update

src/main/java/au/com/royalpay/payment/manage/permission/manager/ManagerUserInterceptor.java

@@ -104,13 +104,13 @@ public class ManagerUserInterceptor extends HandlerInterceptorAdapter implements
             }
         }
 
-//        JSONObject func = permissionPartnerManager.getPartnerFuncById(funcId);
+        JSONObject func = permissionPartnerManager.getPartnerFuncById(funcId);
-//        if(func!=null && StringUtils.isNotEmpty(func.getString("module_id"))){
+        if(func!=null && StringUtils.isNotEmpty(func.getString("module_id"))){
-//            JSONArray arr = loginUser.getJSONArray("available_module_ids");
+            JSONArray arr = loginUser.getJSONArray("available_module_ids");
-//            if (arr == null || !arr.contains(func.getString("module_id"))) {
+            if (arr == null || !arr.contains(func.getString("module_id"))) {
-//                throw new ForbiddenException("error.permission.nopermission");
+                throw new ForbiddenException("error.permission.nopermission");
-//            }
+            }
-//        }
+        }
         request.setAttribute(CommonConsts.PARTNER_STATUS, loginUser);
     }