企事业单位限制下本组织的数据才可以编辑

epmet-module/gov-org/gov-org-client/src/main/java/com/epmet/dto/form/EnterpriseFormDTO.java

@@ -17,6 +17,8 @@ public class EnterpriseFormDTO implements Serializable {
      * token赋值
      */
     private String customerId;
+    private String currentStaffId;
+
 
     /**
      * 网格Id【场所区域】

epmet-module/gov-org/gov-org-server/src/main/java/com/epmet/controller/IcEnterpriseController.java

@@ -66,6 +66,7 @@ public class IcEnterpriseController {
     @PostMapping("addOrUpdate")
     public Result addOrUpdate(@LoginUser TokenDto tokenDto, @RequestBody EnterpriseFormDTO formDTO) {
         formDTO.setCustomerId(tokenDto.getCustomerId());
+        formDTO.setCurrentStaffId(tokenDto.getUserId());
         ValidatorUtils.validateEntity(EnterpriseFormDTO.AddShow.class);
         Map<String, String> map = new HashMap<>();
         map.put("enterpriseId", icEnterpriseService.addOrUpdate(formDTO));

epmet-module/gov-org/gov-org-server/src/main/java/com/epmet/service/impl/IcEnterpriseServiceImpl.java

@@ -79,6 +79,14 @@ public class IcEnterpriseServiceImpl extends BaseServiceImpl<IcEnterpriseDao, Ic
             enterpriseEntity.setSourceType(CommonOperateTypeEnum.ADD.getCode());
             baseDao.insert(enterpriseEntity);
         }else{
+            //如果是编辑判断下权限
+            IcEnterpriseEntity origin=baseDao.selectById(formDTO.getEnterpriseId());
+            CustomerStaffInfoCacheResult staffInfo=CustomerStaffRedis.getStaffInfo(formDTO.getCustomerId(),formDTO.getCurrentStaffId());
+            if (!staffInfo.getAgencyId().equals(origin.getAgencyId())) {
+                AgencyInfoCache orginAgencyInfo = CustomerOrgRedis.getAgencyInfo(origin.getAgencyId());
+                String agencyName = null != orginAgencyInfo ? orginAgencyInfo.getOrganizationName() : StrConstant.EPMETY_STR;
+                throw new EpmetException(EpmetErrorCode.EPMET_COMMON_OPERATION_FAIL.getCode(), "", String.format("当前场所属于%s,您无权编辑", agencyName));
+            }
             enterpriseEntity.setId(formDTO.getEnterpriseId());
             baseDao.updateById(enterpriseEntity);
         }