Przeglądaj źródła

feat : 添加游戏模块的权限控制

bilingfeng 2 lat temu
rodzic
commit
5b49aee281

+ 5 - 0
game-module/game-manage/src/main/java/com/zanxiang/manage/controller/CpController.java

@@ -2,6 +2,7 @@ package com.zanxiang.manage.controller;
 
 
 import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.zanxiang.common.domain.ResultVo;
 import com.zanxiang.common.domain.ResultVo;
+import com.zanxiang.erp.security.annotation.PreAuthorize;
 import com.zanxiang.manage.domain.params.CpAddUpdateParam;
 import com.zanxiang.manage.domain.params.CpAddUpdateParam;
 import com.zanxiang.manage.domain.params.CpListParam;
 import com.zanxiang.manage.domain.params.CpListParam;
 import com.zanxiang.manage.domain.vo.CpChoiceVO;
 import com.zanxiang.manage.domain.vo.CpChoiceVO;
@@ -34,6 +35,7 @@ public class CpController {
 
 
     @ApiOperation(value = "cp选择列表查询")
     @ApiOperation(value = "cp选择列表查询")
     @GetMapping(value = "/choice/list")
     @GetMapping(value = "/choice/list")
+    @PreAuthorize(permissionKey = "sdk:cpChoice:list")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = CpChoiceVO.class, responseContainer = "list")})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = CpChoiceVO.class, responseContainer = "list")})
     public ResultVo<List<CpChoiceVO>> choiceList() {
     public ResultVo<List<CpChoiceVO>> choiceList() {
         return new ResultVo<>(cpService.choiceList());
         return new ResultVo<>(cpService.choiceList());
@@ -41,6 +43,7 @@ public class CpController {
 
 
     @ApiOperation(value = "cp新增或者更新")
     @ApiOperation(value = "cp新增或者更新")
     @PostMapping(value = "/add/or/update")
     @PostMapping(value = "/add/or/update")
+    @PreAuthorize(permissionKey = "sdk:cp:addOrUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> addOrUpdate(@Validated @RequestBody CpAddUpdateParam param) {
     public ResultVo<Boolean> addOrUpdate(@Validated @RequestBody CpAddUpdateParam param) {
         return new ResultVo<>(cpService.addOrUpdate(param));
         return new ResultVo<>(cpService.addOrUpdate(param));
@@ -48,6 +51,7 @@ public class CpController {
 
 
     @ApiOperation(value = "cp列表查询")
     @ApiOperation(value = "cp列表查询")
     @PostMapping(value = "/list")
     @PostMapping(value = "/list")
+    @PreAuthorize(permissionKey = "sdk:cp:list")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = CpVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = CpVO.class)})
     public ResultVo<IPage<CpVO>> list(@Validated @RequestBody CpListParam param) {
     public ResultVo<IPage<CpVO>> list(@Validated @RequestBody CpListParam param) {
         return new ResultVo<>(cpService.list(param));
         return new ResultVo<>(cpService.list(param));
@@ -55,6 +59,7 @@ public class CpController {
 
 
     @ApiOperation(value = "cp删除")
     @ApiOperation(value = "cp删除")
     @DeleteMapping(value = "/delete")
     @DeleteMapping(value = "/delete")
+    @PreAuthorize(permissionKey = "sdk:cp:delete")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> deleteById(@RequestParam Long id) {
     public ResultVo<Boolean> deleteById(@RequestParam Long id) {
         return new ResultVo<>(cpService.deleteById(id));
         return new ResultVo<>(cpService.deleteById(id));

+ 5 - 1
game-module/game-manage/src/main/java/com/zanxiang/manage/controller/GameAppletController.java

@@ -1,6 +1,7 @@
 package com.zanxiang.manage.controller;
 package com.zanxiang.manage.controller;
 
 
 import com.zanxiang.common.domain.ResultVo;
 import com.zanxiang.common.domain.ResultVo;
+import com.zanxiang.erp.security.annotation.PreAuthorize;
 import com.zanxiang.manage.domain.params.GameAccountUpdateParam;
 import com.zanxiang.manage.domain.params.GameAccountUpdateParam;
 import com.zanxiang.manage.domain.vo.GameAccountVO;
 import com.zanxiang.manage.domain.vo.GameAccountVO;
 import com.zanxiang.manage.service.GameAppletService;
 import com.zanxiang.manage.service.GameAppletService;
@@ -29,13 +30,15 @@ public class GameAppletController {
 
