加入超管操作权限

server/src/main/java/com/qmth/jkserver/controller/system/BasicSchoolController.java

@@ -76,11 +76,11 @@ public class BasicSchoolController {
     @RequestMapping(value = "/sync/save", method = RequestMethod.POST)
     @Transactional
     public Object sysadminSyncSave(@Valid @RequestBody SysAdminSetParam sysAdminSetParam, BindingResult bindingResult) {
+        SystemConstant.superOper();
         if (bindingResult.hasErrors()) {
             return ResultUtil.error(bindingResult.getAllErrors().get(0).getDefaultMessage());
         }
         Optional.ofNullable(sysAdminSetParam.getParam()).orElseThrow(() -> new JkServerException("同步配置地址不能为空"));
-        SystemConstant.superOper();
 
         List<SysConfigResult> sysConfigResultList = sysAdminSetParam.getParam();
         List<SysConfig> sysConfigList = new ArrayList<>();

server/src/main/java/com/qmth/jkserver/controller/system/TSAuthController.java

@@ -56,10 +56,10 @@ public class TSAuthController {
     @RequestMapping(value = "/sync/org", method = RequestMethod.POST)
     @ApiResponses({@ApiResponse(code = 200, message = "机构信息", response = Object.class)})
     public Object syncOrg() throws Exception {
+        SystemConstant.superOper();
         if (Objects.isNull(solarProperties.getAccessKey()) && Objects.isNull(solarProperties.getAccessSecret())) {
             throw new JkServerException("key和secret为空");
         }
-        SystemConstant.superOper();
         AppInfo appInfo = solarService.update(solarProperties.getAccessKey(), solarProperties.getAccessSecret());
         if (Objects.isNull(appInfo)) {
             throw new JkServerException("同步机构失败");
@@ -73,8 +73,8 @@ public class TSAuthController {
     @ApiResponses({@ApiResponse(code = 200, message = "导出硬件信息", response = Object.class)})
     @RequestMapping(value = "/export/device/info", method = RequestMethod.POST)
     public void info() {
-        SystemConstant.superOper();
         try {
+            SystemConstant.superOper();
             HttpServletResponse response = ServletUtil.getResponse();
             response.setHeader("Access-Control-Expose-Headers", "Content-Disposition");
             response.setHeader("Content-Disposition", "attachment; filename=" + SystemConstant.urlEncode("device.info"));