服务端严格基于当前会话与登录人关联的学员身份推导数据范围，杜绝任何外部主键传入与 IDOR 越权。
+ * + * @author ruoyi + */ +@RestController +@RequestMapping("/train/me/student") +public class TrainStudentMeController extends BaseController +{ + private final ITrainingIdentityService identityService; + private final ITrainStudentService studentService; + private final TrainEnrollmentMapper enrollmentMapper; + private final TrainLessonMapper lessonMapper; + private final TrainClassReportMapper reportMapper; + private final TrainStudentCheckinMapper checkinMapper; + private final TrainStudyDurationMapper durationMapper; + private final TrainStudentPortraitMapper portraitMapper; + + public TrainStudentMeController(ITrainingIdentityService identityService, + ITrainStudentService studentService, + TrainEnrollmentMapper enrollmentMapper, + TrainLessonMapper lessonMapper, + TrainClassReportMapper reportMapper, + TrainStudentCheckinMapper checkinMapper, + TrainStudyDurationMapper durationMapper, + TrainStudentPortraitMapper portraitMapper) + { + this.identityService = identityService; + this.studentService = studentService; + this.enrollmentMapper = enrollmentMapper; + this.lessonMapper = lessonMapper; + this.reportMapper = reportMapper; + this.checkinMapper = checkinMapper; + this.durationMapper = durationMapper; + this.portraitMapper = portraitMapper; + } + + @Override + protected void startPage() + { + if (com.ruoyi.common.utils.ServletUtils.getRequestAttributes() != null) + { + super.startPage(); + } + } + + /** + * 获取学员个人档案 (敏感信息已脱敏) + */ + @PreAuthorize("@ss.hasRole('train_student') or @ss.hasRole('admin') or @ss.hasPermi('train:me:student')") + @GetMapping + public AjaxResult getStudentProfile() + { + String sId = identityService.assertStudentIdentity(); + StudentDetailVO detail = studentService.selectStudentDetail(sId); + if (detail == null) + { + throw new ServiceException("未找到对应的学员档案数据", HttpStatus.NOT_FOUND); + } + return success(detail); + } + + /** + * 获取我的参训班级与状态列表 + */ + @PreAuthorize("@ss.hasRole('train_student') or @ss.hasRole('admin') or @ss.hasPermi('train:me:student')") + @GetMapping("/enrollments") + public TableDataInfo getMyEnrollments() + { + String sId = identityService.assertStudentIdentity(); + startPage(); + List服务端严格基于当前会话与登录人关联的教师身份推导数据范围，杜绝任何外部主键传入与 IDOR 越权。
+ * + * @author ruoyi + */ +@RestController +@RequestMapping("/train/me/teacher") +public class TrainTeacherMeController extends BaseController +{ + private final ITrainingIdentityService identityService; + private final TrainTeacherMapper teacherMapper; + private final TrainLessonMapper lessonMapper; + private final TrainEnrollmentMapper enrollmentMapper; + private final TrainStudentCheckinMapper checkinMapper; + + public TrainTeacherMeController(ITrainingIdentityService identityService, + TrainTeacherMapper teacherMapper, + TrainLessonMapper lessonMapper, + TrainEnrollmentMapper enrollmentMapper, + TrainStudentCheckinMapper checkinMapper) + { + this.identityService = identityService; + this.teacherMapper = teacherMapper; + this.lessonMapper = lessonMapper; + this.enrollmentMapper = enrollmentMapper; + this.checkinMapper = checkinMapper; + } + + @Override + protected void startPage() + { + if (com.ruoyi.common.utils.ServletUtils.getRequestAttributes() != null) + { + super.startPage(); + } + } + + /** + * 获取教师本人档案信息 + */ + @PreAuthorize("@ss.hasRole('train_teacher') or @ss.hasRole('admin') or @ss.hasPermi('train:me:teacher')") + @GetMapping + public AjaxResult getTeacherProfile() + { + String tId = identityService.assertTeacherIdentity(); + TrainTeacher teacher = teacherMapper.selectTrainTeacherByTId(tId); + if (teacher == null) + { + throw new ServiceException("未找到对应的教师档案数据", HttpStatus.NOT_FOUND); + } + teacher.setUserId(null); + return success(teacher); + } + + /** + * 获取我参与任教的培训班列表 + */ + @PreAuthorize("@ss.hasRole('train_teacher') or @ss.hasRole('admin') or @ss.hasPermi('train:me:teacher')") + @GetMapping("/plans") + public TableDataInfo getMyPlans(@RequestParam(value = "planStatus", required = false) Integer planStatus) + { + String tId = identityService.assertTeacherIdentity(); + startPage(); + List提供受控候选系统用户检索、角色校验、防静默覆盖保护， + * 并复用底层 {@link ITrainingIdentityService} 执行跨表互斥与并发锁绑定。
