github/JeecgBoot
1
0
Fork 0
mirror of https://github.com/jeecgboot/JeecgBoot.git synced 2026-09-14 07:59:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

AI提示词管理加权限注解

Browse Source
This commit is contained in:
zhangdaiscott 2026-09-11 17:53:19 +08:00
parent 25f60fff9e
commit 21facc0139
3 changed files with 43 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragMcpController.java
View File

@ -162,7 +162,7 @@ public class AiragMcpController extends JeecgController<AiragMcp, IAiragMcpServi
* @return
*/
@Operation(summary = "MCP-通过id查询")
//@RequiresPermissions("airag:mcp:queryById")
@RequiresPermissions("airag:mcp:queryById")
@GetMapping(value = "/queryById")
public Result<AiragMcp> queryById(@RequestParam(name = "id", required = true) String id) {
AiragMcp airagMcp = airagMcpService.getById(id);

13
jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/prompts/controller/AiragPromptsController.java
View File

@ -8,6 +8,7 @@ import io.swagger.v3.oas.annotations.tags.Tag;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import lombok.extern.slf4j.Slf4j;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.jeecg.common.api.vo.Result;
import org.jeecg.common.aspect.annotation.AutoLog;
import org.jeecg.common.constant.CommonConstant;
@ -47,6 +48,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
//@AutoLog(value = "airag_prompts-分页列表查询")
@Operation(summary="airag_prompts-分页列表查询")
@GetMapping(value = "/list")
@RequiresPermissions("airag:prompts:list")
public Result<IPage<AiragPrompts>> queryPageList(AiragPrompts airagPrompts,
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize,
@ -67,6 +69,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
*/
@Operation(summary="airag_prompts-回收站分页列表查询")
@GetMapping(value = "/recycleBinList")
@RequiresPermissions("airag:prompts:recycleBinList")
//update-begin---author:chenrui ---date:2026-04-07 for：【QQYUN-14643】修复回收站查询逻辑，绕过@TableLogic过滤-----------
public Result<IPage<AiragPrompts>> recycleBinList(AiragPrompts airagPrompts,
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@ -87,6 +90,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
@AutoLog(value = "airag_prompts-添加")
@Operation(summary="airag_prompts-添加")
@PostMapping(value = "/add")
@RequiresPermissions("airag:prompts:add")
public Result<String> add(@RequestBody AiragPrompts airagPrompts) {
airagPrompts.setDelFlag(CommonConstant.DEL_FLAG_0);
airagPrompts.setStatus("0");
@ -103,6 +107,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
@AutoLog(value = "airag_prompts-编辑")
@Operation(summary="airag_prompts-编辑")
@RequestMapping(value = "/edit", method = {RequestMethod.PUT,RequestMethod.POST})
@RequiresPermissions("airag:prompts:edit")
public Result<String> edit(@RequestBody AiragPrompts airagPrompts) {
airagPromptsService.updateById(airagPrompts);
return Result.OK("编辑成功!");
@ -117,6 +122,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
@AutoLog(value = "airag_prompts-通过id删除")
@Operation(summary="airag_prompts-通过id删除")
@DeleteMapping(value = "/delete")
@RequiresPermissions("airag:prompts:delete")
public Result<String> delete(@RequestParam(name="id",required=true) String id) {
airagPromptsService.removeById(id);
return Result.OK("删除成功!");
@ -131,6 +137,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
@AutoLog(value = "airag_prompts-批量删除")
@Operation(summary="airag_prompts-批量删除")
@DeleteMapping(value = "/deleteBatch")
@RequiresPermissions("airag:prompts:deleteBatch")
public Result<String> deleteBatch(@RequestParam(name="ids",required=true) String ids) {
this.airagPromptsService.removeByIds(Arrays.asList(ids.split(",")));
return Result.OK("批量删除成功!");
@ -145,6 +152,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
//@AutoLog(value = "airag_prompts-通过id查询")
@Operation(summary="airag_prompts-通过id查询")
@GetMapping(value = "/queryById")
@RequiresPermissions("airag:prompts:queryById")
public Result<AiragPrompts> queryById(@RequestParam(name="id",required=true) String id) {
AiragPrompts airagPrompts = airagPromptsService.getById(id);
if(airagPrompts==null) {
@ -158,6 +166,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
*/
@Operation(summary = "提示词-从回收站取回")
@PutMapping(value = "/revertRecycleBin")
@RequiresPermissions("airag:prompts:revertRecycleBin")
public Result<?> revertRecycleBin(@RequestParam(name = "ids", required = true) String ids) {
airagPromptsService.revertRecycleBin(Arrays.asList(ids.split(",")));
return Result.OK("已从回收站取回!");
@ -167,6 +176,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
*/
@Operation(summary = "提示词-从回收站彻底删除")
@DeleteMapping(value = "/deleteRecycleBin")
@RequiresPermissions("airag:prompts:deleteRecycleBin")
public Result<?> deleteRecycleBin(@RequestParam(name = "ids", required = true) String ids) {
airagPromptsService.deleteRecycleBin(Arrays.asList(ids.split(",")));
return Result.OK("从回收站彻底删除!");
@ -178,6 +188,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
* @return
*/
@PostMapping(value = "/experiment")
@RequiresPermissions("airag:prompts:experiment")
public Result<?> promptExperiment(@RequestBody AiragExperimentVo experimentVo, HttpServletRequest request) {
return airagPromptsService.promptExperiment(experimentVo,request);
}
@ -188,6 +199,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
* @param airagPrompts
*/
@RequestMapping(value = "/exportXls")
@RequiresPermissions("airag:prompts:exportXls")
public ModelAndView exportXls(HttpServletRequest request, AiragPrompts airagPrompts) {
return super.exportXls(request, airagPrompts, AiragPrompts.class, "airag_prompts");
}
@ -200,6 +212,7 @@ public class AiragPromptsController extends JeecgController<AiragPrompts, IAirag
* @return
*/
@RequestMapping(value = "/importExcel", method = RequestMethod.POST)
@RequiresPermissions("airag:prompts:importExcel")
public Result<?> importExcel(HttpServletRequest request, HttpServletResponse response) {
return super.importExcel(request, response, AiragPrompts.class);
}

