From 2000eec194c9ad992d5d0dfa17b53a4285df5871 Mon Sep 17 00:00:00 2001 From: Stormeye Wu Date: Sat, 2 Mar 2019 14:55:16 +0800 Subject: [PATCH] =?UTF-8?q?[=E5=BE=AE=E4=BF=A1=E7=AC=AC=E4=B8=89=E6=96=B9?= =?UTF-8?q?=E7=99=BB=E5=BD=95][=E4=BF=AE=E6=94=B9]:=E5=8F=AA=E6=9C=89?= =?UTF-8?q?=E6=9C=AC=E4=BA=BA=E6=88=96=E8=80=85=E8=B6=85=E7=AE=A1=E6=89=8D?= =?UTF-8?q?=E5=8F=AF=E4=BB=A5=E8=A7=A3=E7=BB=91=E5=BE=AE=E4=BF=A1=E7=99=BB?= =?UTF-8?q?=E5=BD=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../iformall/controller/WechatLoginController.java | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/mallinkAdmin/src/main/java/com/iformall/controller/WechatLoginController.java b/mallinkAdmin/src/main/java/com/iformall/controller/WechatLoginController.java index 17af4fe80..9919a56b4 100644 --- a/mallinkAdmin/src/main/java/com/iformall/controller/WechatLoginController.java +++ b/mallinkAdmin/src/main/java/com/iformall/controller/WechatLoginController.java @@ -5,6 +5,7 @@ import com.iformall.common.ErrorCode; import com.iformall.common.ResultData; import com.iformall.domain.po.MallUserInfo; import com.iformall.domain.vo.MallUserInfoVo; +import com.iformall.enums.EnumUserAdmin; import com.iformall.service.MallUserInfoService; import com.iformall.service.MallUserRoleService; import com.iformall.shiro.UserSession; @@ -19,6 +20,7 @@ import me.chanjar.weixin.common.error.WxErrorException; import me.chanjar.weixin.mp.api.WxMpService; import me.chanjar.weixin.mp.bean.result.WxMpOAuth2AccessToken; import me.chanjar.weixin.mp.bean.result.WxMpUser; +import net.sf.saxon.trans.Err; import org.apache.commons.lang3.StringUtils; import org.apache.shiro.SecurityUtils; import org.apache.shiro.subject.Subject; @@ -256,7 +258,13 @@ public class WechatLoginController extends BaseController { if(userInfo.getId() == null && userInfo.getUsername() == null) { return new ResultData(ErrorCode.SYS_PARAMETER_NOT_NULL); } - mallUserInfoService.cleanWebOpenId(userInfo); - return new ResultData(); + if(userInfo.getId().equals(user.getId()) + || user.getIsAdmin().equals(EnumUserAdmin.ADMIN.getCode())) { + mallUserInfoService.cleanWebOpenId(userInfo); + return new ResultData(); + } else { + return new ResultData(ErrorCode.USER_NO_PERMISSION); + } + } }