+ * + * @author ruoyi + */ +@Service +public class TrainAccountBindingAdminService +{ + private final ITrainingIdentityService identityService; + private final ISysUserService userService; + private final ISysRoleService roleService; + private final TrainTeacherMapper teacherMapper; + private final TrainStudentMapper studentMapper; + + public TrainAccountBindingAdminService(ITrainingIdentityService identityService, + ISysUserService userService, + ISysRoleService roleService, + TrainTeacherMapper teacherMapper, + TrainStudentMapper studentMapper) + { + this.identityService = identityService; + this.userService = userService; + this.roleService = roleService; + this.teacherMapper = teacherMapper; + this.studentMapper = studentMapper; + } + + /** + * 查询候选可绑定系统用户列表 (最小受控字段) + * + * @param targetType 目标身份类型 ("TEACHER" / "STUDENT") + * @param keyword 模糊搜索关键字 (匹配 userName 或 nickName) + * @return 候选用户视图列表 + */ + public List测试用例覆盖： + * 1. 候选用户查询与状态校验（包含已停用、缺失角色、已被其他教师或学员绑定的拒绝理由） + * 2. 教师绑定：正常绑定、角色不匹配拒绝、已被绑定防静默覆盖拒绝、同账号幂等 + * 3. 教师解绑：正常解绑、未绑定幂等解绑 + * 4. 学员绑定：正常绑定、角色不匹配拒绝、已被绑定防静默覆盖拒绝、同账号幂等 + * 5. 学员解绑：正常解绑、未绑定幂等解绑 + * 6. 列表信息装配 (enrich) 校验 + *
+ * + * @author ruoyi + */ +public class TrainAccountBindingAdminTest +{ + private TrainAccountBindingAdminService service; + private TrainAccountBindingAdminController controller; + + private Map
- 智慧培训管理平台
-
-
-
- 欢迎使用智慧培训管理平台。本平台提供培训计划编排、学员主档与参训管理、智能排课排程、电子班牌联动、教学设施与实训场地调度，以及全流程多维学习数据分析等核心功能。
-
- 
-
-
-
- 系统版本：V1.0
- 版权所有：中国科学院沈阳计算技术研究所有限公司
-
-
+
+
+
+
+
+
+
diff --git a/build_ui/src/views/train/me/teacher/index.vue b/build_ui/src/views/train/me/teacher/index.vue
new file mode 100644
index 000000000..51e942acb
--- /dev/null
+++ b/build_ui/src/views/train/me/teacher/index.vue
@@ -0,0 +1,519 @@
+
+
+
+
+
+
+
+
+
+
+
+
+ SYFJGYD学员管理系统
+
+
+
+ 欢迎使用SYFJGYD学员管理系统。本平台提供培训计划编排、学员主档与参训管理、智能排课排程、电子班牌联动、教学设施与实训场地调度，以及全流程多维学习数据分析等核心功能。
+
+
+
+
+
+ 系统版本：V1.0
+ 版权所有：中国科学院沈阳计算技术研究所有限公司
+
+
+
+
+ train_teacher + train_student 冲突
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ formatPlanStatusText(scope.row.status) }}
+
+
+
+
+
+
+ 学员名册
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ scope.row.startTime || '-' }} ~ {{ scope.row.endTime || '-' }}
+
+
+
+
+ {{ scope.row.classroomName || scope.row.siteName || '-' }}
+
+
+
+
+
+ 查看考勤
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/build_ui/src/views/train/student/index.vue b/build_ui/src/views/train/student/index.vue
index 5d0bfa11d..49c76d591 100644
--- a/build_ui/src/views/train/student/index.vue
+++ b/build_ui/src/views/train/student/index.vue
@@ -82,7 +82,19 @@
-
+ 教师个人档案
+
+
+
+
+
+
+
+ {{ teacherProfile.tName }}
+ 工号：{{ teacherProfile.tId }}
+
+
+
+ 性别：
+ {{ teacherProfile.tGender || '未知' }}
+
+
+ 所属单位：
+ {{ teacherProfile.orgName || '-' }}
+
+
+ 职务/职称：
+ {{ teacherProfile.jobTitle || '-' }}
+
+
+ 联系电话：
+ {{ teacherProfile.tPhone || '-' }}
+
+
+ 联系邮箱：
+ {{ teacherProfile.tEmail || '-' }}
+
+
+ 档案状态：
+
+ {{ teacherProfile.status === 1 ? '正常' : '已停用' }}
+
+
+
+ 刷新
+
+
+
+ 当前已分配任教的培训班级列表（支持直接查看班级学员花名册）
+
+
+
+
+
+ 教师授课日程课表（支持日期范围检索与课次考勤实时查验）
+
+
+ 查询
+ 重置
+
+
+
+
+
+
+ {{ formatEnrollmentStatusText(scope.row.enrollmentStatus != null ? scope.row.enrollmentStatus : scope.row.status) }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ formatAttendanceStatusText(scope.row.checkinStatus) }}
+
+
+
+
+
+
+ {{ formatAttendanceStatusText(scope.row.checkoutStatus) }}
+
+
+
+
+
+
+ 已关联
+
+
+ {{ scope.row.userName }}
+ ({{ scope.row.nickName }})
+
+
+ 当前学员：{{ currentStudent.sName }} (学员编号: {{ currentStudent.sId }})
+
+