兑奖页面判断用户权限

mp-admin/src/main/java/com/qs/mp/web/controller/api/user/UserTicketController.java

@@ -119,14 +119,7 @@ public class UserTicketController extends BaseApiController {
       return AjaxResult.error(ErrorCodeEnum.ERROR_CODE_1017);
     }*/
 
-    // 已付款的盲票，需要校验当前用户是否有权限查看
-    /*if (ticket.getStatus() == TicketStatusEnum.ACTIVATED) {
-      Long userId = SecurityUtils.getLoginUser().getUserId();
-      UserTicketOrderItem orderItem = userTicketOrderItemService.queryFinishedOrderItem(userId, ticket.getTicketId());
-      if (null == orderItem) {
-        return AjaxResult.error(ErrorCodeEnum.ERROR_CODE_1018);
-      }
-    }*/
+
 
     TicketBox ticketBox = ticketBoxService.getById(ticket.getBoxId());
 
@@ -176,6 +169,12 @@ public class UserTicketController extends BaseApiController {
     if (ticket.getStatus() != TicketStatusEnum.ACTIVATED) {
       return AjaxResult.error(ErrorCodeEnum.ERROR_CODE_1019);
     }
+    // 已付款的盲票，需要校验当前用户是否有权限查看
+    UserTicketOrderItem orderItem = userTicketOrderItemService.queryFinishedOrderItem(userId, ticket.getTicketId());
+    if (null == orderItem) {
+      return AjaxResult.error(ErrorCodeEnum.ERROR_CODE_1018);
+    }
+
     List<TicketAwardsPrize> ticketAwardsPrizes = userHitPrizeService.listPrize(ticket, userId);
     JSONObject jsonObject = new JSONObject();
     jsonObject.put("prizeList", ticketAwardsPrizes);