From 4876c6adb1ab2767cbc395de5e94e82828329a5b Mon Sep 17 00:00:00 2001 From: zhaol <15900249928@163.com> Date: Thu, 6 Feb 2025 11:11:00 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9D=83=E9=99=90=E6=95=B0=E6=8D=AE=E5=A2=9E?= =?UTF-8?q?=E5=8A=A0=E5=88=A4=E6=96=AD=E5=8C=85=E5=90=AB=E7=89=B9=E5=AE=9A?= =?UTF-8?q?=E5=B2=97=E4=BD=8D=E5=8F=82=E6=95=B0=E6=95=B0=E6=8D=AE=EF=BC=8C?= =?UTF-8?q?=E5=88=99=E6=94=BE=E5=BC=80=E6=9D=83=E9=99=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../pal/repository/PALRepositoryQueryAPIManager.java | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/com.actionsoft.apps.coe.pal/src/com/actionsoft/apps/coe/pal/pal/repository/PALRepositoryQueryAPIManager.java b/com.actionsoft.apps.coe.pal/src/com/actionsoft/apps/coe/pal/pal/repository/PALRepositoryQueryAPIManager.java index c86c3f65..b3f876ec 100755 --- a/com.actionsoft.apps.coe.pal/src/com/actionsoft/apps/coe/pal/pal/repository/PALRepositoryQueryAPIManager.java +++ b/com.actionsoft.apps.coe.pal/src/com/actionsoft/apps/coe/pal/pal/repository/PALRepositoryQueryAPIManager.java @@ -5378,10 +5378,7 @@ public class PALRepositoryQueryAPIManager { */ public String getPublishPortalHtml(UserContext uc, String uuid, String taskId, boolean checkPublish, boolean upVisit) { - //权限校验 - // if (!CoeCooperationAPIManager.getInstance().hasRepositoryPermision(uuid)) { - // return AlertWindow.getWarningMessagePage("打开失败", "无该文件查看权限"); - // } + //三员管理,文件密级权限校验 if (HighSecurityUtil.isON() && HighSecurityUtil.fileSecuritySwitch()) { @@ -5540,6 +5537,8 @@ public class PALRepositoryQueryAPIManager { } public boolean hasAccessPortalDesignerPerm(UserContext uc, PALRepositoryModel model) { + + String depViewPer = SDK.getAppAPI().getProperty("com.awspaas.user.apps.yili.reportform", "Dep_View_Per"); String newBoName = "BO_ACT_PUBLISH_PERM_SCOPE"; BO bo = SDK.getBOAPI().query(newBoName).addQuery("PALVERSIONID=", model.getVersionId()).detail(); if (bo == null) { @@ -5554,6 +5553,10 @@ public class PALRepositoryQueryAPIManager { if (roleId.equals(uc.getRoleModel().getId())) { return true; } + //如果当前登录用户账户包含参数内账户则允许查看 + if(depViewPer.contains(uc.getUID())){ + return true; + } // 兼职 List adminUserMapModels = UserMapCache.getMapListOfUser(uc.getUID()); for (UserMapModel mapModel : adminUserMapModels) {