xiatian 5 سال پیش
والد
کامیت
5cca37a69c

+ 3 - 1
examcloud-core-basic-api-provider/src/main/java/cn/com/qmth/examcloud/core/basic/api/controller/RolePrivilegeController.java

@@ -515,7 +515,9 @@ public class RolePrivilegeController extends ControllerSupport {
 		Long privilegeGroupId = req.getPrivilegeGroupId();
 		Set<Long> privilegeIdSet = req.getPrivilegeIdSet();
 
-		if (!isSuperAdmin()) {
+		User accessUser = getAccessUser();
+        Long userRootOrgId = accessUser.getRootOrgId();
+		if ((!rootOrgId.equals(userRootOrgId)) && !isSuperAdmin()) {
 			throw new StatusException("012601", "非法请求");
 		}