权限 粒度化 到 系统 部门 部门及子部门 个人用户

AuthOperater 负责检查权限
  1. //
  2. // Source code recreated from a .class file by IntelliJ IDEA
  3. // (powered by Fernflower decompiler)
  4. //
  6. package cn.com.do1.component.systemmgr.auth;
  8. import cn.com.do1.common.util.string.StringUtil;
  9. import cn.com.do1.component.systemmgr.auth.AuthQuickDac;
  10. import cn.com.do1.component.systemmgr.auth.UserAuth;
  11. import cn.com.do1.component.systemmgr.util.CollectionUtils;
  12. import cn.com.do1.component.systemmgr.util.SystemRoleCacheMgr;
  13. import cn.com.do1.component.systemmgr.util.Constants.ACCESS_LEVEL;
  14. import cn.com.do1.dqdp.core.DqdpAppContext;
  15. import java.util.ArrayList;
  16. import java.util.Collections;
  17. import java.util.Iterator;
  18. import java.util.List;
  19. import java.util.Map;
  20. import org.springframework.security.core.GrantedAuthority;
  21. import org.springframework.security.core.userdetails.UserDetails;
  23. public class AuthOperater {
  24.     public AuthOperater() {
  25.     }
  26.     //查询 权限code的级别
  27.     public static int ckCurrentUserPerAccessLevel(String permissionCode) throws Exception {
  28.         if(permissionCode == null) {
  29.             throw new Exception("权限代码不能为空！");
  30.         } else if(UserAuth.isSuperUser()) {
  31.             return ACCESS_LEVEL.ALL.value();
  32.         } else {
  33.             String[] roleIds = UserAuth.getSessionPerson().getRoleIds().split(",");
  34.             ArrayList accessLevList = new ArrayList();
  35.             String[] var6 = roleIds;
  36.             int var5 = roleIds.length;
  38.             for(int var4 = 0; var4 < var5; ++var4) {
  39.                 String roleid = var6[var4];
  40.                 List perlist = SystemRoleCacheMgr.getOPermissByRoleId(roleid);
  41.                 Iterator var9 = perlist.iterator();
  43.                 while(var9.hasNext()) {
  44.                     Map per = (Map)var9.next();
  45.                     if(per.get("PERMISSION_CODE").toString().equalsIgnoreCase(permissionCode)) {
  46.                         accessLevList.add(Integer.valueOf(per.get("ACCESS_LEVEL").toString()));
  47.                     }
  48.                 }
  49.             }
  51.             if(accessLevList.size() <= 0) {
  52.                 return ACCESS_LEVEL.NOT_HAS.value();
  53.             } else {
  54.                 return ((Integer)Collections.min(accessLevList)).intValue();
  55.             }
  56.         }
  57.     }
  58.  //检查当前用户是否包含权限code
  59.     public static boolean ckCurrentUserHasPer(String permissionCode) throws Exception {
  60.         if(permissionCode == null) {
  61.             return false;
  62.         } else if(UserAuth.isSuperUser()) {
  63.             return true;
  64.         } else {
  65.             UserDetails userDetails = DqdpAppContext.getCurrentUser();
  66.             Iterator var3 = userDetails.getAuthorities().iterator();
  68.             while(var3.hasNext()) {
  69.                 GrantedAuthority grantedAuthority = (GrantedAuthority)var3.next();
  71.                 try {
  72.                     if("all".equals(permissionCode) || StringUtil.isInContainer(permissionCode.split(","), grantedAuthority.getAuthority())) {
  73.                         return true;
  74.                     }
  75.                 } catch (Exception var4) {
  76.                     return false;
  77.                 }
  78.             }
  80.             return false;
  81.         }
  82.     }
  83. //检查用户针对改权限拥有的级别所有的部门id
  84.     public static String ckUserModuelPreDepts(String permissionCode) throws Exception {
  85.         int accessCode = ckCurrentUserPerAccessLevel(permissionCode);
  86.         if(accessCode != ACCESS_LEVEL.NOT_HAS.value() && accessCode != ACCESS_LEVEL.USER.value()) {
  87.             if(accessCode != ACCESS_LEVEL.ALL.value() && accessCode != ACCESS_LEVEL.SYSTEM_USER.value()) {
  88.                 ArrayList deptList = null;