 
     @ApiOperation(value = "获取账号信息配置")
     @ApiOperation(value = "获取账号信息配置")
     @GetMapping(value = "/info")
     @GetMapping(value = "/info")
+    @PreAuthorize(permissionKey = "sdk:gameApplet:info")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameAccountVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameAccountVO.class)})
     public ResultVo<GameAccountVO> getGameAccount(@RequestParam Long id) {
     public ResultVo<GameAccountVO> getGameAccount(@RequestParam Long id) {
         return new ResultVo<>(gameAppletService.getGameAccount(id));
         return new ResultVo<>(gameAppletService.getGameAccount(id));
     }
     }
 
 
-    @ApiOperation(value = "游戏基本信息查询")
+    @ApiOperation(value = "账号信息配置添加或者更新")
     @PostMapping(value = "/add/or/update")
     @PostMapping(value = "/add/or/update")
+    @PreAuthorize(permissionKey = "sdk:gameApplet:addOrUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> gameAccountAddOrUpdate(@Validated @RequestBody GameAccountUpdateParam param) {
     public ResultVo<Boolean> gameAccountAddOrUpdate(@Validated @RequestBody GameAccountUpdateParam param) {
         return new ResultVo<>(gameAppletService.gameAccountAddOrUpdate(param));
         return new ResultVo<>(gameAppletService.gameAccountAddOrUpdate(param));
@@ -43,6 +46,7 @@ public class GameAppletController {
 
 
     @ApiOperation(value = "获取小游戏二维码")
     @ApiOperation(value = "获取小游戏二维码")
     @GetMapping(value = "/qr/code")
     @GetMapping(value = "/qr/code")
+    @PreAuthorize(permissionKey = "sdk:gameApplet:qrCode")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = String.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = String.class)})
     public ResultVo<String> getQrCode(@RequestParam Long gameId) {
     public ResultVo<String> getQrCode(@RequestParam Long gameId) {
         return new ResultVo<>(gameAppletService.getQrCod(gameId));
         return new ResultVo<>(gameAppletService.getQrCod(gameId));

+ 5 - 0
game-module/game-manage/src/main/java/com/zanxiang/manage/controller/GameCategoryController.java

@@ -2,6 +2,7 @@ package com.zanxiang.manage.controller;
 
 
 import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.zanxiang.common.domain.ResultVo;
 import com.zanxiang.common.domain.ResultVo;
+import com.zanxiang.erp.security.annotation.PreAuthorize;
 import com.zanxiang.manage.domain.params.GameCategoryAddUpdateParam;
 import com.zanxiang.manage.domain.params.GameCategoryAddUpdateParam;
 import com.zanxiang.manage.domain.params.GameCategoryListParam;
 import com.zanxiang.manage.domain.params.GameCategoryListParam;
 import com.zanxiang.manage.domain.vo.GameCategoryParentVO;
 import com.zanxiang.manage.domain.vo.GameCategoryParentVO;
@@ -34,6 +35,7 @@ public class GameCategoryController {
 
 
     @ApiOperation(value = "查询所游戏分类或父标签列表")
     @ApiOperation(value = "查询所游戏分类或父标签列表")
     @GetMapping(value = "/parent/list")
     @GetMapping(value = "/parent/list")
+    @PreAuthorize(permissionKey = "sdk:gameCategory:parentList")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameCategoryParentVO.class, responseContainer = "list")})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameCategoryParentVO.class, responseContainer = "list")})
     public ResultVo<List<GameCategoryParentVO>> getGameCategoryParent(@RequestParam Integer type) {
     public ResultVo<List<GameCategoryParentVO>> getGameCategoryParent(@RequestParam Integer type) {
         return ResultVo.ok(gameCategoryService.getGameCategoryParent(type));
         return ResultVo.ok(gameCategoryService.getGameCategoryParent(type));
@@ -41,6 +43,7 @@ public class GameCategoryController {
 
