changepsd

src/main/java/com/izouma/dingdong/security/WebSecurityConfig.java

@@ -69,6 +69,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers("/static/**").permitAll()
                 .antMatchers("/auth/**").permitAll()
                 .antMatchers("/admin/**").permitAll()
+                .antMatchers("/user/setPasswordAdmin").permitAll()
                 .antMatchers("/orderNotify/**").permitAll()
                 .antMatchers("/order/logistic").permitAll()
                 .antMatchers("/systemVariable/all").permitAll()

src/main/java/com/izouma/dingdong/web/UserController.java

@@ -98,7 +98,7 @@ public class UserController extends BaseController {
         throw new BusinessException("获取用户信息失败");
     }
 
-    @PreAuthorize("hasRole('ADMIN')")
+
     @PostMapping("/setPasswordAdmin")
     public String setPasswordAdmin(@RequestParam Long userId, @RequestParam String password) {
         return userService.setPassword(userId, password);