冲正权限

src/main/java/thyyxxk/webserver/controller/medicalinsurance/SiManageController.java

@@ -50,7 +50,6 @@ public class SiManageController {
         return service.revokeCatalogueContrast(prm);
     }
 
-    @PassToken
     @PostMapping("/autoRecoveryTrade")
     public ResultVo<String> autoRecoveryTrade(@RequestBody AtoRcvTrd atoRcvTrd) {
         return service.autoRecoveryTrade(atoRcvTrd);

src/main/java/thyyxxk/webserver/dao/his/medicalinsurance/SiManageDao.java

@@ -53,4 +53,7 @@ public interface SiManageDao {
                                               @Param("clrOptins") String clrOptins,
                                               @Param("start") String start,
                                               @Param("end") String end);
+
+    @Select("select count(1) from dj_user_role where user_code=#{code} and role_id=41")
+    Integer recoveryTradePermission(@Param("code") String code);
 }

src/main/java/thyyxxk/webserver/service/medicalinsurance/SiManageService.java

@@ -138,6 +138,10 @@ public class SiManageService {
     }
 
     public ResultVo<String> autoRecoveryTrade(AtoRcvTrd atoRcvTrd) {
+        Integer recoveryTradePermission = dao.recoveryTradePermission(TokenUtil.getTokenUserId());
+        if (null == recoveryTradePermission || recoveryTradePermission == 0) {
+            return ResultVoUtil.fail(ExceptionEnum.LOGICAL_ERROR, "您没有冲正交易的权限！");
+        }
         JSONObject input = exec.makeTradeHeader(SiFunction.AUTO_RECOVERY_TRADE);
         String ref = JSONObject.toJSONString(atoRcvTrd);
         input.getJSONObject("input").put("data", JSONObject.parseObject(ref));