From 25ca12f34988018c2994dc24918a14443560089b Mon Sep 17 00:00:00 2001 From: whycxzp <glperry@163.com> Date: 星期一, 25 十二月 2023 11:40:27 +0800 Subject: [PATCH] 权限拦截验证 --- src/main/java/com/whyc/filter/AccessFilter.java | 15 +++++++++++++++ 1 files changed, 15 insertions(+), 0 deletions(-) diff --git a/src/main/java/com/whyc/filter/AccessFilter.java b/src/main/java/com/whyc/filter/AccessFilter.java index 9b417cd..f7f92f4 100644 --- a/src/main/java/com/whyc/filter/AccessFilter.java +++ b/src/main/java/com/whyc/filter/AccessFilter.java @@ -127,6 +127,21 @@ response.getWriter().write("闈炴硶璇锋眰锛岃韩浠芥湭楠岃瘉"); return; } + else if(requestURI.contains("userInf/resetSnId") //閲嶇疆鍏朵粬鐢ㄦ埛瀵嗙爜,蹇呴』1000浠ヤ笅鐨勭鐞嗗憳鎵嶈兘璁剧疆 + ||requestURI.contains("add") + ||requestURI.contains("delete") + ||requestURI.contains("update") + ){ + int userId = user.getUid(); + if(userId>=1000){ + //瓒婃潈璁块棶 + logService.record(OperationLogEnum.TYPE_1_SYS.getType(), OperationLogEnum.TYPE_2_UNAUTHORIZED_ACCESS.getType(),"瓒婃潈璁块棶", "瓒婃潈璁块棶鎺ュ彛:" + requestURI); + response.setStatus(401); + response.setContentType("text/html;charset=utf-8"); + response.getWriter().write("闈炴硶璇锋眰锛岃韩浠芥湭鎺堟潈"); + return; + } + } //} } -- Gitblit v1.9.1