zoukankan      html  css  js  c++  java

  • 权限 粒度化 到 系统 部门 部门及子部门 个人用户

    AuthOperater 负责检查权限
    1. //
    2. // Source code recreated from a .class file by IntelliJ IDEA
    3. // (powered by Fernflower decompiler)
    4. //
    6. package cn.com.do1.component.systemmgr.auth;
    8. import cn.com.do1.common.util.string.StringUtil;
    9. import cn.com.do1.component.systemmgr.auth.AuthQuickDac;
    10. import cn.com.do1.component.systemmgr.auth.UserAuth;
    11. import cn.com.do1.component.systemmgr.util.CollectionUtils;
    12. import cn.com.do1.component.systemmgr.util.SystemRoleCacheMgr;
    13. import cn.com.do1.component.systemmgr.util.Constants.ACCESS_LEVEL;
    14. import cn.com.do1.dqdp.core.DqdpAppContext;
    15. import java.util.ArrayList;
    16. import java.util.Collections;
    17. import java.util.Iterator;
    18. import java.util.List;
    19. import java.util.Map;
    20. import org.springframework.security.core.GrantedAuthority;
    21. import org.springframework.security.core.userdetails.UserDetails;
    23. public class AuthOperater {
    24.     public AuthOperater() {
    25.     }
    26.     //查询 权限code的级别
    27.     public static int ckCurrentUserPerAccessLevel(String permissionCode) throws Exception {
    28.         if(permissionCode == null) {
    29.             throw new Exception("权限代码不能为空！");
    30.         } else if(UserAuth.isSuperUser()) {
    31.             return ACCESS_LEVEL.ALL.value();
    32.         } else {
    33.             String[] roleIds = UserAuth.getSessionPerson().getRoleIds().split(",");
    34.             ArrayList accessLevList = new ArrayList();
    35.             String[] var6 = roleIds;
    36.             int var5 = roleIds.length;
    38.             for(int var4 = 0; var4 < var5; ++var4) {
    39.                 String roleid = var6[var4];
    40.                 List perlist = SystemRoleCacheMgr.getOPermissByRoleId(roleid);
    41.                 Iterator var9 = perlist.iterator();
    43.                 while(var9.hasNext()) {
    44.                     Map per = (Map)var9.next();
    45.                     if(per.get("PERMISSION_CODE").toString().equalsIgnoreCase(permissionCode)) {
    46.                         accessLevList.add(Integer.valueOf(per.get("ACCESS_LEVEL").toString()));
    47.                     }
    48.                 }
    49.             }
    51.             if(accessLevList.size() <= 0) {
    52.                 return ACCESS_LEVEL.NOT_HAS.value();
    53.             } else {
    54.                 return ((Integer)Collections.min(accessLevList)).intValue();
    55.             }
    56.         }
    57.     }
    58.  //检查当前用户是否包含权限code
    59.     public static boolean ckCurrentUserHasPer(String permissionCode) throws Exception {
    60.         if(permissionCode == null) {
    61.             return false;
    62.         } else if(UserAuth.isSuperUser()) {
    63.             return true;
    64.         } else {
    65.             UserDetails userDetails = DqdpAppContext.getCurrentUser();
    66.             Iterator var3 = userDetails.getAuthorities().iterator();
    68.             while(var3.hasNext()) {
    69.                 GrantedAuthority grantedAuthority = (GrantedAuthority)var3.next();
    71.                 try {
    72.                     if("all".equals(permissionCode) || StringUtil.isInContainer(permissionCode.split(","), grantedAuthority.getAuthority())) {
    73.                         return true;
    74.                     }
    75.                 } catch (Exception var4) {
    76.                     return false;
    77.                 }
    78.             }
    80.             return false;
    81.         }
    82.     }
    83. //检查用户针对改权限拥有的级别所有的部门id
    84.     public static String ckUserModuelPreDepts(String permissionCode) throws Exception {
    85.         int accessCode = ckCurrentUserPerAccessLevel(permissionCode);
    86.         if(accessCode != ACCESS_LEVEL.NOT_HAS.value() && accessCode != ACCESS_LEVEL.USER.value()) {
    87.             if(accessCode != ACCESS_LEVEL.ALL.value() && accessCode != ACCESS_LEVEL.SYSTEM_USER.value()) {
    88.                 ArrayList deptList = null;
    89.                 if(accessCode == ACCESS_LEVEL.DEPT.value()) {
