theluyuan/xzs-mysql
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

修改权限

Browse Source
This commit is contained in:
luyuan 2021-03-23 11:48:58 +08:00
parent 40f7e34528
commit f1dacb165a
Signed by: theluyuan
GPG Key ID: A7972FD973317FF3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
source/xzs/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java
View File

@ -69,7 +69,7 @@ public class SecurityConfigurer {
.antMatchers(securityIgnoreUrls.toArray(ignores)).permitAll() .antMatchers(securityIgnoreUrls.toArray(ignores)).permitAll()
.antMatchers("/api/admin/**").hasRole(RoleEnum.ADMIN.getName()) .antMatchers("/api/admin/**").hasRole(RoleEnum.ADMIN.getName())
.antMatchers("/api/student/exampaper/answer/read/*").hasAnyRole(RoleEnum.ADMIN.getName(),RoleEnum.STUDENT.getName()) .antMatchers("/api/student/exampaper/answer/read/*").hasAnyRole(RoleEnum.ADMIN.getName(),RoleEnum.STUDENT.getName())
.antMatchers("/api/student/exampaper/answer/edit").hasAnyRole(RoleEnum.ADMIN.getName(),RoleEnum.STUDENT.getName()) .antMatchers("/api/student/exampaper/answer/edit").hasAnyRole(RoleEnum.ADMIN.getName())
.antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName()) .antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName())
.anyRequest().permitAll() .anyRequest().permitAll()
.and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler) .and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler)