微服务版后端初始化
This commit is contained in:
yaoyn
@ -0,0 +1,49 @@
|
||||
package com.xjrsoft.common.datasource.config;
|
||||
|
||||
import com.alibaba.druid.support.http.StatViewServlet;
|
||||
import com.alibaba.druid.support.http.WebStatFilter;
|
||||
import com.xjrsoft.common.core.config.CommonPropertiesConfig;
|
||||
import lombok.RequiredArgsConstructor;
|
||||
import lombok.extern.slf4j.Slf4j;
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.boot.web.servlet.FilterRegistrationBean;
|
||||
import org.springframework.boot.web.servlet.ServletRegistrationBean;
|
||||
import org.springframework.context.annotation.Bean;
|
||||
import org.springframework.context.annotation.Configuration;
|
||||
|
||||
/**
|
||||
* 数据库链接池druid监控平台的配置
|
||||
* 访问路径 <a href="http://localhost:8080/druid/index.html">...</a>
|
||||
*
|
||||
* @author Zexy
|
||||
*/
|
||||
@Configuration
|
||||
@Slf4j
|
||||
@RequiredArgsConstructor
|
||||
public class DruidConfiguration {
|
||||
|
||||
private final CommonPropertiesConfig commonPropertiesConfig;
|
||||
|
||||
@Bean
|
||||
public ServletRegistrationBean druidServlet() {
|
||||
log.info("init Druid Servlet Configuration ");
|
||||
ServletRegistrationBean servletRegistrationBean = new ServletRegistrationBean(new StatViewServlet(), "/druid/*");
|
||||
// IP白名单
|
||||
// servletRegistrationBean.addInitParameter("allow", "*");
|
||||
// IP黑名单(共同存在时，deny优先于allow)
|
||||
// servletRegistrationBean.addInitParameter("deny", "127.0.0.1");
|
||||
//控制台管理用户
|
||||
servletRegistrationBean.addInitParameter("loginUsername", commonPropertiesConfig.getDruidAccount());
|
||||
servletRegistrationBean.addInitParameter("loginPassword", commonPropertiesConfig.getDruidPassword());
|
||||
//是否能够重置数据 禁用HTML页面上的“Reset All”功能
|
||||
servletRegistrationBean.addInitParameter("resetEnable", "false");
|
||||
return servletRegistrationBean;
|
||||
}
|
||||
@Bean
|
||||
public FilterRegistrationBean filterRegistrationBean() {
|
||||
FilterRegistrationBean filterRegistrationBean = new FilterRegistrationBean(new WebStatFilter());
|
||||
filterRegistrationBean.addUrlPatterns("/*");
|
||||
filterRegistrationBean.addInitParameter("exclusions", "*.js,*.gif,*.jpg,*.png,*.css,*.ico,/druid/*");
|
||||
return filterRegistrationBean;
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,95 @@
|
||||
package com.xjrsoft.common.datasource.interceptor;
|
||||
|
||||
import cn.hutool.core.util.ObjectUtil;
|
||||
import com.baomidou.mybatisplus.core.plugins.InterceptorIgnoreHelper;
|
||||
import com.baomidou.mybatisplus.core.toolkit.PluginUtils;
|
||||
import com.baomidou.mybatisplus.extension.parser.JsqlParserSupport;
|
||||
import com.baomidou.mybatisplus.extension.plugins.inner.InnerInterceptor;
|
||||
import com.xjrsoft.common.datasource.utils.AuthorityUtil;
|
||||
import lombok.Data;
|
||||
import lombok.EqualsAndHashCode;
|
||||
import net.sf.jsqlparser.expression.Expression;
|
||||
import net.sf.jsqlparser.expression.operators.conditional.AndExpression;
|
||||
import net.sf.jsqlparser.schema.Table;
|
||||
import net.sf.jsqlparser.statement.select.*;
|
||||
import org.apache.ibatis.executor.Executor;
|
||||
import org.apache.ibatis.mapping.BoundSql;
|
||||
import org.apache.ibatis.mapping.MappedStatement;
|
||||
import org.apache.ibatis.session.ResultHandler;
|
||||
import org.apache.ibatis.session.RowBounds;
|
||||
|
||||
import java.util.List;
|
||||
|
||||
|
||||
/**
|
||||
* 数据权限处理器
|
||||
*
|
||||
* @author tzx
|
||||
* @Date: 2023/2/21 16:11
|
||||
* @since 3.4.1 +
|
||||
*/
|
||||
@Data
|
||||
@EqualsAndHashCode(callSuper = true)
|
||||
public class DataScopeInnerInterceptor extends JsqlParserSupport implements InnerInterceptor {
|
||||
|
||||
// private DataPermissionHandler dataPermissionHandler;
|
||||
//
|
||||
// @Setter
|
||||
// private static RedisUtil redisUtil;
|
||||
|
||||
|
||||
@Override
|
||||
public void beforeQuery(Executor executor, MappedStatement ms, Object parameter, RowBounds rowBounds, ResultHandler resultHandler, BoundSql boundSql) {
|
||||
if (InterceptorIgnoreHelper.willIgnoreDataPermission(ms.getId())) {
|
||||
return;
|
||||
}
|
||||
PluginUtils.MPBoundSql mpBs = PluginUtils.mpBoundSql(boundSql);
|
||||
mpBs.sql(parserSingle(mpBs.sql(), ms.getId()));
|
||||
}
|
||||
|
||||
@Override
|
||||
protected void processSelect(Select select, int index, String sql, Object obj) {
|
||||
SelectBody selectBody = select.getSelectBody();
|
||||
if (selectBody instanceof PlainSelect) {
|
||||
this.setWhere((PlainSelect) selectBody, (String) obj);
|
||||
} else if (selectBody instanceof SetOperationList) {
|
||||
SetOperationList setOperationList = (SetOperationList) selectBody;
