漏洞修复-Doctor App 处方详情 - 无医生归属校验（医生侧IDOR）

fs-doctor-app/src/main/java/com/fs/app/controller/PrescribeController.java

@@ -100,6 +100,9 @@ public class PrescribeController extends  AppBaseController {
     public R getPrescribeById(@RequestParam("prescribeId")Long prescribeId)
     {
         FsPrescribe prescribe=prescribeService.selectFsPrescribeByPrescribeId(prescribeId);
+        if(!prescribe.getDoctorId().equals(Long.parseLong(getDoctorId()))){
+            return R.error("非法操作");
+        }
         FsPrescribeDrug map=new FsPrescribeDrug();
         map.setPrescribeId(prescribeId);
         List<FsPrescribeDrug> drugs=prescribeDrugService.selectFsPrescribeDrugList(map);