用户兑换订单权限相关

mp-admin/src/main/java/com/qs/mp/web/controller/api/admin/UserExchangeOrderMgrController.java

@@ -21,6 +21,7 @@ import io.swagger.annotations.ApiResponses;
 import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.BeanUtils;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -47,6 +48,7 @@ public class UserExchangeOrderMgrController extends BaseApiController {
 
     @PostMapping("/list")
     @ApiOperation("用户兑换订单列表")
+    @PreAuthorize("@ss.hasPermi('order:exchange:list')")
     @ApiResponses(
             @ApiResponse(code = 200, message = "成功", response = UserExchangeOrderVO.class)
     )
@@ -81,6 +83,7 @@ public class UserExchangeOrderMgrController extends BaseApiController {
     }
 
     @PostMapping("/export")
+    @PreAuthorize("@ss.hasPermi('order:exchange:export')")
     @ApiOperation("用户兑换订单导出")
     public AjaxResult export(@RequestBody UserExchangeOrderQueryParam userExchangeOrderQueryParam) {
         QueryWrapper<UserExchangeOrder> queryWrapper = new QueryWrapper<>();