clunt
/
RuoYi-Cloud
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

resetPwd、changeStatus 只修改指定的参数，防止把其他参数修改了

This commit is contained in:
duandazhi 2021-07-28 19:20:42 +08:00
parent f6c5c91eb1
commit 45ae58f39b
1 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
ruoyi-modules/ruoyi-system/src/main/java/com/ruoyi/system/controller/SysUserController.java
View File

@ -234,9 +234,13 @@ public class SysUserController extends BaseController
public AjaxResult resetPwd(@RequestBody SysUser user) public AjaxResult resetPwd(@RequestBody SysUser user)
{ {
userService.checkUserAllowed(user); userService.checkUserAllowed(user);
user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
user.setUpdateBy(SecurityUtils.getUsername()); //只修改特定的属性 dazer
return toAjax(userService.resetPwd(user)); SysUser newSyuser = new SysUser();
newSyuser.setUserId(user.getUserId());
newSyuser.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
newSyuser.setUpdateBy(SecurityUtils.getUsername());
return toAjax(userService.resetPwd(newSyuser));
} }
/** /**
@ -248,8 +252,13 @@ public class SysUserController extends BaseController
public AjaxResult changeStatus(@RequestBody SysUser user) public AjaxResult changeStatus(@RequestBody SysUser user)
{ {
userService.checkUserAllowed(user); userService.checkUserAllowed(user);
user.setUpdateBy(SecurityUtils.getUsername());
return toAjax(userService.updateUserStatus(user)); //只修改特定的属性 dazer
SysUser newSyuser = new SysUser();
newSyuser.setUserId(user.getUserId());
newSyuser.setStatus(user.getStatus());
newSyuser.setUpdateBy(SecurityUtils.getUsername());
return toAjax(userService.updateUserStatus(newSyuser));
} }
/** /**