 
     @ApiOperation(value = "查询游戏标签列表")
     @ApiOperation(value = "查询游戏标签列表")
     @PostMapping(value = "/list")
     @PostMapping(value = "/list")
+    @PreAuthorize(permissionKey = "sdk:gameCategory:list")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameCategoryVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameCategoryVO.class)})
     public ResultVo<IPage<GameCategoryVO>> list(@Validated @RequestBody GameCategoryListParam param) {
     public ResultVo<IPage<GameCategoryVO>> list(@Validated @RequestBody GameCategoryListParam param) {
         return ResultVo.ok(gameCategoryService.list(param));
         return ResultVo.ok(gameCategoryService.list(param));
@@ -48,6 +51,7 @@ public class GameCategoryController {
 
 
     @ApiOperation(value = "游戏标签分类添加或修改")
     @ApiOperation(value = "游戏标签分类添加或修改")
     @PostMapping(value = "/add/or/update")
     @PostMapping(value = "/add/or/update")
+    @PreAuthorize(permissionKey = "sdk:gameCategory:addOrUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> addOrUpdate(@Validated @RequestBody GameCategoryAddUpdateParam param) {
     public ResultVo<Boolean> addOrUpdate(@Validated @RequestBody GameCategoryAddUpdateParam param) {
         return ResultVo.ok(gameCategoryService.addOrUpdate(param));
         return ResultVo.ok(gameCategoryService.addOrUpdate(param));
@@ -55,6 +59,7 @@ public class GameCategoryController {
 
 
     @ApiOperation(value = "游戏标签分类删除")
     @ApiOperation(value = "游戏标签分类删除")
     @DeleteMapping(value = "/delete/by/id")
     @DeleteMapping(value = "/delete/by/id")
+    @PreAuthorize(permissionKey = "sdk:gameCategory:deleteById")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> deleteById(@RequestParam Long id) {
     public ResultVo<Boolean> deleteById(@RequestParam Long id) {
         return ResultVo.ok(gameCategoryService.deleteById(id));
         return ResultVo.ok(gameCategoryService.deleteById(id));

+ 13 - 0
game-module/game-manage/src/main/java/com/zanxiang/manage/controller/GameController.java

@@ -2,6 +2,7 @@ package com.zanxiang.manage.controller;
 
 
 import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.zanxiang.common.domain.ResultVo;
 import com.zanxiang.common.domain.ResultVo;
+import com.zanxiang.erp.security.annotation.PreAuthorize;
 import com.zanxiang.manage.domain.params.*;
 import com.zanxiang.manage.domain.params.*;
 import com.zanxiang.manage.domain.vo.*;
 import com.zanxiang.manage.domain.vo.*;
 import com.zanxiang.manage.service.GameService;
 import com.zanxiang.manage.service.GameService;
@@ -32,6 +33,7 @@ public class GameController {
 
 
     @ApiOperation(value = "新增游戏")
     @ApiOperation(value = "新增游戏")
     @PostMapping(value = "/add")
     @PostMapping(value = "/add")
+    @PreAuthorize(permissionKey = "sdk:game:add")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     public ResultVo<Boolean> gameAdd(@Validated @RequestBody GameAddParam param) {
     public ResultVo<Boolean> gameAdd(@Validated @RequestBody GameAddParam param) {
         return new ResultVo<>(gameService.gameAdd(param));
         return new ResultVo<>(gameService.gameAdd(param));
@@ -39,6 +41,7 @@ public class GameController {
 
 
     @ApiOperation(value = "游戏基本信息查询")
     @ApiOperation(value = "游戏基本信息查询")
     @GetMapping(value = "/detail/info")
     @GetMapping(value = "/detail/info")
+    @PreAuthorize(permissionKey = "sdk:game:detailInfo")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameInfoVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameInfoVO.class)})
     public ResultVo<GameInfoVO> getGameInfo(@RequestParam Long id) {
     public ResultVo<GameInfoVO> getGameInfo(@RequestParam Long id) {
         return new ResultVo<>(gameService.getGameInfo(id));
         return new ResultVo<>(gameService.getGameInfo(id));
@@ -46,6 +49,7 @@ public class GameController {
 
 
     @ApiOperation(value = "游戏基本信息更新")
     @ApiOperation(value = "游戏基本信息更新")
     @PostMapping(value = "/detail/update")
     @PostMapping(value = "/detail/update")
+    @PreAuthorize(permissionKey = "sdk:game:detailUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> gameUpdate(@Validated @RequestBody GameUpdateParam param) {
     public ResultVo<Boolean> gameUpdate(@Validated @RequestBody GameUpdateParam param) {
         return new ResultVo<>(gameService.updateGameInfo(param));
         return new ResultVo<>(gameService.updateGameInfo(param));
@@ -53,6 +57,7 @@ public class GameController {
 
