提交

lastleg-service/src/main/java/com/baiyue/lastleg/controller/LastlegOrderController.java

@@ -19,6 +19,7 @@ import org.springframework.http.HttpStatus;
 import org.springframework.http.MediaType;
 import org.springframework.http.ResponseEntity;
 import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PathVariable;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -49,6 +50,7 @@ public class LastlegOrderController {
     }
 
     @GetMapping("/api/platform/v1/last-leg/orders")
+    @PreAuthorize("hasAuthority('platform:lastleg:order:list')")
     /** 分页查询尾程订单列表。 */
     @Operation(summary = "分页查询尾程订单")
     public ApiResponse<PageResult<LastlegOrderSummary>> list(
@@ -59,6 +61,7 @@ public class LastlegOrderController {
     }
 
     @GetMapping("/api/platform/v1/last-leg/orders/{id}")
+    @PreAuthorize("hasAuthority('platform:lastleg:order:list')")
     /** 查询指定入仓单维度的尾程订单详情。 */
     @Operation(summary = "查询尾程订单详情")
     public ApiResponse<LastlegOrderDetailResponse> detail(
@@ -69,6 +72,7 @@ public class LastlegOrderController {
     }
 
     @GetMapping(value = "/api/platform/v1/last-leg/orders/export", produces = "text/csv")
+    @PreAuthorize("hasAuthority('platform:lastleg:order:export')")
     /** 按筛选条件导出尾程订单 CSV 文件。 */
     @Operation(summary = "导出尾程订单")
     public ResponseEntity<byte[]> export(
@@ -83,6 +87,7 @@ public class LastlegOrderController {
     }
 
     @PutMapping("/api/platform/v1/last-leg/orders/{id}/destination")
+    @PreAuthorize("hasAuthority('platform:lastleg:order:transfer')")
     /** 将单个尾程订单转移到目标仓库。 */
     @Operation(summary = "单个订单转移仓库")
     public ApiResponse<Integer> transferOne(
@@ -94,6 +99,7 @@ public class LastlegOrderController {
     }
 
     @PutMapping("/api/platform/v1/last-leg/orders/destination")
+    @PreAuthorize("hasAuthority('platform:lastleg:order:transfer')")
     /** 将多个尾程订单批量转移到目标仓库。 */
     @Operation(summary = "批量订单转移仓库")
     public ApiResponse<Integer> transferBatch(