漏洞修复-[严重] fs-admin 处方信息全部无权限保护

fs-admin/src/main/java/com/fs/his/controller/FsDoctorPrescribeController.java

@@ -40,6 +40,7 @@ public class FsDoctorPrescribeController extends BaseController
      */
 
     @GetMapping("/list")
+    @PreAuthorize("@ss.hasPermi('his:doctorPrescribe:list')")
     public TableDataInfo list(FsDoctorPrescribe fsDoctorPrescribe)
     {
         startPage();

fs-admin/src/main/java/com/fs/his/controller/FsDoctorPrescribeDrugController.java

@@ -38,6 +38,7 @@ public class FsDoctorPrescribeDrugController extends BaseController
      */
 
     @GetMapping("/list")
+    @PreAuthorize("@ss.hasPermi('his:doctorPrescribeDrug:list')")
     public TableDataInfo list(FsDoctorPrescribeDrug fsDoctorPrescribeDrug)
     {
         startPage();

fs-admin/src/main/java/com/fs/his/controller/FsPrescribeController.java

@@ -72,6 +72,7 @@ public class FsPrescribeController extends BaseController
     /**
      * 查询处方列表
      */
+    @PreAuthorize("@ss.hasPermi('his:prescribe:list')")
     @GetMapping("/list")
     public TableDataInfo list(FsPrescribeParam fsPrescribe)
     {
@@ -153,6 +154,7 @@ public class FsPrescribeController extends BaseController
      * 获取处方详细信息
      */
     @Transactional(rollbackFor = Exception.class)
+    @PreAuthorize("@ss.hasPermi('his:prescribe:query')")
     @GetMapping(value = "/{prescribeId}")
     public AjaxResult getInfo(@PathVariable("prescribeId") Long prescribeId)
     {
@@ -170,6 +172,7 @@ public class FsPrescribeController extends BaseController
 
     //获取审核记录数据
     @GetMapping(value = "/recordList/{prescribeId}")
+    @PreAuthorize("@ss.hasPermi('his:prescribe:recordList')")
     public AjaxResult selectRecordListByPrescribeId(@PathVariable("prescribeId") Long prescribeId){
         return AjaxResult.success(prescribeRecordService.selectRecordListByPrescribeId(prescribeId));
     }
@@ -190,6 +193,7 @@ public class FsPrescribeController extends BaseController
      */
 
     @GetMapping("/Drug/{prescribeId}")
+    @PreAuthorize("@ss.hasPermi('his:prescribe:drug')")
     public AjaxResult getDrugInfo(@PathVariable("prescribeId") Long prescribeId)
     {
         return AjaxResult.success(fsPrescribeService.selectFsPrescribeDrugByPrescribeIdVO(prescribeId));