[update] #todo 129741，將顧問細項的存取權改成公開

wayne

2021-11-08 4ea357d26e985ffff9b4bdad4847a7acaf790306

[update] #todo 129741，將顧問細項的存取權改成公開

 pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java

@@ -84,6 +84,7 @@
            .antMatchers("/api/account/reset-password/init").permitAll()
            .antMatchers("/api/account/reset-password/finish").permitAll()
            .antMatchers("/api/consultant/recommend").permitAll()
            .antMatchers("/api/consultant/detail/**").permitAll()
            .antMatchers("/api/admin/**").hasAuthority(AuthoritiesConstants.ADMIN)
            .antMatchers("/api/**").authenticated()
            .antMatchers("/websocket/**").authenticated()

 pamapi/src/main/java/com/pollex/pam/web/rest/ConsultantResource.java

@@ -4,6 +4,7 @@
import com.pollex.pam.service.dto.*;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.web.bind.annotation.*;

import java.util.List;
@@ -48,7 +49,7 @@
        return new ResponseEntity<>(queryResult, HttpStatus.OK);
    }

    @GetMapping("/{agentNo}")
    @GetMapping("/detail/{agentNo}")
    public ResponseEntity<ConsultantDetailDTO> getConsultantDetail(@PathVariable String agentNo) {
        ConsultantDetailDTO result = consultantService.getConsultantDetail(agentNo);
        return new ResponseEntity<>(result, HttpStatus.OK);