|
||||
List<SelectBody> selectBodyList = setOperationList.getSelects();
|
||||
selectBodyList.forEach(s -> this.setWhere((PlainSelect) s, (String) obj));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 设置 where 条件
|
||||
*
|
||||
* @param plainSelect 查询对象
|
||||
* @param whereSegment 查询条件片段
|
||||
*/
|
||||
|
||||
protected void setWhere(PlainSelect plainSelect, String whereSegment) {
|
||||
//有可能是没有登录的非web请求（定时任务，初始运行） 所以必须要try catch一下
|
||||
|
||||
|
||||
FromItem fromItem = plainSelect.getFromItem();
|
||||
Table fromTable = (Table) fromItem;
|
||||
|
||||
String alias = null;
|
||||
if (ObjectUtil.isNotNull(fromTable.getAlias())) {
|
||||
alias = fromTable.getAlias().getName();
|
||||
}
|
||||
|
||||
Expression dataAuthExpression = AuthorityUtil.getDataAuthExpressionByTableName(fromTable.getName(), alias);
|
||||
|
||||
Expression currentExpression = plainSelect.getWhere();
|
||||
if (ObjectUtil.isNotNull(dataAuthExpression)) {
|
||||
if(currentExpression == null){
|
||||
currentExpression = dataAuthExpression;
|
||||
}
|
||||
else {
|
||||
currentExpression = new AndExpression(currentExpression, dataAuthExpression);
|
||||
}
|
||||
plainSelect.setWhere(currentExpression);
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,919 @@
|
||||
package com.xjrsoft.common.datasource.utils;
|
||||
|
||||
import cn.dev33.satoken.session.SaSession;
|
||||
import cn.dev33.satoken.stp.StpUtil;
|
||||
import cn.hutool.core.collection.CollectionUtil;
|
||||
import cn.hutool.core.collection.ListUtil;
|
||||
import cn.hutool.core.convert.Convert;
|
||||
import cn.hutool.core.lang.TypeReference;
|
||||
import cn.hutool.core.util.EnumUtil;
|
||||
import cn.hutool.core.util.ObjectUtil;
|
||||
import cn.hutool.core.util.StrUtil;
|
||||
import cn.hutool.extra.spring.SpringUtil;
|
||||
import com.baomidou.mybatisplus.core.toolkit.CollectionUtils;
|
||||
import com.baomidou.mybatisplus.core.toolkit.StringPool;
|
||||
import com.xjrsoft.common.core.constant.GlobalConstant;
|
||||
import com.xjrsoft.common.core.enums.*;
|
||||
import com.xjrsoft.common.core.exception.MyException;
|
||||
import com.xjrsoft.common.core.exception.ValidationException;
|
||||
import com.xjrsoft.common.redis.service.RedisUtil;
|
||||
import com.xjrsoft.organization.entity.*;
|
||||
import com.xjrsoft.system.entity.DataAuth;
|
||||
import com.xjrsoft.system.entity.DataAuthConfig;
|
||||
import com.xjrsoft.system.entity.DataAuthRelation;
|
||||
import com.xjrsoft.system.entity.DataAuthTableRelation;
|
||||
import lombok.SneakyThrows;
|
||||
import net.sf.jsqlparser.expression.Expression;
|
||||
import net.sf.jsqlparser.expression.LongValue;
|
||||
import net.sf.jsqlparser.expression.Parenthesis;
|
||||
import net.sf.jsqlparser.expression.StringValue;
|
||||
import net.sf.jsqlparser.expression.operators.conditional.AndExpression;
|
||||
import net.sf.jsqlparser.expression.operators.conditional.OrExpression;
|
||||
import net.sf.jsqlparser.expression.operators.relational.*;
|
||||
import net.sf.jsqlparser.parser.CCJSqlParserUtil;
|
||||
import net.sf.jsqlparser.schema.Column;
|
||||
|
||||
import java.util.ArrayList;
|
||||
import java.util.List;
|
||||
import java.util.Optional;
|
||||
import java.util.stream.Collectors;
|
||||
|
||||
/**
|
||||
* 数据权限工具类
|
||||
*
|
||||
* @Author: tzx
|
||||
* @Date: 2023/3/1 10:22
|
||||
*/
|
||||
public class AuthorityUtil {
|
||||
|
||||
static RedisUtil redisUtil;
|
||||
|
||||
static {
|
||||
redisUtil = SpringUtil.getBean(RedisUtil.class);
|
||||
}
|
||||
|
||||
/**
|
||||
* 根据表名 获取表达式解析
|
||||
*
|
||||
* @param tableName 表名
|
||||
* @param tableAlias 表别名
|
||||
* @return
|
||||
*/
|
||||
public static Expression getDataAuthExpressionByTableName(String tableName, String tableAlias) {
|
||||
Expression dataAuthExpression = null;
|
||||
|
||||
List<DataAuthTableRelation> dataAuthTableRelations = redisUtil.get(GlobalConstant.DATA_AUTH_TABLE_RELATION_CACHE_KEY, new TypeReference<List<DataAuthTableRelation>>() {
|
||||
});
|
||||
|
||||
//是否有设置权限
|
||||
if (CollectionUtil.isEmpty(dataAuthTableRelations) || dataAuthTableRelations.stream().noneMatch(x -> x.getTableName().equals(tableName))) {
|
||||
return null;
|
||||
}
|
||||
|
||||
//找到当前表所关联的 数据权限
|
||||
List<DataAuthTableRelation> tableDataAuths = dataAuthTableRelations.stream().filter(x -> x.getTableName().equals(tableName)).collect(Collectors.toList());
|
||||
|
||||
List<Long> allDataAuthId = tableDataAuths.stream().map(DataAuthTableRelation::getDataAuthId).collect(Collectors.toList());
|
||||
List<DataAuth> dataAuths = redisUtil.get(GlobalConstant.DATA_AUTH_CACHE_KEY, new TypeReference<List<DataAuth>>() {
|
||||
});
|
||||
|
