订单按钮权限

yifu-order/yifu-order-biz/src/main/java/com/yifu/cloud/plus/v1/yifu/order/controller/OrderController.java

@@ -14,6 +14,7 @@ import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.media.Schema;
 import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.*;
 import org.springframework.web.multipart.MultipartFile;
 
@@ -57,6 +58,7 @@ public class OrderController {
 	 */
 	@Operation(summary = "订单列表不分页查询", description = "订单列表不分页查询")
 	@GetMapping("/getOrderList")
+	@PreAuthorize("@pms.hasPermission('order:order_getOrderList')")
 	public R<List<OrderListVO>> getOrderList(OrderListParam param) {
 		return R.ok(tOrderService.getOrderList(param));
 	}
@@ -71,6 +73,7 @@ public class OrderController {
 	 */
 	@GetMapping("/handleOrder")
 	@Operation(summary = "变更订单状态", description = "变更订单状态")
+	@PreAuthorize("@pms.hasPermission('order:order_handleOrder')")
 	public R<String> handleOrder(@RequestParam String id,@RequestParam Integer status) {
 		return tOrderService.handleOrder(id,status);
 	}
@@ -84,6 +87,7 @@ public class OrderController {
 	 */
 	@Operation(summary = "通过id查询详情", description = "通过id查询详情")
 	@GetMapping("/{id}")
+	@PreAuthorize("@pms.hasPermission('order:order_getInsuranceDetailById')")
 	public R<OrderDetailVO> getInsuranceDetailById(@PathVariable("id") String id) {
 		return tOrderService.getOrderDetailById(id);
 	}
@@ -114,6 +118,7 @@ public class OrderController {
 	 */
 	@Schema(description = "添加回复")
 	@PostMapping(value = "/uploadReplyEnclosure")
+	@PreAuthorize("@pms.hasPermission('order:order_uploadReplyEnclosure')")
 	public R uploadReplyEnclosure(@RequestBody MultipartFile[] file, String filePath, String replyContent,String orderNo) throws IOException {
 		return tOrderService.uploadReplyEnclosure(file, filePath,replyContent,orderNo);
 	}