commit

2026-05-28 11:26:10 +08:00
parent 2087a18137
commit 9825731094
1 changed files with 6 additions and 5 deletions
@@ -118,11 +118,12 @@ public class MemberInfoPageForm extends PageForm {

        // 权限判断
        if (!AuthUtil.hasRoleOr(RoleConstant.SYSADMIN.name(), RoleConstant.SCHOOL_UNION_ADMIN.name())) {
-            SqlExpressionGroup seg = new SqlExpressionGroup();
-            seg.or(prefix + "unionId", "=", SecurityUtil.getUnionId());
-            seg.or(prefix + "unionId", "is", null);
-            seg.or(prefix + "unionId", "=", "");
-            cnd.and(seg);
+            // 分工会主席只能查看本人所在单位会员，避免无分工会人员被 unionId 空值兜底查出。
+            if (AuthUtil.hasRole(RoleConstant.BRANCH_UNION_CHAIRMAN.name())) {
+                cnd.and(prefix + "unitId", "=", SecurityUtil.getUnitId());
+            } else {
+                cnd.and(prefix + "unionId", "=", SecurityUtil.getUnionId());
+            }
        } else {
            cnd.andEX(prefix + "unionId", "=", this.getUnionId());
        }