yin 21 jam lalu
induk
melakukan
f8ae61d6ad

+ 5 - 5
stmms-web/src/main/java/cn/com/qmth/stmms/api/interceptor/ApiInterceptor.java

@@ -159,17 +159,17 @@ public class ApiInterceptor extends HandlerInterceptorAdapter {
         if (user == null) {
             return false;
         }
-        Integer examId = SessionExamUtils.getExamId(request);
-        String uri = request.getRequestURI();
-        if ((examId == null || examId <= 0) && !uri.startsWith("/api/admin/exam/list")) {
-            return false;
-        }
         ApiUser wu = new ApiUser(user);
         if (wu.getRole() == Role.SYS_ADMIN) {
             RequestUtils.setApiUser(request, wu);
             sessionService.put(request, response, RequestUtils.getSession(request));
             return true;
         }
+        Integer examId = SessionExamUtils.getExamId(request);
+        String uri = request.getRequestURI();
+        if ((examId == null || examId <= 0) && !uri.startsWith("/api/admin/exam/list")) {
+            return false;
+        }
         if (wu.getRole() == Role.SUBJECT_HEADER || wu.getRole() == Role.INSPECTOR || wu.getRole() == Role.COLLEGE_ADMIN
                 || wu.getRole() == Role.SCHOOL_VIEWER) {
             wu.setSubjectCodeSet(subjectUserService.findSubjectCode(wu.getId()));