  89.                 if(accessCode == ACCESS_LEVEL.DEPT.value()) {
  90.                     deptList = (ArrayList)AuthQuickDac.getContext().searchUserDeptLevelOrg(UserAuth.getSessionUser().getId().toLowerCase());
  91.                 }
  93.                 if(accessCode == ACCESS_LEVEL.DEPT_AND_CHILDREN.value()) {
  94.                     deptList = (ArrayList)AuthQuickDac.getContext().searchUserDChildLevOrg(UserAuth.getSessionUser().getId().toLowerCase());
  95.                 }
  97.                 deptList = (ArrayList)CollectionUtils.replaceList(deptList);
  98.                 return CollectionUtils.listToString(deptList);
  99.             } else {
  100.                 return "all";
  101.             }
  102.         } else {
  103.             return null;
  104.         }
  105.     }
  106. }
AuthQuickDac 负责查询权限粒度

  1. //
  2. // Source code recreated from a .class file by IntelliJ IDEA
  3. // (powered by Fernflower decompiler)
  4. //
  6. package cn.com.do1.component.systemmgr.auth;
  8. import cn.com.do1.common.dac.QuickDAC;
  9. import cn.com.do1.component.systemmgr.org.model.TbDqdpOrgPO;
  10. import cn.com.do1.component.systemmgr.user.model.TbUserRoleDeptRefPO;
  11. import cn.com.do1.component.systemmgr.util.CollectionUtils;
  12. import cn.com.do1.component.systemmgr.util.SystemCacheUtils;
  13. import cn.com.do1.dqdp.core.DqdpAppContext;
  14. import java.sql.SQLException;
  15. import java.util.ArrayList;
  16. import java.util.Iterator;
  17. import java.util.List;
  18. import java.util.Map;
  19. import java.util.concurrent.TimeUnit;
  20. import java.util.concurrent.locks.ReentrantLock;
  21. import javax.sql.DataSource;
  22. import org.slf4j.Logger;
  23. import org.slf4j.LoggerFactory;
  25. public class AuthQuickDac {
  26.     private static final Logger logger = LoggerFactory.getLogger(AuthQuickDac.class);
  27.     private static ReentrantLock lock = new ReentrantLock(true);
  28.     private static ThreadLocal<Integer> executeCount = new ThreadLocal();
  29.     private static AuthQuickDac authQuickDac;
  30.     private DataSource ds;
  32.     private AuthQuickDac() {
  33.         executeCount.set(Integer.valueOf(5));
  34.         this.ds = (DataSource)DqdpAppContext.getSpringContext().getBean("dataSource");
  35.     }
  37.     public static AuthQuickDac getContext() {
  38.         try {
  39.             lock.lock();
  40.             if(authQuickDac == null) {
  41.                 authQuickDac = new AuthQuickDac();
  42.             }
  43.         } finally {
  44.             lock.unlock();
  45.         }
  47.         return authQuickDac;
  48.     }
  50.     private boolean getLook() {
  51.         try {
  52.             if(lock.tryLock(30L, TimeUnit.MILLISECONDS)) {
  53.                 executeCount.set(Integer.valueOf(0));
  54.                 logger.info("获取锁成功");
  55.                 return true;
  56.             } else {
  57.                 logger.info("在指定的时间内未能获取到锁");
  58.                 if(5 <= ((Integer)executeCount.get()).intValue()) {
  59.                     logger.info("系统连续5次获取锁失败");
  60.                     return false;
  61.                 } else {
  62.                     executeCount.set(Integer.valueOf(((Integer)executeCount.get()).intValue() + 1));
  63.                     return this.getLook();
  64.                 }
  65.             }
  66.         } catch (InterruptedException var2) {
  67.             logger.error(var2.getMessage(), var2);
  68.             return false;
  69.         }
  70.     }
  72.     public List searchUserDeptLevelOrg(String userid) {
  73.         if(!this.getLook()) {
  74.             return null;
  75.         } else {
  76.             QuickDAC quickDAC = null;
  78.             try {
  79.                 quickDAC = new QuickDAC(this.ds.getConnection());
  80.                 quickDAC.preparedSql("select * from TB_USER_ROLE_DEPT_REF where USER_ID=:userid");
  81.                 quickDAC.setPreValue("userid", userid);
