From fb036b3ca33d483afbf83eede9fd806a2f77deaa Mon Sep 17 00:00:00 2001
From: futian.liu <liufutianyoo@163.com>
Date: 星期三, 06 十二月 2023 13:06:41 +0800
Subject: [PATCH] 代码优化、漏洞修复

---
 consum-base/src/main/java/com/consum/base/controller/FinSysTenantUserController.java |  116 +++++++++++++++++-----------------------------------------
 1 files changed, 34 insertions(+), 82 deletions(-)

diff --git a/consum-base/src/main/java/com/consum/base/controller/FinSysTenantUserController.java b/consum-base/src/main/java/com/consum/base/controller/FinSysTenantUserController.java
index ef81301..868cd29 100644
--- a/consum-base/src/main/java/com/consum/base/controller/FinSysTenantUserController.java
+++ b/consum-base/src/main/java/com/consum/base/controller/FinSysTenantUserController.java
@@ -25,7 +25,6 @@
 import org.springframework.web.multipart.MultipartFile;
 
 import com.alibaba.excel.EasyExcel;
-import com.alibaba.excel.annotation.ExcelProperty;
 import com.alibaba.excel.context.AnalysisContext;
 import com.alibaba.excel.event.AnalysisEventListener;
 import com.alibaba.excel.exception.ExcelDataConvertException;
@@ -34,6 +33,7 @@
 import com.consum.base.core.utils.MapperUtil;
 import com.consum.base.pojo.FinSysTenantUserSearchParam;
 import com.consum.base.pojo.FinSysTenantUserUpdParam;
+import com.consum.base.pojo.ImportUserParam;
 import com.consum.base.pojo.response.DepartmentVO;
 import com.consum.base.pojo.response.FinSysTenantUserVO;
 import com.consum.base.pojo.response.FinSysTenantVO;
@@ -298,80 +298,6 @@
         return ResponseValue.success(1);
     }
 