29
jeecg-boot/jeecg-module-system/jeecg-system-start/src/main/resources/flyway/sql/mysql/V3.9.5_1__add_airag_prompts_button_permissions.sql Normal file
View File

@ -0,0 +1,29 @@
-- ---author:scott---date:20260911-----for:【GHSA-6g87-g65f-9vwm】AiragPromptsController 全部端点缺失权限注解，任意普通登录用户可跨用户读取/篡改/删除/导出（含管理员）AI提示词；新增 airag:prompts:* 按钮权限并授权给系统管理员角色（parent_id=1999367175911657473 为 AI提示词菜单）
-- 1. 新增按钮权限
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000001', '1999367175911657473', '查询AI提示词列表', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:list', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000002', '1999367175911657473', '查询AI提示词回收站列表', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:recycleBinList', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000003', '1999367175911657473', '新增AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:add', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000004', '1999367175911657473', '编辑AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:edit', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000005', '1999367175911657473', '删除AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:delete', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000006', '1999367175911657473', '批量删除AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:deleteBatch', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000007', '1999367175911657473', '按ID查询AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:queryById', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000008', '1999367175911657473', '从回收站取回AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:revertRecycleBin', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000009', '1999367175911657473', '从回收站彻底删除AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:deleteRecycleBin', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000010', '1999367175911657473', 'AI提示词构造器调试', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:experiment', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000011', '1999367175911657473', '导出AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:exportXls', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
INSERT INTO `sys_permission` (`id`, `parent_id`, `name`, `url`, `component`, `is_route`, `component_name`, `redirect`, `menu_type`, `perms`, `perms_type`, `sort_no`, `always_show`, `icon`, `is_leaf`, `keep_alive`, `hidden`, `hide_tab`, `description`, `create_by`, `create_time`, `update_by`, `update_time`, `del_flag`, `rule_flag`, `status`, `internal_or_external`) VALUES ('2026091100000000012', '1999367175911657473', '导入AI提示词', NULL, NULL, 0, NULL, NULL, 2, 'airag:prompts:importExcel', '1', NULL, 0, NULL, 1, 0, 0, 0, NULL, 'admin', '2026-09-11 10:00:00', NULL, NULL, 0, 0, '1', 0);
-- 2. 给系统管理员角色（f6817f48af4fb3af11b9e8bf182f618b）授权
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000021', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000001', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000022', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000002', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000023', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000003', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000024', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000004', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000025', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000005', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000026', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000006', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000027', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000007', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000028', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000008', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000029', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000009', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000030', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000010', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000031', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000011', NULL, '2026-09-11 10:00:00', '127.0.0.1');
INSERT INTO `sys_role_permission` (`id`, `role_id`, `permission_id`, `data_rule_ids`, `operate_date`, `operate_ip`) VALUES ('2026091100000000032', 'f6817f48af4fb3af11b9e8bf182f618b', '2026091100000000012', NULL, '2026-09-11 10:00:00', '127.0.0.1');