}
return true;
}
private String permission(String method, String uri) {
+ if (uri.startsWith("/api/admin/management/merchant-settlement/onboardings")) {
+ return "admin.merchant-settlement." + ("GET".equalsIgnoreCase(method) ? "view" : "edit");
+ }
if (uri.startsWith("/api/admin/management/roles")) {
return managementPermission(method, uri, "roles");
}
--
Gitblit v1.7.1