From 03a9cd21c1589e98978dc7296bb7fb48f1dcd7fe Mon Sep 17 00:00:00 2001
From: 龚焕茏 <2842157468@qq.com>
Date: 星期五, 17 五月 2024 16:13:45 +0800
Subject: [PATCH] feat：创建试卷时新增选择用户查询条件
---
src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java | 23 ++++++++++++++---------
1 files changed, 14 insertions(+), 9 deletions(-)
diff --git a/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java b/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java
index c0dace0..1ac3145 100644
--- a/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java
+++ b/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java
@@ -6,6 +6,7 @@
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
@@ -18,12 +19,7 @@
import java.util.List;
-/**
- * @version 3.5.0
- * @description: The type Security configurer.
- * Copyright (C), 2020-2021, 姝︽眽鎬濈淮璺宠穬绉戞妧鏈夐檺鍏徃
- * @date 2021/12/25 9:45
- */
+
@Configuration
@EnableWebSecurity
public class SecurityConfigurer {
@@ -84,8 +80,18 @@
.and().authenticationProvider(restAuthenticationProvider)
.authorizeRequests()
.antMatchers(securityIgnoreUrls.toArray(ignores)).permitAll()
- .antMatchers("/api/admin/**").hasRole(RoleEnum.ADMIN.getName())
- .antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName())
+ .antMatchers("/api/admin/department/list",
+ "/api/admin/video/getList",
+ "/api/admin/user/conversion",
+ "/api/admin/examPaperGrade/updates",
+ "/api/admin/question/download/question/import/temp",
+ "/api/admin/question/question/import"
+ ).permitAll()
+ .antMatchers("/files/**").permitAll()
+ // 闈欐�佽祫婧愶紝鍙尶鍚嶈闂�
+ // todo 璁剧疆閮ㄩ棬绠＄悊鍛樺彲浠ョ湅鐨勮姹�
+ .antMatchers("/api/admin/**").hasAnyRole(RoleEnum.ADMIN.getName(), RoleEnum.DEPT_ADMIN.getName())
+ .antMatchers("/api/student/**").hasAnyRole(RoleEnum.STUDENT.getName(), RoleEnum.DEPT_ADMIN.getName())
.anyRequest().permitAll()
.and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler)
.and().formLogin().successHandler(restAuthenticationSuccessHandler).failureHandler(restAuthenticationFailureHandler)
@@ -94,7 +100,6 @@
.and().csrf().disable()
.cors();
}
-
/**
* Cors configuration source cors configuration source.
--
Gitblit v1.8.0