Преглед изворни кода

创建用户不允许选择系统管理员角色

RuoYi пре 5 година
родитељ
комит
eb48d6a80f

+ 4 - 1
ruoyi-modules/ruoyi-system/src/main/java/com/ruoyi/system/controller/SysUserController.java

@@ -3,6 +3,7 @@ package com.ruoyi.system.controller;
3
 import java.io.IOException;
3
 import java.io.IOException;
4
 import java.util.List;
4
 import java.util.List;
5
 import java.util.Set;
5
 import java.util.Set;
6
+import java.util.stream.Collectors;
6
 import javax.servlet.http.HttpServletResponse;
7
 import javax.servlet.http.HttpServletResponse;
7
 import org.springframework.beans.factory.annotation.Autowired;
8
 import org.springframework.beans.factory.annotation.Autowired;
8
 import org.springframework.security.access.prepost.PreAuthorize;
9
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -26,6 +27,7 @@ import com.ruoyi.common.core.web.page.TableDataInfo;
26
 import com.ruoyi.common.log.annotation.Log;
27
 import com.ruoyi.common.log.annotation.Log;
27
 import com.ruoyi.common.log.enums.BusinessType;
28
 import com.ruoyi.common.log.enums.BusinessType;
28
 import com.ruoyi.common.security.utils.SecurityUtils;
29
 import com.ruoyi.common.security.utils.SecurityUtils;
30
+import com.ruoyi.system.api.domain.SysRole;
29
 import com.ruoyi.system.api.domain.SysUser;
31
 import com.ruoyi.system.api.domain.SysUser;
30
 import com.ruoyi.system.api.model.UserInfo;
32
 import com.ruoyi.system.api.model.UserInfo;
31
 import com.ruoyi.system.service.ISysPermissionService;
33
 import com.ruoyi.system.service.ISysPermissionService;
@@ -145,7 +147,8 @@ public class SysUserController extends BaseController
145
     public AjaxResult getInfo(@PathVariable(value = "userId", required = false) Long userId)
147
     public AjaxResult getInfo(@PathVariable(value = "userId", required = false) Long userId)
146
     {
148
     {
147
         AjaxResult ajax = AjaxResult.success();
149
         AjaxResult ajax = AjaxResult.success();
148
-        ajax.put("roles", roleService.selectRoleAll());
150
+        List<SysRole> roles = roleService.selectRoleAll();
151
+        ajax.put("roles", SysUser.isAdmin(userId) ? roles : roles.stream().filter(r -> !r.isAdmin()).collect(Collectors.toList()));
149
         ajax.put("posts", postService.selectPostAll());
152
         ajax.put("posts", postService.selectPostAll());
150
         if (StringUtils.isNotNull(userId))
153
         if (StringUtils.isNotNull(userId))
151
         {
154
         {

+ 2 - 2
sql/ry_20200610.sql

@@ -120,8 +120,8 @@ create table sys_role (
120
 -- ----------------------------
120
 -- ----------------------------
121
 -- 初始化-角色信息表数据
121
 -- 初始化-角色信息表数据
122
 -- ----------------------------
122
 -- ----------------------------
123
-insert into sys_role values('1', '管理员',   'admin',  1, 1, '0', '0', 'admin', '2018-03-16 11-33-00', 'ry', '2018-03-16 11-33-00', '管理员');
124
-insert into sys_role values('2', '普通角色', 'common', 2, 2, '0', '0', 'admin', '2018-03-16 11-33-00', 'ry', '2018-03-16 11-33-00', '普通角色');
123
+insert into sys_role values('1', '系统管理员',  'admin',  1, 1, '0', '0', 'admin', '2018-03-16 11-33-00', 'ry', '2018-03-16 11-33-00', '系统管理员');
124
+insert into sys_role values('2', '普通角色',    'common', 2, 2, '0', '0', 'admin', '2018-03-16 11-33-00', 'ry', '2018-03-16 11-33-00', '普通角色');
125
 
125
 
126
 
126
 
127
 -- ----------------------------
127
 -- ----------------------------