...

examcloud-exchange-outer-api-provider/src/main/java/cn/com/qmth/examcloud/exchange/outer/api/provider/ExamOuterServiceProvider.java

@@ -54,7 +54,7 @@ public class ExamOuterServiceProvider extends ControllerSupport implements ExamO
 			@RequestBody @ApiParam(required = true) OuterSaveExamReq req) {
 
 		if (!getSecurityRootOrgId().equals(req.getRootOrgId())) {
-			throw new StatusException("EX-1000001", "安全接入的顶级机构非法");
+			throw new StatusException("EX-1000001", "rootOrgId is wrong");
 		}
 
 		Date beginTime = req.getBeginTime();

examcloud-exchange-outer-api-provider/src/main/java/cn/com/qmth/examcloud/exchange/outer/api/provider/ExamStudentOuterServiceProvider.java

@@ -6,6 +6,7 @@ import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
+import cn.com.qmth.examcloud.commons.base.exception.StatusException;
 import cn.com.qmth.examcloud.commons.web.support.ControllerSupport;
 import cn.com.qmth.examcloud.commons.web.support.StatusResponse;
 import cn.com.qmth.examcloud.examwork.api.ExamStudentCloudService;
@@ -49,6 +50,11 @@ public class ExamStudentOuterServiceProvider extends ControllerSupport
 	@Override
 	public OuterSaveExamStudentResp saveExamStudent(
 			@RequestBody @ApiParam(required = true) OuterSaveExamStudentReq req) {
+
+		if (!getSecurityRootOrgId().equals(req.getRootOrgId())) {
+			throw new StatusException("EX-1000001", "rootOrgId is wrong");
+		}
+
 		SaveExamStudentReq request = new SaveExamStudentReq();
 
 		request.setCourseCode(req.getCourseCode());