feat:加权限标识

yifu-insurances/yifu-insurances-biz/src/main/java/com/yifu/cloud/plus/v1/yifu/insurances/controller/TInsuranceDetailController.java

@@ -307,7 +307,7 @@ public class TInsuranceDetailController {
 	 */
 	@Operation(summary = "登记发票号", description = "登记发票号")
 	@PostMapping("/registeredInvoiceNo")
-	//@PreAuthorize("@pms.hasPermission('handle_insure_invoice')")
+	@PreAuthorize("@pms.hasPermission('handle_insure_invoice')")
 	public R<List<InsuranceRegisterInvoiceNoParam>> registeredInvoiceNo(@RequestBody @Valid @Size(min = 1,message = "集合不能为空") List<InsuranceRegisterInvoiceNoParam> paramList){
 		return tInsuranceDetailService.registeredInvoiceNo(paramList);
 	}
@@ -321,7 +321,7 @@ public class TInsuranceDetailController {
 	 */
 	@Operation(summary = "已投保信息修改", description = "已投保信息修改")
 	@PostMapping("/updateInsuranceInsured")
-	//@PreAuthorize("@pms.hasPermission('handle_insured')")
+	@PreAuthorize("@pms.hasPermission('handle_insured')")
 	public R<List<InsuranceInsuredParam>> updateInsuranceInsured(@RequestBody @Valid @Size(min = 1,message = "集合不能为空") List<InsuranceInsuredParam> paramList){
 		return tInsuranceDetailService.updateInsuranceInsured(paramList);
 	}
@@ -335,7 +335,7 @@ public class TInsuranceDetailController {
 	 */
 	@PostMapping("/updateInsuranceInsuredById")
 	@Operation(summary = "已投保信息修改", description = "已投保信息修改")
-	//@PreAuthorize("@pms.hasPermission('handle_insured_by_id')")
+	@PreAuthorize("@pms.hasPermission('handle_insured_by_id')")
 	public R<String> updateInsuranceInsuredById(@RequestBody InsuranceInsuredDetailParam param) {
 		return tInsuranceDetailService.updateInsuranceInsuredById(param);
 	}

yifu-insurances/yifu-insurances-biz/src/main/java/com/yifu/cloud/plus/v1/yifu/insurances/controller/TInsurancePolicyController.java

@@ -13,6 +13,7 @@ import io.swagger.v3.oas.annotations.security.SecurityRequirement;
 import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.HttpHeaders;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.*;
 
 import javax.annotation.Resource;
@@ -56,6 +57,7 @@ public class TInsurancePolicyController {
 	 */
 	@Operation(summary = "保单号对应起止保时间列表（不分页）", description = "保单号对应起止保时间（不分页）")
 	@GetMapping("/list")
+	@PreAuthorize("@pms.hasPermission('insurancePolicy_list')")
 	public R<List<TInsurancePolicy>> getInsurancePolicyList(InsurancePolicyListParam param) {
 		return R.ok(tInsurancePolicyService.getInsurancePolicyList(param));
 	}
@@ -69,6 +71,7 @@ public class TInsurancePolicyController {
 	 */
 	@GetMapping("/{id}")
 	@Operation(summary = "通过id查询详情", description = "通过id查询详情")
+	@PreAuthorize("@pms.hasPermission('insurancePolicy_getById')")
 	public R<TInsurancePolicyDetailVO> getDetailById(@PathVariable("id" ) String id) {
 		return tInsurancePolicyService.getDetailById(id);
 	}
@@ -82,6 +85,7 @@ public class TInsurancePolicyController {
 	 */
 	@Operation(summary = "修改保单号对应起止保时间", description = "修改保单号对应起止保时间)")
 	@PostMapping("/update")
+	@PreAuthorize("@pms.hasPermission('insurancePolicy_update')")
 	public R update(@RequestBody @Valid InsurancePolicyListEditParam param) {
 		return tInsurancePolicyService.updateInsurancePolicy(param);
 	}
@@ -95,6 +99,7 @@ public class TInsurancePolicyController {
 	 */
 	@Operation(summary = "删除保单号对应起止保时间", description = "删除保单号对应起止保时间")
 	@DeleteMapping("/{id}" )
+	@PreAuthorize("@pms.hasPermission('insurancePolicy_delete')")
 	public R deleteById(@PathVariable("id") String id) {
 		return tInsurancePolicyService.deleteInsurancePolicy(id);
 	}