From a1b85ef72062ca80db35546e4216dd564f3e0f57 Mon Sep 17 00:00:00 2001
From: WangHan <wwh_work@126,com>
Date: 星期四, 03 四月 2025 15:58:19 +0800
Subject: [PATCH] 问题与漏洞修改

---
 consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java |   38 +++++++++++++++++++++++++-------------
 1 files changed, 25 insertions(+), 13 deletions(-)

diff --git a/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java b/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java
index d19a2f3..98ba61f 100644
--- a/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java
+++ b/consum-base/src/main/java/com/consum/base/controller/BaseGoodsTemplateController.java
@@ -43,17 +43,12 @@
 import com.walker.infrastructure.utils.StringUtils;
 import com.walker.web.ResponseValue;
 
-import io.swagger.annotations.Api;
-import io.swagger.annotations.ApiImplicitParam;
-import io.swagger.annotations.ApiImplicitParams;
-import io.swagger.annotations.ApiOperation;
-
 /**
  * @Description 鐗╁搧妯℃澘
  * @Author 鍗㈠簡闃�
  * @Date 2023/10/24
  */
-@Api(value = "鐗╁搧妯℃澘", tags = "鐗╁搧妯℃澘")
+// @Api(value = "鐗╁搧妯℃澘", tags = "鐗╁搧妯℃澘")
 @RestController
 @RequestMapping("/pc/base/goods/template")
 public class BaseGoodsTemplateController extends BaseController {
@@ -97,6 +92,15 @@
         }
         if (StringUtils.isEmpty(param.getGoodsName())) {
             return ResponseValue.error("鐗╁搧鍚嶇О涓虹┖");
+        }
+        BaseCategory baseCategory = new BaseCategory();
+        baseCategory.setId(param2.getCategoryId());
+        BaseCategory baseCategory1 = this.baseCategoryService.get(baseCategory);
+        if (baseCategory1 == null) {
+            return ResponseValue.error("鍒嗙被涓嶅瓨鍦�");
+        }
+        if (baseCategory1.getLevels() != 3) {
+            return ResponseValue.error("鍒嗙被涓嶆纭�");
         }
         // 鍒ゆ柇鍚屼竴鍒嗙被涓嬬殑鐗╁搧鍚嶇О鏄惁閲嶅
         BaseGoodsTemplate goodsTemplate =
@@ -170,7 +174,15 @@
         if (CollectionUtils.isEmpty(models)) {
             return ResponseValue.error("鐗╁搧鍨嬪彿涓虹┖");
         }
-
+        BaseCategory baseCategory = new BaseCategory();
+        baseCategory.setId(param2.getCategoryId());
+        BaseCategory baseCategory1 = this.baseCategoryService.get(baseCategory);
+        if (baseCategory1 == null) {
+            return ResponseValue.error("鍒嗙被涓嶅瓨鍦�");
+        }
+        if (baseCategory1.getLevels() != 3) {
+            return ResponseValue.error("鍒嗙被涓嶆纭�");
+        }
         int num = this.baseGoodsTemplateService.updateBaseGoodsTemplate(param);
         return num > 0 ? ResponseValue.success(1) : ResponseValue.error("缂栬緫澶辫触锛�");
     }
@@ -255,12 +267,12 @@
         return ResponseValue.success("鏌ヨ鎴愬姛!", list);
     }
 
-    @ApiOperation(value = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�", notes = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�")
-    @ApiImplicitParams({
-            @ApiImplicitParam(name = "agencyId", value = "鐖剁骇鏈烘瀯id", required = true, dataType = "java.lang.Long",
-                    paramType = "query"),
-            @ApiImplicitParam(name = "categoryId", value = "鍒嗙被id", required = true, dataType = "Long",
-                    paramType = "query")})
+//    // @ApiOperation(value = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�", notes = "璋冩嫧鏌ヨ鏈烘瀯涓嬫墍鏈変粨搴撲笅鐨勫垎绫绘ā鏉夸俊鎭�")
+//    @ApiImplicitParams({
+//            @ApiImplicitParam(name = "agencyId", value = "鐖剁骇鏈烘瀯id", required = true, dataType = "java.lang.Long",
+//                    paramType = "query"),
+//            @ApiImplicitParam(name = "categoryId", value = "鍒嗙被id", required = true, dataType = "Long",
+//                    paramType = "query")})
     @GetMapping("/query/warehouse/goods")
     public ResponseValue queryWarehouseGoods(Long agencyId, Long categoryId) {
 

--
Gitblit v1.9.1