From a985e6ba578b4ec28a25932f871c4df76ce092f2 Mon Sep 17 00:00:00 2001
From: chenhaozhe <cgz@hz-kingdee.com>
Date: 星期二, 12 五月 2026 15:02:39 +0800
Subject: [PATCH] 模块添加自定义标签鉴权 在Token启用的情况下。通过自定义标签定义的modname和Operate 判断用户是否有访问模块的权限

---
 WebAPI/Controllers/XSGL/Xs_ExceptiveCheckRequestBillController.cs |    8 ++++++++
 1 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/WebAPI/Controllers/XSGL/Xs_ExceptiveCheckRequestBillController.cs b/WebAPI/Controllers/XSGL/Xs_ExceptiveCheckRequestBillController.cs
index 96cff0d..23fbc3c 100644
--- a/WebAPI/Controllers/XSGL/Xs_ExceptiveCheckRequestBillController.cs
+++ b/WebAPI/Controllers/XSGL/Xs_ExceptiveCheckRequestBillController.cs
@@ -8,10 +8,12 @@
 using System.Data.SqlClient;
 using System.Web.Http;
 using WebAPI.Models;
+using WebAPI.Utility;
 
 namespace WebAPI.Controllers
 {
     //鐗规壒鐢宠鍗旵ontroller
+    [Permission(HModName = "Xs_ExceptiveCheckRequestBill")]
     public class Xs_ExceptiveCheckRequestBillController : ApiController
     {
         //鑾峰彇绯荤粺鍙傛暟
@@ -31,6 +33,7 @@
         /// </summary>
         [Route("Xs_ExceptiveCheckRequestBill/list")]
         [HttpGet]
+        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Query")]
         public object getXs_ExceptiveCheckRequestBill(string sWhere, string user)
         {
             try
@@ -86,6 +89,7 @@
         #region 鐗规壒鐢宠鍗曚繚瀛� 鏂板/缂栬緫
         [Route("Xs_ExceptiveCheckRequestBill/SaveXs_ExceptiveCheckRequestBill")]
         [HttpPost]
+        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Edit")]
         public object SaveXs_ExceptiveCheckRequestBill([FromBody] JObject msg)
         {
             var _value = msg["msg"].ToString();
@@ -315,6 +319,7 @@
         /// </summary>
         [Route("Xs_ExceptiveCheckRequestBill/delete")]
         [HttpGet]
+        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Drop")]
         public object deleteXs_ExceptiveCheckRequestBill(string HInterID, string user)
         {
             try
@@ -401,6 +406,7 @@
         /// <returns></returns>
         [Route("Xs_ExceptiveCheckRequestBill/AuditXs_ExceptiveCheckRequestBill")]
         [HttpGet]
+        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Check")]
         public object AuditXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
         {
             string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Check";
@@ -758,6 +764,7 @@
         /// <returns></returns>
         [Route("Xs_ExceptiveCheckRequestBill/CloseXs_ExceptiveCheckRequestBill")]
         [HttpGet]
+        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Close")]
         public object CloseXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
         {
             string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Close";
@@ -903,6 +910,7 @@
         /// <returns></returns>
         [Route("Xs_ExceptiveCheckRequestBill/DeleteXs_ExceptiveCheckRequestBill")]
         [HttpGet]
+        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Delete")]
         public object DeleteXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
         {
             string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Delete";

--
Gitblit v1.9.1