权限校验

src/main/java/cn/quantgroup/cashloanflowboss/api/user/service/UserServiceImpl.java

@@ -291,7 +291,7 @@ public class UserServiceImpl implements UserService {
                 return Result.buildFail("不存在对应的角色");
             }
             Role role = roleRepository.getOne(roleId);
-            if (!exist.getRole().getId().equals(roleId)) {
+            if (exist.getRole() == null || !exist.getRole().getId().equals(roleId)) {
                 exist.setRole(role);
             }
             if (roleId == 1L) {

src/main/java/cn/quantgroup/cashloanflowboss/core/configuration/ApplicationSecurityHandler.java

@@ -69,8 +69,7 @@ public class ApplicationSecurityHandler implements SecurityHandler {
         boolean hasPrivilege = principal.isSuperAdministrator();
 
         List<Role> roleList = getRoleAndParent(principal.getRoles());
-        hasPrivilege &= CollectionUtils.isEmpty(roleList);
-        hasPrivilege &= roleList.stream().anyMatch(roleItem -> this.checkAuthority(authorityId, roleItem));
+        hasPrivilege |= CollectionUtils.isNotEmpty(roleList) && roleList.stream().anyMatch(roleItem -> this.checkAuthority(authorityId, roleItem));
         if (hasPrivilege) {
             return new Tuple<>(Boolean.TRUE, null);
         } else {