fix: 菜单和字典表管理只能是超级管理员和平台管理员可以操作

 package org.thingsboard.server.controller.yunteng;
 package org.thingsboard.server.controller.yunteng;
 
 
 import lombok.RequiredArgsConstructor;
 import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.*;
 import org.springframework.web.bind.annotation.*;
 import org.thingsboard.server.common.data.exception.ThingsboardException;
 import org.thingsboard.server.common.data.exception.ThingsboardException;
@@ -23,6 +24,7 @@ import static org.thingsboard.server.common.data.yunteng.constant.QueryConstant.
 @RestController
 @RestController
 @RequestMapping("api/yt/dict")
 @RequestMapping("api/yt/dict")
 @RequiredArgsConstructor
 @RequiredArgsConstructor
+@PreAuthorize("hasAnyAuthority('SYS_ADMIN','PLATFORM_ADMIN')")
 public class YtDictController extends BaseController {
 public class YtDictController extends BaseController {
   private final SysDictService sysDictService;
   private final SysDictService sysDictService;
 
 

@@ -2,6 +2,7 @@ package org.thingsboard.server.controller.yunteng;
 
 
 import lombok.RequiredArgsConstructor;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
 import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.*;
 import org.springframework.web.bind.annotation.*;
 import org.thingsboard.server.common.data.exception.ThingsboardException;
 import org.thingsboard.server.common.data.exception.ThingsboardException;
@@ -26,6 +27,7 @@ import static org.thingsboard.server.common.data.yunteng.constant.QueryConstant.
 @RestController
 @RestController
 @RequestMapping("api/yt/dictItem")
 @RequestMapping("api/yt/dictItem")
 @RequiredArgsConstructor
 @RequiredArgsConstructor
+@PreAuthorize("hasAnyAuthority('SYS_ADMIN','PLATFORM_ADMIN')")
 public class YtDictItemController extends BaseController {
 public class YtDictItemController extends BaseController {
   private final SysDictItemService sysDictItemService;
   private final SysDictItemService sysDictItemService;
 
 

@@ -51,7 +51,7 @@ public class YtMenuController extends BaseController {
   }
   }
 
 
   @PutMapping
   @PutMapping
-  //  @PreAuthorize("@iot.check('menu:update')")
+  @PreAuthorize("hasAnyAuthority('SYS_ADMIN','PLATFORM_ADMIN')")
   public MenuDTO updateMenu(@RequestBody MenuDTO menuDTO) throws ThingsboardException {
   public MenuDTO updateMenu(@RequestBody MenuDTO menuDTO) throws ThingsboardException {
     Assert.notNull(menuDTO.getId(), "menuId cannot be null");
     Assert.notNull(menuDTO.getId(), "menuId cannot be null");
     return menuService.updateMenu(
     return menuService.updateMenu(
@@ -59,7 +59,7 @@ public class YtMenuController extends BaseController {
   }
   }
 
 
   @PostMapping
   @PostMapping
-  @PreAuthorize("hasAnyAuthority('SYS_ADMIN')")
+  @PreAuthorize("hasAnyAuthority('SYS_ADMIN','PLATFORM_ADMIN')")
   public ResponseEntity<MenuDTO> saveMenu(@RequestBody MenuDTO menuDTO)
   public ResponseEntity<MenuDTO> saveMenu(@RequestBody MenuDTO menuDTO)
       throws ThingsboardException {
       throws ThingsboardException {
     MenuDTO newMenuDTO =
     MenuDTO newMenuDTO =
@@ -79,7 +79,7 @@ public class YtMenuController extends BaseController {
   }
   }
 
 
   @DeleteMapping
   @DeleteMapping
-  @PreAuthorize("hasAnyAuthority('SYS_ADMIN')")
+  @PreAuthorize("hasAnyAuthority('SYS_ADMIN','PLATFORM_ADMIN')")
   public void deleteMenus(@RequestBody String[] ids) throws ThingsboardException {
   public void deleteMenus(@RequestBody String[] ids) throws ThingsboardException {
     if (ids.length == 0) {
     if (ids.length == 0) {
       throw new YtDataValidationException("please provide menu ids to delete");
       throw new YtDataValidationException("please provide menu ids to delete");