||||
List<DataAuth> thisTableAuthDataList = dataAuths.stream().filter(x -> allDataAuthId.contains(x.getId())).collect(Collectors.toList());
|
||||
|
||||
List<DataAuthRelation> authRelationList = redisUtil.get(GlobalConstant.DATA_AUTH_RELATION_CACHE_KEY, new TypeReference<List<DataAuthRelation>>() {
|
||||
});
|
||||
|
||||
List<DataAuthConfig> authConfigList = redisUtil.get(GlobalConstant.DATA_AUTH_CONFIG_CACHE_KEY, new TypeReference<List<DataAuthConfig>>() {
|
||||
});
|
||||
|
||||
for (DataAuth dataAuth : thisTableAuthDataList) {
|
||||
Expression expression = null;
|
||||
List<Long> userIds = new ArrayList<>();
|
||||
//如果是用户权限
|
||||
if (dataAuth.getAuthType() == DataAuthTypeEnum.USER.getCode()) {
|
||||
//找出有那些用户被赋值了 此数据权限
|
||||
userIds = authRelationList.stream().filter(x -> x.getDataAuthId().equals(dataAuth.getId())).map(DataAuthRelation::getObjectId).collect(Collectors.toList());
|
||||
} else {
|
||||
List<Long> roleIds = authRelationList.stream().filter(x -> x.getDataAuthId().equals(dataAuth.getId())).map(DataAuthRelation::getObjectId).collect(Collectors.toList());
|
||||
|
||||
List<Long> currentRoleIdList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_ROLE_ID_KEY, new ArrayList<>());
|
||||
|
||||
//如果当前登陆人不包含 这些 角色id 默认不添加数据权限
|
||||
if (currentRoleIdList.stream().noneMatch(roleIds::contains)) {
|
||||
continue;
|
||||
}
|
||||
userIds.add(StpUtil.getLoginIdAsLong());
|
||||
}
|
||||
//判断当前用户是否包含此数据权限
|
||||
if (userIds.contains(StpUtil.getLoginIdAsLong())) {
|
||||
|
||||
//如果是简易模式
|
||||
if (dataAuth.getAuthMethod() == DataAuthMethodEnum.SIMPLE.getCode()) {
|
||||
//所有能查看的用户数据
|
||||
List<Long> dataAuthSimpleUserId = getDataAuthSimpleUserId(dataAuth.getAuthScope());
|
||||
|
||||
List<Expression> expressionList = new ArrayList<>();
|
||||
for (Long aLong : dataAuthSimpleUserId) {
|
||||
expressionList.add(new LongValue(aLong));
|
||||
}
|
||||
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, GlobalConstant.AUTH_USER_ID));
|
||||
inExpression.setRightItemsList(new ExpressionList(expressionList));
|
||||
|
||||
expression = inExpression;
|
||||
|
||||
}
|
||||
//如果是自定义模式
|
||||
else {
|
||||
List<DataAuthConfig> thisDataAuthConfig = authConfigList.stream().filter(x -> x.getDataAuthId().equals(dataAuth.getId())).collect(Collectors.toList());
|
||||
expression = getDataAuthCustomExpression(thisDataAuthConfig, dataAuth, tableAlias);
|
||||
}
|
||||
// 组装数据权限，取并集，用or连接
|
||||
if (dataAuthExpression == null) {
|
||||
dataAuthExpression = expression;
|
||||
} else {
|
||||
dataAuthExpression = new OrExpression(dataAuthExpression, new Parenthesis(expression));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return dataAuthExpression;
|
||||
}
|
||||
|
||||
/**
|
||||
* 自定义模式 根据数据权限 获取 Expression
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
@SneakyThrows
|
||||
public static Expression getDataAuthCustomExpression(List<DataAuthConfig> configs, DataAuth dataAuth, String tableAlias) {
|
||||
Expression dataAuthExpression = null;
|
||||
|
||||
if (StrUtil.isNotBlank(dataAuth.getAuthFormula())) {
|
||||
|
||||
StringBuilder resultExpresionString = new StringBuilder();
|
||||
String[] split = dataAuth.getAuthFormula().split("");
|
||||
|
||||
for (int i = 0 ; i < split.length ;i++) {
|
||||
//如果是数字 并且 包含当前
|
||||
if (StrUtil.isNumeric(split[i])) {
|
||||
Integer order = Convert.toInt(split[i]);
|
||||
|
||||
Optional<DataAuthConfig> configOptional = configs.stream().filter(x -> ObjectUtil.equals(x.getOrderNumber(), order)).findFirst();
|
||||
if (!configOptional.isPresent()) {
|
||||
continue;
|
||||
}
|
||||
Expression expression = getExpression(tableAlias, configOptional.get());
|
||||
resultExpresionString.append(expression);
|
||||
} else {
|
||||
//有三种情况，（、）、and、or
|
||||
if ((split[i].equals("a") && split[i+1].equals("n") && split[i+2].equals("d"))
|
||||
|| (split[i].equals("A") && split[i+1].equals("N") && split[i+2].equals("D"))){
|
||||
i = i + 2;
|
||||
resultExpresionString.append(" and ");
|
||||
} else if ((split[i].equals("o") && split[i+1].equals("r"))
|
||||
|| (split[i].equals("O") && split[i+1].equals("R"))) {
|
||||
i = i + 1;
|
||||
resultExpresionString.append(" or ");
|
||||
}else {
|
||||
resultExpresionString.append(split[i]);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
dataAuthExpression = CCJSqlParserUtil.parseExpression(resultExpresionString.toString());
|
||||
}
|
||||
|
||||
|
||||
// if (StrUtil.isNotBlank(dataAuth.getAuthFormula())) {
|
||||
// String OrString = "or";
|
||||
// String AndString = "and";
|
||||
// //首先根据 or 切割 字符串
|
||||
// String[] ors = dataAuth.getAuthFormula().toLowerCase().split(OrString);
