浏览代码

Merge remote-tracking branch 'origin/master'

lideyin 5 年之前
父节点
当前提交
e527e7c155

+ 3 - 1
examcloud-core-basic-api-provider/src/main/java/cn/com/qmth/examcloud/core/basic/api/controller/RolePrivilegeController.java

@@ -515,7 +515,9 @@ public class RolePrivilegeController extends ControllerSupport {
 		Long privilegeGroupId = req.getPrivilegeGroupId();
 		Set<Long> privilegeIdSet = req.getPrivilegeIdSet();
 
-		if (!isSuperAdmin()) {
+		User accessUser = getAccessUser();
+        Long userRootOrgId = accessUser.getRootOrgId();
+		if ((!rootOrgId.equals(userRootOrgId)) && !isSuperAdmin()) {
 			throw new StatusException("012601", "非法请求");
 		}