Revert "修复 #6070"

This reverts commit 6edef14f07.
dev
EightMonth 1 year ago
parent c9b92decaf
commit ee4ff35c90

@ -9,10 +9,7 @@
<!-- 根据权限sql查询数据集 20230904 内部写法调用位置installAuthJdbc暂不处理sql注入问题--> <!-- 根据权限sql查询数据集 20230904 内部写法调用位置installAuthJdbc暂不处理sql注入问题-->
<select id="queryListWithPermission" parameterType="Object" resultType="org.jeecg.modules.demo.test.entity.JeecgDemo"> <select id="queryListWithPermission" parameterType="Object" resultType="org.jeecg.modules.demo.test.entity.JeecgDemo">
select * from demo select * from demo where 1=1 ${permissionSql}
<where>
${permissionSql}
</where>
</select> </select>
<!-- 查询所有符合前缀且有效字段 --> <!-- 查询所有符合前缀且有效字段 -->

@ -161,6 +161,11 @@
<select id="getSysDepartList" resultType="org.jeecg.modules.system.vo.SysDepartExportVo"> <select id="getSysDepartList" resultType="org.jeecg.modules.system.vo.SysDepartExportVo">
SELECT id,depart_name,parent_id,depart_name_en,depart_order,description,org_category,org_code,mobile,fax,address,memo FROM sys_depart SELECT id,depart_name,parent_id,depart_name_en,depart_order,description,org_category,org_code,mobile,fax,address,memo FROM sys_depart
WHERE WHERE
1=1
<if test="null != tenantId and 0 != tenantId">
AND tenant_id = #{tenantId}
</if>
AND
<choose> <choose>
<when test="parentId != null and parentId != ''"> <when test="parentId != null and parentId != ''">
parent_id = #{parentId} parent_id = #{parentId}
@ -169,9 +174,6 @@
parent_id IS NULL OR parent_id='' parent_id IS NULL OR parent_id=''
</otherwise> </otherwise>
</choose> </choose>
<if test="null != tenantId and 0 != tenantId">
AND tenant_id = #{tenantId}
</if>
ORDER BY depart_order DESC ORDER BY depart_order DESC
</select> </select>
</mapper> </mapper>

@ -127,7 +127,7 @@
</if> </if>
${pidField} as parentId ${pidField} as parentId
from ${table} from ${table}
<where> where
<!-- 父ID条件 --> <!-- 父ID条件 -->
<if test="query == null"> <if test="query == null">
<choose> <choose>
@ -141,6 +141,7 @@
</if> </if>
<!-- 查询条件组装 --> <!-- 查询条件组装 -->
<if test="query!= null"> <if test="query!= null">
1 = 1
<foreach collection="query.entrySet()" item="value" index="key" > <foreach collection="query.entrySet()" item="value" index="key" >
<choose> <choose>
<when test="key == 'tenant_id'"> <when test="key == 'tenant_id'">
@ -161,7 +162,6 @@
</otherwise> </otherwise>
</choose> </choose>
</if> </if>
</where>
</select> </select>
<!-- 分页查询字典表数据支持text或code模糊查询匹配【已加入SQL注入check】 --> <!-- 分页查询字典表数据支持text或code模糊查询匹配【已加入SQL注入check】 -->

@ -28,7 +28,7 @@
,icon ,icon
,is_leaf ,is_leaf
FROM sys_permission FROM sys_permission
<where> WHERE 1=1
<choose> <choose>
<when test="parentId != null and parentId != ''"> <when test="parentId != null and parentId != ''">
AND parent_id = #{parentId,jdbcType=VARCHAR} AND parent_id = #{parentId,jdbcType=VARCHAR}
@ -37,7 +37,6 @@
AND parent_id is null AND parent_id is null
</otherwise> </otherwise>
</choose> </choose>
</where>
</select> </select>
<!-- 获取登录用户拥有的权限 --> <!-- 获取登录用户拥有的权限 -->

@ -4,7 +4,7 @@
<select id="listAllSysRole" resultType="org.jeecg.modules.system.entity.SysRole"> <select id="listAllSysRole" resultType="org.jeecg.modules.system.entity.SysRole">
SELECT * from sys_role SELECT * from sys_role
<where> WHERE 1=1
<if test="role.roleName!='' and role.roleName!=null"> <if test="role.roleName!='' and role.roleName!=null">
<bind name="bindKeyword" value="'%'+role.roleName+'%'"/> <bind name="bindKeyword" value="'%'+role.roleName+'%'"/>
AND role_name like #{bindKeyword} AND role_name like #{bindKeyword}
@ -13,7 +13,6 @@
<bind name="bindRoleCode" value="'%'+role.roleCode+'%'"/> <bind name="bindRoleCode" value="'%'+role.roleCode+'%'"/>
AND role_code like #{bindRoleCode} AND role_code like #{bindRoleCode}
</if> </if>
</where>
</select> </select>

Loading…
Cancel
Save