    90.                     deptList = (ArrayList)AuthQuickDac.getContext().searchUserDeptLevelOrg(UserAuth.getSessionUser().getId().toLowerCase());
    91.                 }
    93.                 if(accessCode == ACCESS_LEVEL.DEPT_AND_CHILDREN.value()) {
    94.                     deptList = (ArrayList)AuthQuickDac.getContext().searchUserDChildLevOrg(UserAuth.getSessionUser().getId().toLowerCase());
    95.                 }
    97.                 deptList = (ArrayList)CollectionUtils.replaceList(deptList);
    98.                 return CollectionUtils.listToString(deptList);
    99.             } else {
    100.                 return "all";
    101.             }
    102.         } else {
    103.             return null;
    104.         }
    105.     }
    106. }
    AuthQuickDac 负责查询权限粒度

    1. //
    2. // Source code recreated from a .class file by IntelliJ IDEA
    3. // (powered by Fernflower decompiler)
    4. //
    6. package cn.com.do1.component.systemmgr.auth;
    8. import cn.com.do1.common.dac.QuickDAC;
    9. import cn.com.do1.component.systemmgr.org.model.TbDqdpOrgPO;
    10. import cn.com.do1.component.systemmgr.user.model.TbUserRoleDeptRefPO;
    11. import cn.com.do1.component.systemmgr.util.CollectionUtils;
    12. import cn.com.do1.component.systemmgr.util.SystemCacheUtils;
    13. import cn.com.do1.dqdp.core.DqdpAppContext;
    14. import java.sql.SQLException;
    15. import java.util.ArrayList;
    16. import java.util.Iterator;
    17. import java.util.List;
    18. import java.util.Map;
    19. import java.util.concurrent.TimeUnit;
    20. import java.util.concurrent.locks.ReentrantLock;
    21. import javax.sql.DataSource;
    22. import org.slf4j.Logger;
    23. import org.slf4j.LoggerFactory;
    25. public class AuthQuickDac {
    26.     private static final Logger logger = LoggerFactory.getLogger(AuthQuickDac.class);
    27.     private static ReentrantLock lock = new ReentrantLock(true);
    28.     private static ThreadLocal<Integer> executeCount = new ThreadLocal();
    29.     private static AuthQuickDac authQuickDac;
    30.     private DataSource ds;
    32.     private AuthQuickDac() {
    33.         executeCount.set(Integer.valueOf(5));
    34.         this.ds = (DataSource)DqdpAppContext.getSpringContext().getBean("dataSource");
    35.     }
    37.     public static AuthQuickDac getContext() {
    38.         try {
    39.             lock.lock();
    40.             if(authQuickDac == null) {
    41.                 authQuickDac = new AuthQuickDac();
    42.             }
    43.         } finally {
    44.             lock.unlock();
    45.         }
    47.         return authQuickDac;
    48.     }
    50.     private boolean getLook() {
    51.         try {
    52.             if(lock.tryLock(30L, TimeUnit.MILLISECONDS)) {
    53.                 executeCount.set(Integer.valueOf(0));
    54.                 logger.info("获取锁成功");
    55.                 return true;
    56.             } else {
    57.                 logger.info("在指定的时间内未能获取到锁");
    58.                 if(5 <= ((Integer)executeCount.get()).intValue()) {
    59.                     logger.info("系统连续5次获取锁失败");
    60.                     return false;
    61.                 } else {
    62.                     executeCount.set(Integer.valueOf(((Integer)executeCount.get()).intValue() + 1));
    63.                     return this.getLook();
    64.                 }
    65.             }
    66.         } catch (InterruptedException var2) {
    67.             logger.error(var2.getMessage(), var2);
    68.             return false;
    69.         }
    70.     }
    72.     public List searchUserDeptLevelOrg(String userid) {
    73.         if(!this.getLook()) {
    74.             return null;
    75.         } else {
    76.             QuickDAC quickDAC = null;
    78.             try {
    79.                 quickDAC = new QuickDAC(this.ds.getConnection());
    80.                 quickDAC.preparedSql("select * from TB_USER_ROLE_DEPT_REF where USER_ID=:userid");
    81.                 quickDAC.setPreValue("userid", userid);
    82.                 List e = quickDAC.getList(TbUserRoleDeptRefPO.class);
