优化白名单支持对通配符路径匹配

RuoYi

2026-04-16 1002b36c0a698c794320d1544c464c13b303e53c

 ruoyi-modules/ruoyi-system/src/main/java/com/ruoyi/system/controller/SysOperlogController.java

@@ -1,10 +1,8 @@
package com.ruoyi.system.controller;



import java.io.IOException;

import java.util.List;

import javax.servlet.http.HttpServletResponse;

import jakarta.servlet.http.HttpServletResponse;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.security.access.prepost.PreAuthorize;

import org.springframework.web.bind.annotation.DeleteMapping;

import org.springframework.web.bind.annotation.GetMapping;

import org.springframework.web.bind.annotation.PathVariable;

@@ -18,6 +16,8 @@
import com.ruoyi.common.core.web.page.TableDataInfo;

import com.ruoyi.common.log.annotation.Log;

import com.ruoyi.common.log.enums.BusinessType;

import com.ruoyi.common.security.annotation.InnerAuth;

import com.ruoyi.common.security.annotation.RequiresPermissions;

import com.ruoyi.system.api.domain.SysOperLog;

import com.ruoyi.system.service.ISysOperLogService;



@@ -33,7 +33,7 @@
    @Autowired

    private ISysOperLogService operLogService;



    @PreAuthorize("@ss.hasPermi('system:operlog:list')")

    @RequiresPermissions("system:operlog:list")

    @GetMapping("/list")

    public TableDataInfo list(SysOperLog operLog)

    {

@@ -43,31 +43,33 @@
    }



    @Log(title = "操作日志", businessType = BusinessType.EXPORT)

    @PreAuthorize("@ss.hasPermi('system:operlog:export')")

    @RequiresPermissions("system:operlog:export")

    @PostMapping("/export")

    public void export(HttpServletResponse response, SysOperLog operLog) throws IOException

    public void export(HttpServletResponse response, SysOperLog operLog)

    {

        List<SysOperLog> list = operLogService.selectOperLogList(operLog);

        ExcelUtil<SysOperLog> util = new ExcelUtil<SysOperLog>(SysOperLog.class);

        util.exportExcel(response, list, "操作日志");

    }



    @PreAuthorize("@ss.hasPermi('system:operlog:remove')")

    @Log(title = "操作日志", businessType = BusinessType.DELETE)

    @RequiresPermissions("system:operlog:remove")

    @DeleteMapping("/{operIds}")

    public AjaxResult remove(@PathVariable Long[] operIds)

    {

        return toAjax(operLogService.deleteOperLogByIds(operIds));

    }



    @PreAuthorize("@ss.hasPermi('system:operlog:remove')")

    @RequiresPermissions("system:operlog:remove")

    @Log(title = "操作日志", businessType = BusinessType.CLEAN)

    @DeleteMapping("/clean")

    public AjaxResult clean()

    {

        operLogService.cleanOperLog();

        return AjaxResult.success();

        return success();

    }



    @InnerAuth

    @PostMapping

    public AjaxResult add(@RequestBody SysOperLog operLog)

    {