 
     @ApiOperation(value = "游戏对接参数获取展示")
     @ApiOperation(value = "游戏对接参数获取展示")
     @GetMapping(value = "/dock/info")
     @GetMapping(value = "/dock/info")
+    @PreAuthorize(permissionKey = "sdk:game:dockInfo")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameDockVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameDockVO.class)})
     public ResultVo<GameDockVO> getGameDock(@RequestParam Long id) {
     public ResultVo<GameDockVO> getGameDock(@RequestParam Long id) {
         return new ResultVo<>(gameService.getGameDock(id));
         return new ResultVo<>(gameService.getGameDock(id));
@@ -60,6 +65,7 @@ public class GameController {
 
 
     @ApiOperation(value = "游戏对接参数更新更新")
     @ApiOperation(value = "游戏对接参数更新更新")
     @PostMapping(value = "/dock/update")
     @PostMapping(value = "/dock/update")
+    @PreAuthorize(permissionKey = "sdk:game:dockUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> gameDockUpdate(@Validated @RequestBody GameDockParam param) {
     public ResultVo<Boolean> gameDockUpdate(@Validated @RequestBody GameDockParam param) {
         return new ResultVo<>(gameService.gameDockUpdate(param));
         return new ResultVo<>(gameService.gameDockUpdate(param));
@@ -67,6 +73,7 @@ public class GameController {
 
 
     @ApiOperation(value = "获取游戏关联信息")
     @ApiOperation(value = "获取游戏关联信息")
     @GetMapping(value = "/relation/info")
     @GetMapping(value = "/relation/info")
+    @PreAuthorize(permissionKey = "sdk:game:relationInfo")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameRelationVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameRelationVO.class)})
     public ResultVo<GameRelationVO> getGameRelation(@RequestParam Long id) {
     public ResultVo<GameRelationVO> getGameRelation(@RequestParam Long id) {
         return new ResultVo<>(gameService.getGameRelation(id));
         return new ResultVo<>(gameService.getGameRelation(id));
@@ -74,6 +81,7 @@ public class GameController {
 
 
     @ApiOperation(value = "关联游戏更新")
     @ApiOperation(value = "关联游戏更新")
     @PostMapping(value = "/relation/update")
     @PostMapping(value = "/relation/update")
+    @PreAuthorize(permissionKey = "sdk:game:relationUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> relationGameUpdate(@Validated @RequestBody RelationGameUpdateParam param) {
     public ResultVo<Boolean> relationGameUpdate(@Validated @RequestBody RelationGameUpdateParam param) {
         return new ResultVo<>(gameService.relationGameUpdate(param));
         return new ResultVo<>(gameService.relationGameUpdate(param));
@@ -81,6 +89,7 @@ public class GameController {
 
 
     @ApiOperation(value = "导量游戏更新")
     @ApiOperation(value = "导量游戏更新")
     @PostMapping(value = "/guide/update")
     @PostMapping(value = "/guide/update")
+    @PreAuthorize(permissionKey = "sdk:game:guideUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     public ResultVo<Boolean> guideGameUpdateUpdate(@Validated @RequestBody GuideGameUpdateParam param) {
     public ResultVo<Boolean> guideGameUpdateUpdate(@Validated @RequestBody GuideGameUpdateParam param) {
         return new ResultVo<>(gameService.guideGameUpdateUpdate(param));
         return new ResultVo<>(gameService.guideGameUpdateUpdate(param));
@@ -88,6 +97,7 @@ public class GameController {
 
 
     @ApiOperation(value = "游戏列表查询")
     @ApiOperation(value = "游戏列表查询")
     @PostMapping(value = "/list")
     @PostMapping(value = "/list")
+    @PreAuthorize(permissionKey = "sdk:game:list")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     public ResultVo<IPage<GameListVO>> gameList(@Validated @RequestBody GameListParam param) {
     public ResultVo<IPage<GameListVO>> gameList(@Validated @RequestBody GameListParam param) {
         return new ResultVo<>(gameService.gameList(param));
         return new ResultVo<>(gameService.gameList(param));
@@ -95,6 +105,7 @@ public class GameController {
 
