签收，拒签，盖章拒签增加是否为经办人的校验

sc-service/src/main/java/com/huyi/service/credit/controller/CreditHandleController.java

@@ -327,6 +327,21 @@ public class CreditHandleController extends BaseController {
     @PutMapping("/signFor")
     public AjaxResult signFor(@RequestBody Map<String,Object> map)throws Exception
     {
+        //判断当前用户是否为该公司的经办人
+        //获取此操作员
+        //当前公司
+        String companyId = tokenService.getLoginUser().getSysUser().getCompanyId();
+        //获取当前用户
+        String currentUserId = CommonUtil.objToString(tokenService.getLoginUser().getSysUser().getUserId());
+        //查询当前用户是否是经办人
+        LambdaQueryWrapper<SysUserCompanyRel> companyRelWrapper = new LambdaQueryWrapper<>();
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrUserId,currentUserId);
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrCompanyId,companyId);
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrHandler,"1");
+        List<SysUserCompanyRel> list = sysUserCompanyRelService.findSysUserCompanyRels(companyRelWrapper);
+        if (list.size() < 1){
+            return AjaxResult.error("此操作需经办人权限,请确认您是否是经办人");
+        }
         //获取融信编号
         String zfiId = CommonUtil.objToString(map.get("zfiId"));
         //获取通过还是拒绝
@@ -390,7 +405,7 @@ public class CreditHandleController extends BaseController {
 
 
     /**
-     * 签收拒签
+     * 拒签
      * @param map
      * @return
      * @throws Exception
@@ -401,6 +416,21 @@ public class CreditHandleController extends BaseController {
     @PutMapping("/creditRefuse")
     public AjaxResult creditRefuse(@RequestBody Map<String,Object> map)throws Exception
     {
+        //判断当前用户是否为该公司的经办人
+        //获取此操作员
+        //当前公司
+        String companyId = tokenService.getLoginUser().getSysUser().getCompanyId();
+        //获取当前用户
+        String currentUserId = CommonUtil.objToString(tokenService.getLoginUser().getSysUser().getUserId());
+        //查询当前用户是否是经办人
+        LambdaQueryWrapper<SysUserCompanyRel> companyRelWrapper = new LambdaQueryWrapper<>();
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrUserId,currentUserId);
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrCompanyId,companyId);
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrHandler,"1");
+        List<SysUserCompanyRel> list = sysUserCompanyRelService.findSysUserCompanyRels(companyRelWrapper);
+        if (list.size() < 1){
+            return AjaxResult.error("此操作需经办人权限,请确认您是否是经办人");
+        }
         //获取融信编号
         String zfiId = CommonUtil.objToString(map.get("zfiId"));
         ZcFinanceInf financeInf = new ZcFinanceInf();
@@ -509,6 +539,21 @@ public class CreditHandleController extends BaseController {
     @PutMapping("/sealRefuse")
     public AjaxResult sealRefuse(@RequestBody Map<String,Object> map)throws Exception
     {
+        //判断当前用户是否为该公司的经办人
+        //获取此操作员
+        //当前公司
+        String companyId = tokenService.getLoginUser().getSysUser().getCompanyId();
+        //获取当前用户
+        String currentUserId = CommonUtil.objToString(tokenService.getLoginUser().getSysUser().getUserId());
+        //查询当前用户是否是经办人
+        LambdaQueryWrapper<SysUserCompanyRel> companyRelWrapper = new LambdaQueryWrapper<>();
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrUserId,currentUserId);
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrCompanyId,companyId);
+        companyRelWrapper.eq(SysUserCompanyRel::getSucrHandler,"1");
+        List<SysUserCompanyRel> list = sysUserCompanyRelService.findSysUserCompanyRels(companyRelWrapper);
+        if (list.size() < 1){
+            return AjaxResult.error("此操作需经办人权限,请确认您是否是经办人");
+        }
         //获取融信编号
         String zfiId = CommonUtil.objToString(map.get("zfiId"));
         ZcFinanceInf financeInf = new ZcFinanceInf();