clunt
/
RuoYi-Cloud
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

resetPwd、changeStatus 只修改指定的参数，防止把其他参数修改了

This commit is contained in:
duandazhi 2021-07-28 19:20:42 +08:00
parent f6c5c91eb1
commit 45ae58f39b
1 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
ruoyi-modules/ruoyi-system/src/main/java/com/ruoyi/system/controller/SysUserController.java
View File

@ -38,7 +38,7 @@ import com.ruoyi.system.service.ISysUserService;
/** /**
* 用户信息 * 用户信息
* *
* @author ruoyi * @author ruoyi
*/ */
@RestController @RestController
@ -122,7 +122,7 @@ public class SysUserController extends BaseController
/** /**
* 获取用户信息 * 获取用户信息
* *
* @return 用户信息 * @return 用户信息
*/ */
@GetMapping("getInfo") @GetMapping("getInfo")
@ -234,9 +234,13 @@ public class SysUserController extends BaseController
public AjaxResult resetPwd(@RequestBody SysUser user) public AjaxResult resetPwd(@RequestBody SysUser user)
{ {
userService.checkUserAllowed(user); userService.checkUserAllowed(user);
user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
user.setUpdateBy(SecurityUtils.getUsername()); //只修改特定的属性 dazer
return toAjax(userService.resetPwd(user)); SysUser newSyuser = new SysUser();
newSyuser.setUserId(user.getUserId());
newSyuser.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
newSyuser.setUpdateBy(SecurityUtils.getUsername());
return toAjax(userService.resetPwd(newSyuser));
} }
/** /**
@ -248,8 +252,13 @@ public class SysUserController extends BaseController
public AjaxResult changeStatus(@RequestBody SysUser user) public AjaxResult changeStatus(@RequestBody SysUser user)
{ {
userService.checkUserAllowed(user); userService.checkUserAllowed(user);
user.setUpdateBy(SecurityUtils.getUsername());
return toAjax(userService.updateUserStatus(user)); //只修改特定的属性 dazer
SysUser newSyuser = new SysUser();
newSyuser.setUserId(user.getUserId());
newSyuser.setStatus(user.getStatus());
newSyuser.setUpdateBy(SecurityUtils.getUsername());
return toAjax(userService.updateUserStatus(newSyuser));
} }
/** /**