 
     @ApiOperation(value = "游戏选择列表查询")
     @ApiOperation(value = "游戏选择列表查询")
     @GetMapping(value = "/choice/list")
     @GetMapping(value = "/choice/list")
+    @PreAuthorize(permissionKey = "sdk:gameChoice:list")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameChoiceVO.class, responseContainer = "list")})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameChoiceVO.class, responseContainer = "list")})
     public ResultVo<List<GameChoiceVO>> choiceList() {
     public ResultVo<List<GameChoiceVO>> choiceList() {
         return new ResultVo<>(gameService.choiceList());
         return new ResultVo<>(gameService.choiceList());
@@ -102,6 +113,7 @@ public class GameController {
 
 
     @ApiOperation(value = "删除游戏")
     @ApiOperation(value = "删除游戏")
     @DeleteMapping(value = "/delete")
     @DeleteMapping(value = "/delete")
+    @PreAuthorize(permissionKey = "sdk:game:delete")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     public ResultVo<Boolean> deleteById(@RequestParam Long id) {
     public ResultVo<Boolean> deleteById(@RequestParam Long id) {
         return new ResultVo<>(gameService.deleteById(id));
         return new ResultVo<>(gameService.deleteById(id));
@@ -109,6 +121,7 @@ public class GameController {
 
 
     @ApiOperation(value = "游戏状态变更")
     @ApiOperation(value = "游戏状态变更")
     @PatchMapping(value = "/status/update")
     @PatchMapping(value = "/status/update")
+    @PreAuthorize(permissionKey = "sdk:game:statusUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GameListVO.class)})
     public ResultVo<Boolean> statusUpdate(@RequestParam Long id, @RequestParam Integer status) {
     public ResultVo<Boolean> statusUpdate(@RequestParam Long id, @RequestParam Integer status) {
         return new ResultVo<>(gameService.statusUpdate(id, status));
         return new ResultVo<>(gameService.statusUpdate(id, status));

+ 3 - 0
game-module/game-manage/src/main/java/com/zanxiang/manage/controller/GamePictureController.java

@@ -1,6 +1,7 @@
 package com.zanxiang.manage.controller;
 package com.zanxiang.manage.controller;
 
 
 import com.zanxiang.common.domain.ResultVo;
 import com.zanxiang.common.domain.ResultVo;
+import com.zanxiang.erp.security.annotation.PreAuthorize;
 import com.zanxiang.manage.domain.params.GamePictureParam;
 import com.zanxiang.manage.domain.params.GamePictureParam;
 import com.zanxiang.manage.domain.vo.GamePictureVO;
 import com.zanxiang.manage.domain.vo.GamePictureVO;
 import com.zanxiang.manage.service.GamePictureService;
 import com.zanxiang.manage.service.GamePictureService;
@@ -29,6 +30,7 @@ public class GamePictureController {
 
 
     @ApiOperation(value = "获取游戏图片配置")
     @ApiOperation(value = "获取游戏图片配置")
     @GetMapping(value = "/info")
     @GetMapping(value = "/info")
+    @PreAuthorize(permissionKey = "sdk:gamePicture:info")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GamePictureVO.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = GamePictureVO.class)})
     public ResultVo<GamePictureVO> getByGameId(@RequestParam Long id) {
     public ResultVo<GamePictureVO> getByGameId(@RequestParam Long id) {
         return new ResultVo<>(gamePictureService.getByGameId(id));
         return new ResultVo<>(gamePictureService.getByGameId(id));
@@ -36,6 +38,7 @@ public class GamePictureController {
 
 
     @ApiOperation(value = "游戏图片配置添加或者更新")
     @ApiOperation(value = "游戏图片配置添加或者更新")
     @PostMapping(value = "/add/or/update")
     @PostMapping(value = "/add/or/update")
+    @PreAuthorize(permissionKey = "sdk:gamePicture:addOrUpdate")
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     @ApiResponses(value = {@ApiResponse(code = 200, message = "成功", response = Boolean.class)})
     public ResultVo<Boolean> addOrUpdate(@Validated @RequestBody GamePictureParam param) {
     public ResultVo<Boolean> addOrUpdate(@Validated @RequestBody GamePictureParam param) {
         return new ResultVo<>(gamePictureService.addOrUpdate(param));
         return new ResultVo<>(gamePictureService.addOrUpdate(param));