|
||||
//
|
||||
// for (int i = 0; i < ors.length; i++) {
|
||||
// //去除左右括号 再根据 and 切割
|
||||
// String[] condition = ors[i].replace(StringPool.LEFT_BRACKET,StringPool.EMPTY).replace(StringPool.RIGHT_BRACKET,StringPool.EMPTY).toLowerCase().split(AndString);
|
||||
// Expression expression = null;
|
||||
// for (String index : condition) {
|
||||
// Optional<DataAuthConfig> configOptional = configs.stream().filter(x -> ObjectUtil.equals(x.getOrderNumber(), Integer.valueOf(index.trim()))).findFirst();
|
||||
//
|
||||
// if (!configOptional.isPresent()) {
|
||||
// continue;
|
||||
// }
|
||||
// expression = getExpression(tableAlias, expression, configOptional.get());
|
||||
// }
|
||||
// //如果是最后一个 不再需要拼接or
|
||||
// if(i != ors.length - 1){
|
||||
// //如果是第一个条件 直接赋值
|
||||
// if(ObjectUtil.isNull(dataAuthExpression)){
|
||||
// dataAuthExpression = new Parenthesis(expression);
|
||||
// }
|
||||
// else {
|
||||
// dataAuthExpression = new OrExpression(dataAuthExpression, new Parenthesis(expression));
|
||||
// }
|
||||
// }
|
||||
// else {
|
||||
// dataAuthExpression = new AndExpression(dataAuthExpression,new Parenthesis(expression));
|
||||
// }
|
||||
//// //如果有括号
|
||||
//// if (ors[i].contains(StringPool.LEFT_BRACKET) && ors[i].contains(StringPool.RIGHT_BRACKET)) {
|
||||
////
|
||||
//// }
|
||||
////
|
||||
//
|
||||
// }
|
||||
//
|
||||
//// for (String or : ors) {
|
||||
//// //如果有括号
|
||||
//// if (or.contains(StringPool.LEFT_BRACKET) && or.contains(StringPool.RIGHT_BRACKET)) {
|
||||
//// //去除左右括号 再根据 and 切割
|
||||
//// String[] condition = or.replace(StringPool.LEFT_BRACKET,StringPool.EMPTY).replace(StringPool.LEFT_BRACKET,StringPool.EMPTY).toLowerCase().split(AndString);
|
||||
//// Expression expression = null;
|
||||
//// for (String index : condition) {
|
||||
//// Optional<DataAuthConfig> configOptional = configs.stream().filter(x -> ObjectUtil.equals(x.getOrderNumber(), Integer.valueOf(index))).findFirst();
|
||||
////
|
||||
//// if (!configOptional.isPresent()) {
|
||||
//// continue;
|
||||
//// }
|
||||
//// expression = getExpression(tableAlias, expression, configOptional.get());
|
||||
//// }
|
||||
////
|
||||
//// dataAuthExpression = new Parenthesis(dataAuthExpression);
|
||||
//// }
|
||||
////
|
||||
////
|
||||
//// }
|
||||
// }
|
||||
else {
|
||||
for (DataAuthConfig config : configs) {
|
||||
dataAuthExpression = getExpression(tableAlias, dataAuthExpression, config);
|
||||
}
|
||||
}
|
||||
|
||||
return dataAuthExpression;
|
||||
}
|
||||
|
||||
/**
|
||||
* 拼接所有的权限表达式
|
||||
* @param tableAlias
|
||||
* @param dataAuthExpression
|
||||
* @param config
|
||||
* @return
|
||||
*/
|
||||
private static Expression getExpression(String tableAlias, Expression dataAuthExpression, DataAuthConfig config) {
|
||||
Integer conditionType = config.getConditionType();
|
||||
if (config.getFieldType() == DataAuthFieldTypeEnum.STRING.getCode()) {
|
||||
//如果是第一个条件 直接赋值
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = getConditionType(conditionType, tableAlias, config.getFieldName(), config.getFieldValue());
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, getConditionType(conditionType, tableAlias, config.getFieldName(), config.getFieldValue()));
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.INT.getCode()) {
|
||||
//如果是第一个条件 直接赋值
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = getConditionTypeLong(conditionType, tableAlias, config.getFieldName(), config.getFieldValue());
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, getConditionTypeLong(conditionType, tableAlias, config.getFieldName(), config.getFieldValue()));
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_USER_ID.getCode()) {//存在包含、不包含几种情况
|
||||
User user = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_INFO_KEY, new User());
|
||||
//如果是第一个条件 直接赋值
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = getConditionType(conditionType, tableAlias, config.getFieldName(), user.getId().toString());
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, getConditionType(conditionType, tableAlias, config.getFieldName(), user.getId().toString()));
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_DEP_ID.getCode()) {//只存在包含于，不包含于这两种，其它全部按包含于处理
|
||||
InExpression inExpression = new InExpression();
|
||||
List<Department> departmentList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_DEPT_LIST_KEY, new ArrayList<>(0));
|
||||
List<Expression> list = new ArrayList<>();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
for (Department department : departmentList) {
|
||||
list.add(new StringValue(department.getId().toString()));
|
||||
}
|
||||
