From 4ea357d26e985ffff9b4bdad4847a7acaf790306 Mon Sep 17 00:00:00 2001
From: wayne <wayne8692wayne8692@gmail.com>
Date: 星期一, 08 十一月 2021 11:26:12 +0800
Subject: [PATCH] [update] #todo 129741，將顧問細項的存取權改成公開
---
pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java | 1 +
pamapi/src/main/java/com/pollex/pam/web/rest/ConsultantResource.java | 3 ++-
2 files changed, 3 insertions(+), 1 deletions(-)
diff --git a/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java b/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java
index f548053..8dd7b59 100644
--- a/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java
+++ b/pamapi/src/main/java/com/pollex/pam/config/SecurityConfiguration.java
@@ -84,6 +84,7 @@
.antMatchers("/api/account/reset-password/init").permitAll()
.antMatchers("/api/account/reset-password/finish").permitAll()
.antMatchers("/api/consultant/recommend").permitAll()
+ .antMatchers("/api/consultant/detail/**").permitAll()
.antMatchers("/api/admin/**").hasAuthority(AuthoritiesConstants.ADMIN)
.antMatchers("/api/**").authenticated()
.antMatchers("/websocket/**").authenticated()
diff --git a/pamapi/src/main/java/com/pollex/pam/web/rest/ConsultantResource.java b/pamapi/src/main/java/com/pollex/pam/web/rest/ConsultantResource.java
index 4b1193d..0bdd690 100644
--- a/pamapi/src/main/java/com/pollex/pam/web/rest/ConsultantResource.java
+++ b/pamapi/src/main/java/com/pollex/pam/web/rest/ConsultantResource.java
@@ -4,6 +4,7 @@
import com.pollex.pam.service.dto.*;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.web.bind.annotation.*;
import java.util.List;
@@ -48,7 +49,7 @@
return new ResponseEntity<>(queryResult, HttpStatus.OK);
}
- @GetMapping("/{agentNo}")
+ @GetMapping("/detail/{agentNo}")
public ResponseEntity<ConsultantDetailDTO> getConsultantDetail(@PathVariable String agentNo) {
ConsultantDetailDTO result = consultantService.getConsultantDetail(agentNo);
return new ResponseEntity<>(result, HttpStatus.OK);
--
Gitblit v1.8.0