fix(purchase): 修复采购退货审核权限验证逻辑

- 修正了用户采购组权限验证条件,添加否定操作符
- 确保只有相同采购组的用户才能审核对应的退货申请单
- 防止跨采购组的不当审核操作
This commit is contained in:
曹鹏飞 2026-06-04 14:09:03 +08:00
parent eaa6d684cd
commit 77037e9a9f
1 changed files with 1 additions and 1 deletions

View File

@ -223,7 +223,7 @@ public class PurchaseReturnController extends BaseController {
VUtil.trueThrowBusinessError(ObjectUtil.isNull(returnRequest)) VUtil.trueThrowBusinessError(ObjectUtil.isNull(returnRequest))
.throwMessage("无效申请单"); .throwMessage("无效申请单");
User user = userService.getById(UserUtil.getUserId()); User user = userService.getById(UserUtil.getUserId());
VUtil.trueThrowBusinessError(StrUtil.equals(user.getPurchasingGroup(), returnRequest.getPurchaseGroup())) VUtil.trueThrowBusinessError(!StrUtil.equals(user.getPurchasingGroup(), returnRequest.getPurchaseGroup()))
.throwMessage("无权限审核此单"); .throwMessage("无权限审核此单");
// VUtil.trueThrowBusinessError(returnRequest.getApprovalStatus() == 1) // VUtil.trueThrowBusinessError(returnRequest.getApprovalStatus() == 1)
// .throwMessage("此单已审核通过,不可以再此审核"); // .throwMessage("此单已审核通过,不可以再此审核");