获取报价详情增加身份判断

src/main/java/com/uas/ps/inquiry/controller/PublicInquiryController.java

@@ -23,6 +23,7 @@ import com.uas.ps.inquiry.service.PublicInquiryService;
 import com.uas.ps.inquiry.support.InquiryBufferedLogger;
 import java.io.UnsupportedEncodingException;
 import java.net.URLDecoder;
+import java.rmi.AccessException;
 import java.util.List;
 import java.util.Map;
 import javassist.NotFoundException;
@@ -399,8 +400,11 @@ public class PublicInquiryController {
      */
     @HttpLog
     @RequestMapping(value = "/quotation/one", method = RequestMethod.GET)
-    public PublicInquiryItemInfo getQuotationById(Long id) {
-        return publicInquiryService.findOneInfo(id);
+    public PublicInquiryItemInfo getQuotationById(Long id, Long enuu, Long useruu) throws AccessException {
+        if (StringUtils.isEmpty(enuu) || StringUtils.isEmpty(useruu)) {
+            throw new IllegalAccessError("暂无访问权限");
+        }
+        return publicInquiryService.findOneInfo(id, enuu, useruu);
     }
 
     /**

src/main/java/com/uas/ps/inquiry/service/PublicInquiryService.java

@@ -148,7 +148,7 @@ public interface PublicInquiryService {
      * @param id
      * @return
      */
-    PublicInquiryItemInfo findOneInfo(Long id);
+    PublicInquiryItemInfo findOneInfo(Long id, Long enuu, Long useruu);
 
     /**
      * 商城获取采纳列表

src/main/java/com/uas/ps/inquiry/service/impl/PublicInquiryServiceImpl.java

@@ -16,6 +16,7 @@ import com.uas.ps.inquiry.model.*;
 import com.uas.ps.inquiry.page.PageInfo;
 import com.uas.ps.inquiry.page.SearchFilter;
 import com.uas.ps.inquiry.page.criteria.*;
+import com.uas.ps.inquiry.page.exception.IllegalOperatorException;
 import com.uas.ps.inquiry.service.PublicInquiryService;
 import com.uas.ps.inquiry.support.InquiryBufferedLogger;
 import com.uas.ps.inquiry.util.*;
@@ -1155,8 +1156,12 @@ public class PublicInquiryServiceImpl implements PublicInquiryService {
      * @return
      */
     @Override
-    public PublicInquiryItemInfo findOneInfo(Long id) {
-        return itemInfoDao.findOne(id);
+    public PublicInquiryItemInfo findOneInfo(Long id, Long enuu, Long useruu) {
+        PublicInquiryItemInfo itemInfo = itemInfoDao.findOne(id);
+        if (!itemInfo.getVendUU().equals(enuu)) {
+            throw new IllegalOperatorException("访问受限");
+        }
+        return itemInfo;
     }
 
     /**