admin/prop-ai-hr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(aihr): restrict dashboard access

Browse Source
This commit is contained in:
admin
2026-07-14 08:50:53 +08:00
parent 770fae8845
commit 7522794d8b
3 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/controller/AihrDashboardController.java
+4
View File
@@ -1,9 +1,12 @@
package org.dromara.aihr.controller;
import cn.dev33.satoken.annotation.SaCheckLogin;
import cn.dev33.satoken.annotation.SaCheckRole;
import cn.dev33.satoken.annotation.SaMode;
import lombok.RequiredArgsConstructor;
import org.dromara.aihr.domain.AihrDashboardDto.OverviewResponse;
import org.dromara.aihr.service.AihrDashboardService;
import org.dromara.common.core.constant.TenantConstants;
import org.dromara.common.core.domain.R;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RequestMapping;
@@ -13,6 +16,7 @@ import org.springframework.web.bind.annotation.RestController;
@RestController
@RequestMapping("/api/aihr/dashboard")
@SaCheckLogin
@SaCheckRole(value = {TenantConstants.SUPER_ADMIN_ROLE_KEY, "hr_operator"}, mode = SaMode.OR)
public class AihrDashboardController {
private final AihrDashboardService dashboardService;
backend/ruoyi-modules/ruoyi-aihr/src/test/java/org/dromara/aihr/service/AihrPracticeSeedServiceTest.java
+13
View File
@@ -367,6 +367,19 @@ public class AihrPracticeSeedServiceTest {
assertFalse(controllerSource.contains("supervisor H5 keeps team-scope"));
}
@Test
public void dashboardControllerRequiresHrRole() throws Exception {
Path source = Path.of("src/main/java/org/dromara/aihr/controller/AihrDashboardController.java");
if (!Files.exists(source)) {
source = Path.of("ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/controller/AihrDashboardController.java");
}
String controllerSource = Files.readString(source);
assertTrue(controllerSource.contains("@SaCheckRole"));
assertTrue(controllerSource.contains("TenantConstants.SUPER_ADMIN_ROLE_KEY"));
assertTrue(controllerSource.contains("\"hr_operator\""));
}
@Test
public void practiceControllerRequiresLoginBeforeSessionCreation() throws Exception {
Path source = Path.of("src/main/java/org/dromara/aihr/controller/AihrPracticeController.java");
scripts/demo-check.sh
+1
View File
@@ -415,6 +415,7 @@ contains backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/domain/
contains backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/controller/AihrSopController.java "/position-sop"
contains backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/controller/AihrSopController.java "@SaIgnore"
contains backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/controller/AihrDashboardController.java "@SaCheckLogin"
contains backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/controller/AihrDashboardController.java "@SaCheckRole"
contains backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/service/AihrSopSeedService.java 'firstNonBlank(position, "生活顾问")'
contains backend/ruoyi-modules/ruoyi-aihr/src/main/java/org/dromara/aihr/service/AihrSopSeedService.java "normalizeSearchSource"
contains frontend/src/views/train/practice.vue "practice_help"