From 7f1f58a2b5ae887d3f38a4bb24b820d9df397aaf Mon Sep 17 00:00:00 2001
From: qiankanghui <kanghui.qian@xujiesoft.com>
Date: Tue, 20 Oct 2026 17:23:40 +0800
Subject: [PATCH] =?UTF-8?q?=E6=9F=A5=E8=AF=A2=E6=9D=83=E9=99=90?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../pms/controller/PartSparePurchaseApplyController.java        | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java b/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java
index 3b3fe632..5d8a9213 100644
--- a/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java
+++ b/src/main/java/com/xujie/sys/modules/pms/controller/PartSparePurchaseApplyController.java
@@ -6,6 +6,7 @@ import com.xujie.sys.modules.pms.data.PartSparePurchaseApplyQueryData;
 import com.xujie.sys.modules.pms.entity.PartSparePurchaseApplyEntity;
 import com.xujie.sys.modules.pms.service.PartSparePurchaseApplyService;
 import lombok.extern.slf4j.Slf4j;
+import org.apache.shiro.authz.annotation.Logical;
 import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -25,6 +26,7 @@ public class PartSparePurchaseApplyController {
     private PartSparePurchaseApplyService partSparePurchaseApplyService;
 
     @PostMapping("/queryPage")
+    @RequiresPermissions(value = {"partSpare:purchase:view", "partSpare:purchase:edit"}, logical = Logical.OR)
     public R queryPage(@RequestBody PartSparePurchaseApplyQueryData data) {
         PageUtils page = partSparePurchaseApplyService.queryPage(data);
         return R.ok().put("page", page);