优化提交

2026-09-14 09:58:30 +08:00
parent 5ffd6c0118
commit 8cf7c4b9c9
93 changed files with 2945 additions and 188 deletions
@@ -0,0 +1,35 @@
+package com.baiyue.lastleg.transfer.controller;
+
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.lastleg.security.OverseasPermissions;
+import com.baiyue.lastleg.transfer.dto.WarehouseTransferRequests;
+import org.junit.jupiter.api.Test;
+import org.springframework.security.access.prepost.PreAuthorize;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class WarehouseTransferControllerPermissionTest {
+    @Test
+    void readEndpointsAndReviewUseTheirDedicatedAuthorities() throws Exception {
+        PreAuthorize page = WarehouseTransferController.class
+            .getMethod("page", AuthenticatedUser.class, String.class, WarehouseTransferRequests.Query.class)
+            .getAnnotation(PreAuthorize.class);
+        PreAuthorize detail = WarehouseTransferController.class
+            .getMethod("detail", AuthenticatedUser.class, String.class, String.class)
+            .getAnnotation(PreAuthorize.class);
+        PreAuthorize cartonLabel = WarehouseTransferController.class
+            .getMethod("cartonLabel", AuthenticatedUser.class, String.class, String.class)
+            .getAnnotation(PreAuthorize.class);
+        PreAuthorize review = WarehouseTransferController.class
+            .getMethod("review", AuthenticatedUser.class, String.class, String.class,
+                WarehouseTransferRequests.Review.class)
+            .getAnnotation(PreAuthorize.class);
+
+        String readAuthority = "hasAuthority('" + OverseasPermissions.LAST_MILE_ORDER_LIST + "')";
+        assertThat(page.value()).isEqualTo(readAuthority);
+        assertThat(detail.value()).isEqualTo(readAuthority);
+        assertThat(cartonLabel.value()).isEqualTo(readAuthority);
+        assertThat(review.value()).isEqualTo(
+            "hasAuthority('" + OverseasPermissions.WAREHOUSE_TRANSFER_APPROVE + "')");
+    }
+}