String Message = "该登陆人没有所属部门";
|
||||
inExpression = getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = inExpression;
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, inExpression);
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_DEP_CHILD_ID.getCode()) {//只存在包含于，不包含于这两种，其它全部按包含于处理
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<Department> departmentList = redisUtil.get(GlobalConstant.DEP_CACHE_KEY, new TypeReference<List<Department>>() {
|
||||
});
|
||||
SaSession tokenSession = StpUtil.getTokenSession();
|
||||
List<Department> currentDepartmentList = tokenSession.get(GlobalConstant.LOGIN_USER_DEPT_LIST_KEY, new ArrayList<>(0));
|
||||
List<Long> currentDepartmentIdList = currentDepartmentList.stream().map(Department::getId).collect(Collectors.toList());
|
||||
List<Long> myAndOrgAndChildOrgUserId = getAllOrgChildId(ListUtil.toList(currentDepartmentIdList), departmentList);
|
||||
myAndOrgAndChildOrgUserId.addAll(currentDepartmentIdList);
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (Long id : myAndOrgAndChildOrgUserId) {
|
||||
list.add(new StringValue(id.toString()));
|
||||
}
|
||||
String Message = "该登陆人没有所属部门";
|
||||
inExpression = getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = inExpression;
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, inExpression);
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_USER_NAME.getCode()) {
|
||||
User user = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_INFO_KEY, new User());
|
||||
//如果是第一个条件 直接赋值
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = getConditionType(conditionType, tableAlias, config.getFieldName(), user.getUserName());
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, getConditionType(conditionType, tableAlias, config.getFieldName(), user.getUserName()));
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_POST_ID.getCode()) {//只存在包含于，不包含于这两种，其它全部按包含于处理
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<Post> postList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_POST_LIST_KEY, new ArrayList<>());
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (Post post : postList) {
|
||||
list.add(new StringValue(post.getId().toString()));
|
||||
}
|
||||
String Message = "该登陆人没有所属岗位";
|
||||
inExpression = getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = inExpression;
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, inExpression);
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_ROLE_ID.getCode()) {//只存在包含于，不包含于这两种，其它全部按包含于处理
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<Long> roleIdList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_ROLE_ID_KEY, new ArrayList<>());
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (Long id : roleIdList) {
|
||||
list.add(new LongValue(id));
|
||||
}
|
||||
String Message = "该登陆人没有所属角色";
|
||||
inExpression = getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = inExpression;
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, inExpression);
|
||||
}
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_ROLE_CODE.getCode()) {//只存在包含于，不包含于这两种，其它全部按包含于处理
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<String> roleCodeList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_ROLE_CODE_KEY, new ArrayList<>());
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (String code : roleCodeList) {
|
||||
list.add(new StringValue(code));
|
||||
}
|
||||
String Message = "该登陆人没有所属角色";
|
||||
inExpression = getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
if (ObjectUtil.isNull(dataAuthExpression)) {
|
||||
dataAuthExpression = inExpression;
|
||||
} else {
|
||||
dataAuthExpression = new AndExpression(dataAuthExpression, inExpression);
|
||||
}
|
||||
} else {
|
||||
throw new ValidationException("没有匹配的权限过滤方法");
|
||||
}
|
||||
return dataAuthExpression;
|
||||
}
|
||||
|
||||
/**
|
||||
* 只返回一个权限表达式
|
||||
* @param tableAlias
|
||||
* @param config
|
||||
* @return
|
||||
*/
|
||||
private static Expression getExpression(String tableAlias, DataAuthConfig config) {
|
||||
Integer conditionType = config.getConditionType();
|
||||
if (config.getFieldType() == DataAuthFieldTypeEnum.STRING.getCode()) {
|
||||
return getConditionType(conditionType, tableAlias, config.getFieldName(), config.getFieldValue());
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.INT.getCode()) {
|
||||
return getConditionTypeLong(conditionType, tableAlias, config.getFieldName(), config.getFieldValue());
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_USER_ID.getCode()) {//存在包含、不包含两种情况
|
||||
User user = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_INFO_KEY, new User());
|
||||