    83.                 ArrayList depss = new ArrayList();
    84.                 if(e.size() > 0) {
    85.                     Iterator var6 = e.iterator();
    87.                     while(var6.hasNext()) {
    88.                         TbUserRoleDeptRefPO tbUserRoleDeptRefPO = (TbUserRoleDeptRefPO)var6.next();
    89.                         depss.add(tbUserRoleDeptRefPO.getOrgId());
    90.                     }
    91.                 }
    93.                 ArrayList var8 = depss;
    94.                 return var8;
    95.             } catch (Exception var11) {
    96.                 logger.error(var11.getMessage(), var11);
    97.             } finally {
    98.                 lock.unlock();
    99.                 quickDAC.destoryWithoutConnection();
    100.             }
    102.             return null;
    103.         }
    104.     }
    106.     public List searchUserDChildLevOrg(String userid) {
    107.         if(!this.getLook()) {
    108.             return null;
    109.         } else {
    110.             QuickDAC quickDAC = null;
    112.             try {
    113.                 quickDAC = new QuickDAC(this.ds.getConnection());
    114.                 quickDAC.preparedSql("select * from TB_USER_ROLE_DEPT_REF where USER_ID=:userid");
    115.                 quickDAC.setPreValue("userid", userid);
    116.                 List e = quickDAC.getList(TbUserRoleDeptRefPO.class);
    117.                 ArrayList depss = new ArrayList();
    118.                 Iterator orgid = e.iterator();
    120.                 while(orgid.hasNext()) {
    121.                     TbUserRoleDeptRefPO list = (TbUserRoleDeptRefPO)orgid.next();
    122.                     depss.add(list.getOrgId());
    123.                 }
    125.                 depss = (ArrayList)CollectionUtils.replaceList(depss);
    126.                 ArrayList list1 = new ArrayList();
    127.                 if(depss.size() > 0) {
    128.                     Iterator var7 = depss.iterator();
    130.                     while(var7.hasNext()) {
    131.                         String orgid1 = (String)var7.next();
    132.                         if(SystemCacheUtils.getOrgByOrgId(orgid1).get("IS_PARENT").toString().equalsIgnoreCase("0")) {
    133.                             Map org = SystemCacheUtils.getOrgByOrgId(orgid1);
    134.                             CollectionUtils.addListToList(list1, this.searchOrgByLRVal(quickDAC, org.get("LEFTVALUE").toString(), org.get("RIGHTVALUE").toString()));
    135.                         }
    136.                     }
    137.                 }
    139.                 CollectionUtils.addListToList(list1, depss);
    140.                 ArrayList var10 = list1;
    141.                 return var10;
    142.             } catch (Exception var13) {
    143.                 logger.error(var13.getMessage(), var13);
    144.             } finally {
    145.                 lock.unlock();
    146.                 quickDAC.destoryWithoutConnection();
    147.             }
    149.             return null;
    150.         }
    151.     }
    153.     private List searchOrgByLRVal(QuickDAC qac, String leftVal, String rightVal) throws SQLException {
    154.         qac.preparedSql("select * from TB_DQDP_ORGANIZATION where LEFTVALUE >:leftval and RIGHTVALUE <:rightval");
    155.         qac.setPreValue("leftval", leftVal);
    156.         qac.setPreValue("rightval", rightVal);
    157.         List list = qac.getList(TbDqdpOrgPO.class);
    158.         ArrayList orgs = new ArrayList();
    159.         if(list.size() > 0) {
    160.             Iterator var7 = list.iterator();
    162.             while(var7.hasNext()) {
    163.                 TbDqdpOrgPO tbDqdpOrgPO = (TbDqdpOrgPO)var7.next();
    164.                 orgs.add(tbDqdpOrgPO.getOrganizationId());
    165.             }
    166.         }
    168.         return orgs;
    169.     }
    170. }
  • 相关阅读:
    HttpClientUtil
    JacksonUtils
    spring-security oauth2.0简单集成
    python连接mysql
    钉钉机器人消息体
    Android Studio gradle
    Android Studio从Eclipse导项目
    Docker
    Unity WebGL
    主席树
  • 原文地址：https://www.cnblogs.com/signheart/p/35171d5442c61100204cf7b54183cf45.html
Copyright © 2011-2022 走看看