From 03a9cd21c1589e98978dc7296bb7fb48f1dcd7fe Mon Sep 17 00:00:00 2001 From: 龚焕茏 <2842157468@qq.com> Date: 星期五, 17 五月 2024 16:13:45 +0800 Subject: [PATCH] feat:创建试卷时新增选择用户查询条件 --- src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java | 5 ++--- 1 files changed, 2 insertions(+), 3 deletions(-) diff --git a/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java b/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java index c2de944..1ac3145 100644 --- a/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java +++ b/src/main/java/com/mindskip/xzs/configuration/spring/security/SecurityConfigurer.java @@ -85,14 +85,13 @@ "/api/admin/user/conversion", "/api/admin/examPaperGrade/updates", "/api/admin/question/download/question/import/temp", - "/api/admin/question/question/import", - "/api/upload/**" + "/api/admin/question/question/import" ).permitAll() .antMatchers("/files/**").permitAll() // 闈欐�佽祫婧愶紝鍙尶鍚嶈闂� // todo 璁剧疆閮ㄩ棬绠$悊鍛樺彲浠ョ湅鐨勮姹� .antMatchers("/api/admin/**").hasAnyRole(RoleEnum.ADMIN.getName(), RoleEnum.DEPT_ADMIN.getName()) - .antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName()) + .antMatchers("/api/student/**").hasAnyRole(RoleEnum.STUDENT.getName(), RoleEnum.DEPT_ADMIN.getName()) .anyRequest().permitAll() .and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler) .and().formLogin().successHandler(restAuthenticationSuccessHandler).failureHandler(restAuthenticationFailureHandler) -- Gitblit v1.8.0