  82.                 List e = quickDAC.getList(TbUserRoleDeptRefPO.class);
  83.                 ArrayList depss = new ArrayList();
  84.                 if(e.size() > 0) {
  85.                     Iterator var6 = e.iterator();
  87.                     while(var6.hasNext()) {
  88.                         TbUserRoleDeptRefPO tbUserRoleDeptRefPO = (TbUserRoleDeptRefPO)var6.next();
  89.                         depss.add(tbUserRoleDeptRefPO.getOrgId());
  90.                     }
  91.                 }
  93.                 ArrayList var8 = depss;
  94.                 return var8;
  95.             } catch (Exception var11) {
  96.                 logger.error(var11.getMessage(), var11);
  97.             } finally {
  98.                 lock.unlock();
  99.                 quickDAC.destoryWithoutConnection();
  100.             }
  102.             return null;
  103.         }
  104.     }
  106.     public List searchUserDChildLevOrg(String userid) {
  107.         if(!this.getLook()) {
  108.             return null;
  109.         } else {
  110.             QuickDAC quickDAC = null;
  112.             try {
  113.                 quickDAC = new QuickDAC(this.ds.getConnection());
  114.                 quickDAC.preparedSql("select * from TB_USER_ROLE_DEPT_REF where USER_ID=:userid");
  115.                 quickDAC.setPreValue("userid", userid);
  116.                 List e = quickDAC.getList(TbUserRoleDeptRefPO.class);
  117.                 ArrayList depss = new ArrayList();
  118.                 Iterator orgid = e.iterator();
  120.                 while(orgid.hasNext()) {
  121.                     TbUserRoleDeptRefPO list = (TbUserRoleDeptRefPO)orgid.next();
  122.                     depss.add(list.getOrgId());
  123.                 }
  125.                 depss = (ArrayList)CollectionUtils.replaceList(depss);
  126.                 ArrayList list1 = new ArrayList();
  127.                 if(depss.size() > 0) {
  128.                     Iterator var7 = depss.iterator();
  130.                     while(var7.hasNext()) {
  131.                         String orgid1 = (String)var7.next();
  132.                         if(SystemCacheUtils.getOrgByOrgId(orgid1).get("IS_PARENT").toString().equalsIgnoreCase("0")) {
  133.                             Map org = SystemCacheUtils.getOrgByOrgId(orgid1);
  134.                             CollectionUtils.addListToList(list1, this.searchOrgByLRVal(quickDAC, org.get("LEFTVALUE").toString(), org.get("RIGHTVALUE").toString()));
  135.                         }
  136.                     }
  137.                 }
  139.                 CollectionUtils.addListToList(list1, depss);
  140.                 ArrayList var10 = list1;
  141.                 return var10;
  142.             } catch (Exception var13) {
  143.                 logger.error(var13.getMessage(), var13);
  144.             } finally {
  145.                 lock.unlock();
  146.                 quickDAC.destoryWithoutConnection();
  147.             }
  149.             return null;
  150.         }
  151.     }
  153.     private List searchOrgByLRVal(QuickDAC qac, String leftVal, String rightVal) throws SQLException {
  154.         qac.preparedSql("select * from TB_DQDP_ORGANIZATION where LEFTVALUE >:leftval and RIGHTVALUE <:rightval");
  155.         qac.setPreValue("leftval", leftVal);
  156.         qac.setPreValue("rightval", rightVal);
  157.         List list = qac.getList(TbDqdpOrgPO.class);
  158.         ArrayList orgs = new ArrayList();
  159.         if(list.size() > 0) {
  160.             Iterator var7 = list.iterator();
  162.             while(var7.hasNext()) {
  163.                 TbDqdpOrgPO tbDqdpOrgPO = (TbDqdpOrgPO)var7.next();
  164.                 orgs.add(tbDqdpOrgPO.getOrganizationId());
  165.             }
  166.         }
  168.         return orgs;
  169.     }
  170. }




posted on 2017-03-22 09:00  signheart  阅读(239)  评论(0)  编辑  收藏  举报

导航