权限

src/main/java/com/diagbot/config/ResourceServerConfigurer.java

@@ -139,8 +139,8 @@ public class ResourceServerConfigurer extends ResourceServerConfigurerAdapter {
                 .antMatchers("/graph/conceptInfo/getStaticKnowledge").permitAll()
                 .antMatchers("/graph/conceptInfo/getStaticKnowledgeForHIS").permitAll()
                 .antMatchers("/graph/conceptInfo/getPage").permitAll()
-                .antMatchers("/graph/conceptInfo/saveOrUpdateRecord").permitAll()
-                .antMatchers("/graph/conceptInfo/changeStatus").permitAll()
+                //.antMatchers("/graph/conceptInfo/saveOrUpdateRecord").permitAll()
+                //.antMatchers("/graph/conceptInfo/changeStatus").permitAll()
                 .antMatchers("/graph/conceptInfo/isExist").permitAll()
                 .antMatchers("/graph/conceptInfo/getRecordById").permitAll()
                 .antMatchers("/sys/planDetail/getPlanDetailDatas").permitAll()

src/main/java/com/diagbot/config/security/UrlAccessDecisionManager.java

@@ -181,8 +181,8 @@ public class UrlAccessDecisionManager implements AccessDecisionManager {
                 || matchers("/graph/conceptInfo/getStaticKnowledge", request)
                 || matchers("/graph/conceptInfo/getStaticKnowledgeForHIS", request)
                 || matchers("/graph/conceptInfo/getPage", request)
-                || matchers("/graph/conceptInfo/saveOrUpdateRecord", request)
-                || matchers("/graph/conceptInfo/changeStatus", request)
+                //|| matchers("/graph/conceptInfo/saveOrUpdateRecord", request)
+                //|| matchers("/graph/conceptInfo/changeStatus", request)
                 || matchers("/graph/conceptInfo/isExist", request)
                 || matchers("/graph/conceptInfo/getRecordById", request)
                 || matchers("/sys/planDetail/getPlanDetailDatas", request)