|
@@ -515,7 +515,9 @@ public class RolePrivilegeController extends ControllerSupport {
|
|
|
Long privilegeGroupId = req.getPrivilegeGroupId();
|
|
|
Set<Long> privilegeIdSet = req.getPrivilegeIdSet();
|
|
|
|
|
|
- if (!isSuperAdmin()) {
|
|
|
+ User accessUser = getAccessUser();
|
|
|
+ Long userRootOrgId = accessUser.getRootOrgId();
|
|
|
+ if ((!rootOrgId.equals(userRootOrgId)) && !isSuperAdmin()) {
|
|
|
throw new StatusException("012601", "非法请求");
|
|
|
}
|
|
|
|