return getConditionType(conditionType, tableAlias, config.getFieldName(), user.getId().toString());
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_DEP_ID.getCode()) {
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<Department> departmentList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_DEPT_LIST_KEY, new ArrayList<>(0));
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (Department department : departmentList) {
|
||||
list.add(new StringValue(department.getId().toString()));
|
||||
}
|
||||
String Message = "该登陆人没有所属部门";
|
||||
return getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_DEP_CHILD_ID.getCode()) {
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<Department> departmentList = redisUtil.get(GlobalConstant.DEP_CACHE_KEY, new TypeReference<List<Department>>() {
|
||||
});
|
||||
SaSession tokenSession = StpUtil.getTokenSession();
|
||||
List<Department> currentDepartmentList = tokenSession.get(GlobalConstant.LOGIN_USER_DEPT_LIST_KEY, new ArrayList<>(0));
|
||||
List<Long> currentDepartmentIdList = currentDepartmentList.stream().map(Department::getId).collect(Collectors.toList());
|
||||
List<Long> myAndOrgAndChildOrgUserId = getAllOrgChildId(currentDepartmentIdList, departmentList);
|
||||
myAndOrgAndChildOrgUserId.addAll(currentDepartmentIdList);
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (Long id : myAndOrgAndChildOrgUserId) {
|
||||
list.add(new StringValue(id.toString()));
|
||||
}
|
||||
String Message = "该登陆人没有所属部门";
|
||||
return getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_USER_NAME.getCode()) {
|
||||
User user = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_INFO_KEY, new User());
|
||||
return getConditionType(conditionType, tableAlias, config.getFieldName(), user.getUserName());
|
||||
} else if (config.getFieldType() == DataAuthFieldTypeEnum.LOGIN_POST_ID.getCode()) {
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<Post> postList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_POST_LIST_KEY, new ArrayList<>());
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (Post post : postList) {
|
||||
list.add(new StringValue(post.getId().toString()));
|
||||
}
|
||||
String Message = "该登陆人没有所属岗位";
|
||||
return getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
} else {
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, config.getFieldName()));
|
||||
List<Long> roleIdList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_ROLE_ID_KEY, new ArrayList<>());
|
||||
List<Expression> list = new ArrayList<>();
|
||||
for (Long id : roleIdList) {
|
||||
list.add(new StringValue(id.toString()));
|
||||
}
|
||||
String Message = "该登陆人没有所属角色";
|
||||
return getConditionTypeList(inExpression,conditionType,list,Message);
|
||||
}
|
||||
}
|
||||
|
||||
public static InExpression getConditionTypeList(InExpression inExpression, Integer conditionType, List<Expression> list,String Message) {
|
||||
if (conditionType == DataAuthConditionTypeEnum.NO_CONTAINED_IN.getCode()) {//包含于，其它全部按包含于处理
|
||||
inExpression.setRightItemsList(new ExpressionList(list));
|
||||
inExpression.setNot(true);
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.EQUAL_TO.getCode()) {//等于，获取第一个部门id
|
||||
if (list.size() > 0) {
|
||||
inExpression.setRightItemsList(new ExpressionList(list.get(0)));
|
||||
} else {
|
||||
throw new MyException(Message);
|
||||
}
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.NO_EQUAL_TO.getCode()) {//不等于，获取第一个部门id
|
||||
if (list.size() > 0) {
|
||||
inExpression.setRightItemsList(new ExpressionList(list.get(0)));
|
||||
inExpression.setNot(true);
|
||||
} else {
|
||||
throw new MyException(Message);
|
||||
}
|
||||
} else {
|
||||
inExpression.setRightItemsList(new ExpressionList(list));
|
||||
}
|
||||
return inExpression;
|
||||
}
|
||||
|
||||
public static Expression getConditionType(Integer conditionType, String tableAlias, String fieldName, String fieldValue) {
|
||||
if (conditionType == DataAuthConditionTypeEnum.EQUAL_TO.getCode()) {
|
||||
EqualsTo equalsTo = new EqualsTo(); //等于
|
||||
equalsTo.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
equalsTo.setRightExpression(new StringValue(fieldValue));
|
||||
return equalsTo;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.GREATER_THAN.getCode()) {
|
||||
GreaterThan greaterThan = new GreaterThan(); //大于
|
||||
greaterThan.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
greaterThan.setRightExpression(new StringValue(fieldValue));
|
||||
return greaterThan;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.GREATER_THAN_EQUAL.getCode()) {
|
||||
GreaterThanEquals greaterThanEquals = new GreaterThanEquals();//大于等于
