resetPwd、changeStatus 只修改指定的参数，防止把其他参数修改了

ruoyi-modules/ruoyi-system/src/main/java/com/ruoyi/system/controller/SysUserController.java

@@ -234,9 +234,13 @@ public class SysUserController extends BaseController
     public AjaxResult resetPwd(@RequestBody SysUser user)
     {
         userService.checkUserAllowed(user);
-        user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
+
-        user.setUpdateBy(SecurityUtils.getUsername());
+        //只修改特定的属性 dazer
-        return toAjax(userService.resetPwd(user));
+        SysUser newSyuser = new SysUser();
+        newSyuser.setUserId(user.getUserId());
+        newSyuser.setPassword(SecurityUtils.encryptPassword(user.getPassword()));
+        newSyuser.setUpdateBy(SecurityUtils.getUsername());
+        return toAjax(userService.resetPwd(newSyuser));
     }
 
     /**
@@ -248,8 +252,13 @@ public class SysUserController extends BaseController
     public AjaxResult changeStatus(@RequestBody SysUser user)
     {
         userService.checkUserAllowed(user);
-        user.setUpdateBy(SecurityUtils.getUsername());
+
-        return toAjax(userService.updateUserStatus(user));
+        //只修改特定的属性 dazer
+        SysUser newSyuser = new SysUser();
+        newSyuser.setUserId(user.getUserId());
+        newSyuser.setStatus(user.getStatus());
+        newSyuser.setUpdateBy(SecurityUtils.getUsername());
+        return toAjax(userService.updateUserStatus(newSyuser));
     }
 
     /**