查询报价明细详情增加企业信息对比判断

pom.xml

@@ -27,12 +27,20 @@
         <dependency>
             <groupId>com.uas.ps</groupId>
             <artifactId>ps-httplog</artifactId>
+            <version>0.0.1-SNAPSHOT</version>
         </dependency>
 
-        <!--<dependency>-->
-            <!--<groupId>com.uas.account</groupId>-->
-            <!--<artifactId>sso-integration</artifactId>-->
-        <!--</dependency>-->
+        <dependency>
+            <groupId>commons-fileupload</groupId>
+            <artifactId>commons-fileupload</artifactId>
+            <version>1.3.1</version>
+        </dependency>
+
+        <dependency>
+            <groupId>com.uas.account</groupId>
+            <artifactId>sso-integration</artifactId>
+            <version>1.1-SNAPSHOT</version>
+        </dependency>
 
         <!-- httpClient -->
         <dependency>

src/main/java/com/uas/ps/inquiry/controller/InquiryForSaleController.java

@@ -47,9 +47,12 @@ public class InquiryForSaleController {
      */
     @HttpLog
     @RequestMapping(value = "/inquiry/detail", method = RequestMethod.GET)
-    public PublicInquiryItem findById(Long itemId, Long en_uu) {
+    public PublicInquiryItem findById(Long itemId, Long en_uu) throws IllegalAccessException {
+        if (StringUtils.isEmpty(en_uu)) {
+            throw new IllegalAccessException("无访问权限");
+        }
         logger.log("公共询价", "查询已转报价的明细", "id: " + itemId, Constant.UU, en_uu, InquirySource.PLAIN.name());
-        return saleService.findById(itemId);
+        return saleService.findById(itemId, en_uu);
     }
 
     /**

src/main/java/com/uas/ps/inquiry/service/InquiryForSaleService.java

@@ -25,7 +25,7 @@ public interface InquiryForSaleService {
      * @param id 报价明细id
      * @return
      */
-    PublicInquiryItem findById(Long id);
+    PublicInquiryItem findById(Long id, Long enUU) throws IllegalAccessException;
 
     /**
      * 供应商报价时上传附件信息

src/main/java/com/uas/ps/inquiry/service/impl/InquiryForSaleServiceImpl.java

@@ -84,8 +84,11 @@ public class InquiryForSaleServiceImpl implements InquiryForSaleService {
      * @return
      */
     @Override
-    public PublicInquiryItem findById(Long id) {
+    public PublicInquiryItem findById(Long id, Long enUU) throws IllegalAccessException {
         PublicInquiryItem item = infoDao.findOne(id);
+        if (!enUU.equals(item.getVendUU())) {
+            throw new IllegalAccessException("无法查询该条信息");
+        }
         if (null != item.getProductId()) {
             Product product = productDao.findOne(item.getProductId());
             item.setProduct(product);