From a008f5e3226fc604404e0271ac22a84ca033bbfa Mon Sep 17 00:00:00 2001
From: xiaoyu <316612174@qq.com>
Date: Mon, 31 Mar 2025 15:29:18 +0800
Subject: [PATCH] =?UTF-8?q?=E9=94=80=E5=94=AE=E5=8C=BA=E5=9F=9F=E5=8A=9F?=
 =?UTF-8?q?=E8=83=BD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../web/controller/system/SalesRegionController.java   | 10 ++--------
 .../com/ruoyi/framework/config/SecurityConfig.java     |  9 +++++++--
 2 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SalesRegionController.java b/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SalesRegionController.java
index 14ee8d5..8cf8515 100644
--- a/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SalesRegionController.java
+++ b/ruoyi-admin/src/main/java/com/ruoyi/web/controller/system/SalesRegionController.java
@@ -36,20 +36,17 @@ public class SalesRegionController extends BaseController
     /**
      * 查询销售区域列表
      */
-//    @PreAuthorize("@ss.hasPermi('system:region:list')")
     @GetMapping("/list")
     public TableDataInfo list(SalesRegion salesRegion)
     {
         startPage();
         List<SalesRegion> list = salesRegionService.selectSalesRegionList(salesRegion);
-
         return getDataTable(list);
     }
 
     /**
      * 导出销售区域列表
      */
-    @PreAuthorize("@ss.hasPermi('system:region:export')")
     @Log(title = "销售区域", businessType = BusinessType.EXPORT)
     @GetMapping("/export")
     public AjaxResult export(SalesRegion salesRegion)
@@ -62,7 +59,6 @@ public class SalesRegionController extends BaseController
     /**
      * 获取销售区域详细信息
      */
-    @PreAuthorize("@ss.hasPermi('system:region:query')")
     @GetMapping(value = "/{regionId}")
     public AjaxResult getInfo(@PathVariable("regionId") Long regionId)
     {
@@ -70,9 +66,9 @@ public class SalesRegionController extends BaseController
     }
 
     /**
+     *
      * 新增销售区域
      */
-    @PreAuthorize("@ss.hasPermi('system:region:add')")
     @Log(title = "销售区域", businessType = BusinessType.INSERT)
     @PostMapping
     public AjaxResult add(@RequestBody SalesRegion salesRegion)
@@ -83,7 +79,6 @@ public class SalesRegionController extends BaseController
     /**
      * 修改销售区域
      */
-    @PreAuthorize("@ss.hasPermi('system:region:edit')")
     @Log(title = "销售区域", businessType = BusinessType.UPDATE)
     @PutMapping
     public AjaxResult edit(@RequestBody SalesRegion salesRegion)
@@ -110,9 +105,8 @@ public class SalesRegionController extends BaseController
     /**
      * 删除销售区域
      */
-    @PreAuthorize("@ss.hasPermi('system:region:remove')")
     @Log(title = "销售区域", businessType = BusinessType.DELETE)
-	@DeleteMapping("/{regionIds}")
+    @DeleteMapping("/{regionIds}")
     public AjaxResult remove(@PathVariable Long[] regionIds)
     {
         return toAjax(salesRegionService.deleteSalesRegionByIds(regionIds));
diff --git a/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java b/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java
index b66bd29..902da93 100644
--- a/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java
+++ b/ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java
@@ -111,8 +111,13 @@ public class SecurityConfig
             .authorizeHttpRequests((requests) -> {
                 permitAllUrl.getUrls().forEach(url -> requests.antMatchers(url).permitAll());
                 // 对于登录login 注册register 验证码captchaImage 允许匿名访问
-                requests.antMatchers("/login", "/register", "/captchaImage","/system/purchase/list","/system/region/list","/system/region/checkRegionNameUnique").permitAll()
-//                requests.antMatchers("/login", "/register", "/captchaImage").permitAll()
+                requests.antMatchers("/login", "/register", "/captchaImage",
+                        "/system/purchase/list",
+                        "/system/region/list",
+                        "/system/region/export",
+                        "/system/region/{regionId}",
+                        "/system/region",
+                        "/system/region/checkRegionNameUnique").permitAll()
                     // 静态资源，可匿名访问
                     .antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**").permitAll()
                     .antMatchers("/swagger-ui.html", "/swagger-resources/**","/doc.html", "/webjars/**", "/*/api-docs", "/druid/**").permitAll()