增加后台权限

mp-admin/src/main/java/com/qs/mp/web/controller/api/admin/ChannelOrderMgrController.java

@@ -12,9 +12,11 @@ import com.qs.mp.channel.domain.vo.ChannelOrderVO;
 import com.qs.mp.channel.service.IChannelOrderDetailService;
 import com.qs.mp.channel.service.IChannelOrderItemService;
 import com.qs.mp.channel.service.IChannelOrderService;
+import com.qs.mp.common.annotation.Log;
 import com.qs.mp.common.core.domain.AjaxResult;
 import com.qs.mp.common.core.page.TableDataInfo;
 import com.qs.mp.common.core.redis.RedisCache;
+import com.qs.mp.common.enums.BusinessType;
 import com.qs.mp.common.enums.ErrorCodeEnum;
 import com.qs.mp.user.domain.UserDeliverOrderItem;
 import com.qs.mp.web.controller.common.BaseApiController;
@@ -106,6 +108,7 @@ public class ChannelOrderMgrController extends BaseApiController {
   /**
    * 订单发货
    */
+  @Log(title = "经销商订单发货", businessType = BusinessType.UPDATE)
   @PostMapping("/ship")
   @ApiOperation(value = "订单发货" , notes = "在订单发货页面提交")
   @PreAuthorize("@ss.hasPermi('order:channel:ship')")

mp-admin/src/main/java/com/qs/mp/web/controller/api/admin/ChannelWithdrawMgrController.java

@@ -11,9 +11,11 @@ import com.qs.mp.channel.domain.vo.ChannelWithdrawVO;
 import com.qs.mp.channel.service.IChannelOrderItemService;
 import com.qs.mp.channel.service.IChannelOrderService;
 import com.qs.mp.channel.service.IChannelWithdrawService;
+import com.qs.mp.common.annotation.Log;
 import com.qs.mp.common.core.domain.AjaxResult;
 import com.qs.mp.common.core.page.TableDataInfo;
 import com.qs.mp.common.core.redis.RedisCache;
+import com.qs.mp.common.enums.BusinessType;
 import com.qs.mp.common.enums.ChannelWithdrawStatusEnum;
 import com.qs.mp.common.enums.ErrorCodeEnum;
 import com.qs.mp.common.utils.DateUtils;
@@ -26,6 +28,7 @@ import lombok.AllArgsConstructor;
 import ma.glasnost.orika.MapperFacade;
 import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -49,6 +52,7 @@ public class ChannelWithdrawMgrController extends BaseApiController {
    */
   @PostMapping("/list")
   @ApiOperation(value = "提现申请列表" , notes = "获取所有提现信息")
+  @PreAuthorize("@ss.hasPermi('finance:withdraw:list')")
   public TableDataInfo list(@RequestBody JSONObject param) {
     Integer status = param.getInteger("status");
     String name = param.getString("name");
@@ -68,6 +72,7 @@ public class ChannelWithdrawMgrController extends BaseApiController {
    * 提现申请详情
    */
   @PostMapping("/detail")
+  @PreAuthorize("@ss.hasPermi('finance:withdraw:query')")
   @ApiOperation(value = "申请详情" , notes = "在提现列表页面查看详情")
   public AjaxResult query(@RequestBody JSONObject param) {
     Long id = param.getLong("id");
@@ -82,8 +87,10 @@ public class ChannelWithdrawMgrController extends BaseApiController {
   /**
    * 提现申请审核结果
    */
+  @Log(title = "提现申请审核", businessType = BusinessType.UPDATE)
   @PostMapping("/verify")
   @ApiOperation(value = "申请审核" , notes = "在提现详情页面审核")
+  @PreAuthorize("@ss.hasPermi('finance:withdraw:verify')")
   public AjaxResult verify(@RequestBody ChannelWithdraw withdraw) {
     if (null == withdraw.getId() || null == withdraw.getStatus()) {
       return error(ErrorCodeEnum.ERROR_CODE_1001);

mp-admin/src/main/java/com/qs/mp/web/controller/api/admin/UserDeliverOrderMgrController.java

@@ -131,6 +131,7 @@ public class UserDeliverOrderMgrController extends BaseApiController {
 	/**
 	 * 订单发货
 	 */
+	@Log(title = "用户提货订单发货", businessType = BusinessType.UPDATE)
 	@PostMapping("/ship")
 	@ApiOperation(value = "订单发货", notes = "在订单发货页面提交")
 	@PreAuthorize("@ss.hasPermi('order:deliver:ship')")
@@ -158,8 +159,9 @@ public class UserDeliverOrderMgrController extends BaseApiController {
 		return AjaxResult.error("发货失败");
 	}
 
-	@Log(title = "导出", businessType = BusinessType.EXPORT)
+	@Log(title = "提货订单导出", businessType = BusinessType.EXPORT)
 	@PostMapping("/export")
+	@PreAuthorize("@ss.hasPermi('order:deliver:export')")
 	public AjaxResult export(@RequestBody UserDeliverOrderQueryParam queryParam) {
 
 		List<DeliverOrderExcel> excelList = new ArrayList<DeliverOrderExcel>();