|
||||
greaterThanEquals.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
greaterThanEquals.setRightExpression(new StringValue(fieldValue));
|
||||
return greaterThanEquals;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.MINOR_THAN.getCode()) {
|
||||
MinorThan minorThan = new MinorThan();//小于
|
||||
minorThan.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
minorThan.setRightExpression(new StringValue(fieldValue));
|
||||
return minorThan;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.MINOR_THAN_EQUAL.getCode()) {
|
||||
MinorThanEquals minorThanEquals = new MinorThanEquals();//小于等于
|
||||
minorThanEquals.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
minorThanEquals.setRightExpression(new StringValue(fieldValue));
|
||||
return minorThanEquals;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.CONTAIN.getCode()) {//包含
|
||||
LikeExpression likeExpression = new LikeExpression();
|
||||
likeExpression.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
likeExpression.setRightExpression(new StringValue("%" + fieldValue + "%"));
|
||||
return likeExpression;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.CONTAINED_IN.getCode()) {//包含于
|
||||
LikeExpression likeExpression = new LikeExpression();
|
||||
likeExpression.setLeftExpression(new StringValue(fieldValue));
|
||||
likeExpression.setRightExpression(buildColumn(tableAlias, fieldName));
|
||||
return likeExpression;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.NO_EQUAL_TO.getCode()) {//不等于
|
||||
NotEqualsTo notEqualsTo = new NotEqualsTo();
|
||||
notEqualsTo.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
notEqualsTo.setRightExpression(new StringValue(fieldValue));
|
||||
return notEqualsTo;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.NO_CONTAIN.getCode()) {//不包含
|
||||
LikeExpression likeExpression = new LikeExpression();
|
||||
likeExpression.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
likeExpression.setNot(true);
|
||||
likeExpression.setRightExpression(new StringValue("%" + fieldValue + "%"));
|
||||
return likeExpression;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.NO_CONTAINED_IN.getCode()) {//不包含于
|
||||
LikeExpression likeExpression = new LikeExpression();
|
||||
likeExpression.setNot(true);
|
||||
likeExpression.setLeftExpression(new StringValue(fieldValue));
|
||||
likeExpression.setRightExpression(buildColumn(tableAlias, fieldName));
|
||||
return likeExpression;
|
||||
} else {
|
||||
throw new MyException("条件不成立");
|
||||
}
|
||||
}
|
||||
|
||||
public static Expression getConditionTypeLong(Integer conditionType, String tableAlias, String fieldName, String fieldValue) {
|
||||
if (conditionType == DataAuthConditionTypeEnum.EQUAL_TO.getCode()) {
|
||||
EqualsTo equalsTo = new EqualsTo(); //等于
|
||||
equalsTo.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
equalsTo.setRightExpression(new LongValue(fieldValue));
|
||||
return equalsTo;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.GREATER_THAN.getCode()) {
|
||||
GreaterThan greaterThan = new GreaterThan(); //大于
|
||||
greaterThan.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
greaterThan.setRightExpression(new LongValue(fieldValue));
|
||||
return greaterThan;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.GREATER_THAN_EQUAL.getCode()) {
|
||||
GreaterThanEquals greaterThanEquals = new GreaterThanEquals();//大于等于
|
||||
greaterThanEquals.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
greaterThanEquals.setRightExpression(new LongValue(fieldValue));
|
||||
return greaterThanEquals;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.MINOR_THAN.getCode()) {
|
||||
MinorThan minorThan = new MinorThan();//小于
|
||||
minorThan.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
minorThan.setRightExpression(new LongValue(fieldValue));
|
||||
return minorThan;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.MINOR_THAN_EQUAL.getCode()) {
|
||||
MinorThanEquals minorThanEquals = new MinorThanEquals();//小于等于
|
||||
minorThanEquals.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
minorThanEquals.setRightExpression(new LongValue(fieldValue));
|
||||
return minorThanEquals;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.CONTAIN.getCode()) {//包含
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
List<Expression> list = new ArrayList<>();
|
||||
list.add(new LongValue(fieldValue));
|
||||
inExpression.setRightItemsList(new ExpressionList(list));
|
||||
// LikeExpression likeExpression = new LikeExpression();
|
||||
// likeExpression.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
// likeExpression.setRightExpression(new StringValue("%" + fieldValue + "%"));
