x

src/main/java/com/egolm/film/api/web/admin/WebUtilController.java

@@ -10,7 +10,9 @@ import org.springframework.web.bind.annotation.ResponseBody;
 
 import com.egolm.common.bean.Rjx;
 import com.egolm.common.jdbc.JdbcTemplate;
+import com.egolm.film.api.service.AdminTokenService;
 import com.egolm.film.api.service.ReviewService;
+import com.egolm.film.bean.Fc_admin;
 import com.egolm.film.bean.Fc_member_film;
 import com.egolm.film.config.XRException;
 
@@ -28,10 +30,14 @@ public class WebUtilController {
 	@Autowired
 	ReviewService service;
 	
+	@Autowired
+	AdminTokenService tokenService;
+	
 	@ResponseBody
 	@PostMapping("tryNextRound")
 	@ApiOperation("尝试进入下一轮评选")
 	public Object tryNextRound(Integer review_id) {
+		this.verifyAuth();
 		service.tryNextRound(review_id);
 		return Rjx.jsonOk();
 	}
@@ -40,6 +46,7 @@ public class WebUtilController {
 	@PostMapping("initAllReview")
 	@ApiOperation("初始化所有审片流程")
 	public Object initAllReview() {
+		this.verifyAuth();
 		jdbcTemplate.executeUpdate("delete from fc_review");
 		jdbcTemplate.executeUpdate("delete from fc_review_record");
 		jdbcTemplate.executeUpdate("delete from fc_review_record_ext");
@@ -68,4 +75,11 @@ public class WebUtilController {
 		}
 		return Rjx.jsonOk();
 	}
+	
+	private void verifyAuth() {
+		Fc_admin admin = (Fc_admin)tokenService.getTokenObj();
+		if(!admin.getUsername().equals("admin")) {
+			throw new XRException("权限错误");
+		}
+	}
 }