-    public static class ImportUserParam {
-
-        @ExcelProperty("鐢ㄦ埛濮撳悕")
-        private String userName;
-        @ExcelProperty("鐢ㄦ埛缂栧彿")
-        private String userCode;
-        @ExcelProperty("鎵嬫満鍙�")
-        private String userPhone;
-        @ExcelProperty("鎬у埆(1鐢凤紝2濂�)")
-        private Integer sex;
-        @ExcelProperty("鐢靛瓙閭")
-        private String email;
-        @ExcelProperty("椤哄簭鍙�")
-        private Long seq;
-        @ExcelProperty("瑙掕壊鍚嶇О")
-        private String roleName;
-
-        public String getUserName() {
-            return userName;
-        }
-
-        public void setUserName(String userName) {
-            this.userName = userName;
-        }
-
-        public String getUserCode() {
-            return userCode;
-        }
-
-        public void setUserCode(String userCode) {
-            this.userCode = userCode;
-        }
-
-        public String getUserPhone() {
-            return userPhone;
-        }
-
-        public void setUserPhone(String userPhone) {
-            this.userPhone = userPhone;
-        }
-
-        public Integer getSex() {
-            return sex;
-        }
-
-        public void setSex(Integer sex) {
-            this.sex = sex;
-        }
-
-        public String getEmail() {
-            return email;
-        }
-
-        public void setEmail(String email) {
-            this.email = email;
-        }
-
-        public Long getSeq() {
-            return seq;
-        }
-
-        public void setSeq(Long seq) {
-            this.seq = seq;
-        }
-
-        public String getRoleName() {
-            return roleName;
-        }
-
-        public void setRoleName(String roleName) {
-            this.roleName = roleName;
-        }
-    }
-
     /**
      * @Description 鎵归噺瀵煎叆鐢ㄦ埛
      * @Author jlq
@@ -557,7 +483,12 @@
      */
     @PostMapping("/update")
     @Transactional(rollbackFor = Exception.class)
-    public ResponseValue update(@RequestBody FinSysTenantUser user) {
+    public ResponseValue update() {
+        FinSysTenantUser user = CommonUtil.getObjFromReqBody(FinSysTenantUser.class);
+        FinSysTenantUser formInventoryParam = new FinSysTenantUser();
+        CommonUtil.copyProperties(user, formInventoryParam);
+        user = formInventoryParam;
+
         if (user == null) {
             return ResponseValue.error("鍙傛暟涓虹┖");
         }
@@ -611,7 +542,11 @@
      */
     @PostMapping("/updateStatus")
     @Transactional(rollbackFor = Exception.class)
-    public ResponseValue updateStatus(@RequestBody FinSysTenantUser user) {
+    public ResponseValue updateStatus() {
+        FinSysTenantUser user = CommonUtil.getObjFromReqBody(FinSysTenantUser.class);
+        FinSysTenantUser formInventoryParam = new FinSysTenantUser();
+        CommonUtil.copyProperties(user, formInventoryParam);
+        user = formInventoryParam;
         if (user == null) {
             return ResponseValue.error("鍙傛暟涓虹┖");
         }
@@ -739,11 +674,15 @@
     /**
      * 鏇存柊瑙掕壊鏉冮檺
      *
-     * @param user
      * @return
      */
     @PostMapping("/updRole")
-    public ResponseValue updRole(@RequestBody FinSysTenantUser user) {
+    public ResponseValue updRole() {
+        FinSysTenantUser user = CommonUtil.getObjFromReqBody(FinSysTenantUser.class);
+        FinSysTenantUser finSysTenantParam = new FinSysTenantUser();
+        CommonUtil.copyProperties(user, finSysTenantParam);
+        user = finSysTenantParam;
+
         if (user == null) {
             return ResponseValue.error("鍙傛暟涓虹┖");
         }
@@ -767,7 +706,11 @@
      */
     @PostMapping("/addSupplier")
     @Transactional(rollbackFor = Exception.class)
-    public ResponseValue addSupplier(@RequestBody FinSysTenantUser user) {
+    public ResponseValue addSupplier() {
+        FinSysTenantUser user = CommonUtil.getObjFromReqBody(FinSysTenantUser.class);
+        FinSysTenantUser finSysTenantParam = new FinSysTenantUser();
+        CommonUtil.copyProperties(user, finSysTenantParam);
+        user = finSysTenantParam;
         if (user == null) {
             return ResponseValue.error("鍙傛暟涓虹┖");
         }
@@ -879,7 +822,11 @@
 
     @PostMapping("/updatePerson")
     @Transactional(rollbackFor = Exception.class)
-    public ResponseValue updatePerson(@RequestBody FinSysTenantUser user) {
+    public ResponseValue updatePerson() {
+        FinSysTenantUser user = CommonUtil.getObjFromReqBody(FinSysTenantUser.class);
+        FinSysTenantUser finSysTenantParam = new FinSysTenantUser();
+        CommonUtil.copyProperties(user, finSysTenantParam);
+        user = finSysTenantParam;
         if (user == null) {
             return ResponseValue.error("鍙傛暟涓虹┖");
         }
@@ -924,7 +871,12 @@
      * @Description 淇敼瀵嗙爜
      */
     @PostMapping("/updatePassword")
-    public ResponseValue updatePassword(@RequestBody FinSysTenantUserUpdParam param) {
+    public ResponseValue updatePassword() {
+        FinSysTenantUserUpdParam param = CommonUtil.getObjFromReqBody(FinSysTenantUserUpdParam.class);
+        FinSysTenantUserUpdParam finSysTenantParam = new FinSysTenantUserUpdParam();
+        CommonUtil.copyProperties(param, finSysTenantParam);
+        param = finSysTenantParam;
+
         String oldMixPd = param.getOldMixPd();
         String newMixPd = param.getNewMixPd();
         String btnMixPd = param.getBtnMixPd();

--
Gitblit v1.9.1