|
||||
return inExpression;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.CONTAINED_IN.getCode()) {//包含于
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(new LongValue(fieldValue));
|
||||
List<Expression> list = new ArrayList<>();
|
||||
list.add(buildColumn(tableAlias, fieldName));
|
||||
inExpression.setRightItemsList(new ExpressionList(list));
|
||||
return inExpression;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.NO_EQUAL_TO.getCode()) {//不等于
|
||||
NotEqualsTo notEqualsTo = new NotEqualsTo();
|
||||
notEqualsTo.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
notEqualsTo.setRightExpression(new LongValue(fieldValue));
|
||||
return notEqualsTo;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.NO_CONTAIN.getCode()) {//不包含
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(buildColumn(tableAlias, fieldName));
|
||||
List<Expression> list = new ArrayList<>();
|
||||
list.add(new LongValue(fieldValue));
|
||||
inExpression.setRightItemsList(new ExpressionList(list));
|
||||
inExpression.setNot(true);
|
||||
return inExpression;
|
||||
} else if (conditionType == DataAuthConditionTypeEnum.NO_CONTAINED_IN.getCode()) {//不包含于
|
||||
InExpression inExpression = new InExpression();
|
||||
inExpression.setLeftExpression(new LongValue(fieldValue));
|
||||
List<Expression> list = new ArrayList<>();
|
||||
list.add(buildColumn(tableAlias, fieldName));
|
||||
inExpression.setRightItemsList(new ExpressionList(list));
|
||||
inExpression.setNot(true);
|
||||
return inExpression;
|
||||
} else {
|
||||
throw new MyException("条件不成立");
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* 构建Column
|
||||
*
|
||||
* @param tableAlias 表别名
|
||||
* @param columnName 字段名称
|
||||
* @return 带表别名字段
|
||||
*/
|
||||
public static Column buildColumn(String tableAlias, String columnName) {
|
||||
if (StrUtil.isNotEmpty(tableAlias)) {
|
||||
columnName = tableAlias + StringPool.DOT + columnName;
|
||||
}
|
||||
return new Column(columnName);
|
||||
}
|
||||
|
||||
public static List<Long> getDataAuthByTableName(String tableName) {
|
||||
|
||||
List<Long> result = new ArrayList<>();
|
||||
|
||||
List<DataAuthTableRelation> dataAuthTableRelations = redisUtil.get(GlobalConstant.DATA_AUTH_TABLE_RELATION_CACHE_KEY, new TypeReference<List<DataAuthTableRelation>>() {
|
||||
});
|
||||
|
||||
//是否有设置权限
|
||||
if (dataAuthTableRelations.stream().noneMatch(x -> x.getTableName().equals(tableName))) {
|
||||
return result;
|
||||
}
|
||||
|
||||
//找到当前表所关联的 数据权限
|
||||
List<DataAuthTableRelation> tableDataAuths = dataAuthTableRelations.stream().filter(x -> x.getTableName().equals(tableName)).collect(Collectors.toList());
|
||||
|
||||
List<Long> allDataAuthId = tableDataAuths.stream().map(DataAuthTableRelation::getDataAuthId).collect(Collectors.toList());
|
||||
List<DataAuth> dataAuths = redisUtil.get(GlobalConstant.DATA_AUTH_CACHE_KEY, new TypeReference<List<DataAuth>>() {
|
||||
});
|
||||
|
||||
List<DataAuth> thisTableAuthDataList = dataAuths.stream().filter(x -> allDataAuthId.contains(x.getId())).collect(Collectors.toList());
|
||||
|
||||
List<DataAuthRelation> authRelationList = redisUtil.get(GlobalConstant.DATA_AUTH_RELATION_CACHE_KEY, new TypeReference<List<DataAuthRelation>>() {
|
||||
});
|
||||
|
||||
for (DataAuth dataAuth : thisTableAuthDataList) {
|
||||
//如果是用户权限
|
||||
if (dataAuth.getAuthType() == DataAuthTypeEnum.USER.getCode()) {
|
||||
//找出有那些用户被赋值了 此数据权限
|
||||
List<Long> userIds = authRelationList.stream().filter(x -> x.getDataAuthId().equals(dataAuth.getId())).map(DataAuthRelation::getObjectId).collect(Collectors.toList());
|
||||
|
||||
//判断当前用户是否包含此数据权限
|
||||
if (userIds.contains(StpUtil.getLoginIdAsLong())) {
|
||||
|
||||
//如果是简易模式
|
||||
if (dataAuth.getAuthMethod() == DataAuthMethodEnum.CUSTOM.getCode()) {
|
||||
List<Long> dataAuthSimpleUserId = getDataAuthSimpleUserId(dataAuth.getAuthScope());
|
||||
result.addAll(dataAuthSimpleUserId);
|
||||
}
|
||||
//如果是自定义模式
|
||||
else {
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取简易模式的所有用户id
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
private static List<Long> getDataAuthSimpleUserId(Integer authScope) {
|
||||
DataAuthScopeEnum enumAt = EnumUtil.getEnumAt(DataAuthScopeEnum.class, authScope);
|
||||
switch (enumAt) {
|
||||
case MY:
|
||||
return ListUtil.toList(StpUtil.getLoginIdAsLong());
|
||||
case MY_AND_POST:
|
||||
return getMyAndPostUserId();
|
||||
case MY_AND_CHILD_POST:
|
||||
return getMyAndChildPostUserId();
|
||||
case MY_AND_POST_AND_CHILD_POST:
|
||||
return getMyAndPostAndChildPostUserId();
|
||||
case MY_AND_ORG:
|
||||
return getMyAndOrgUserId();
|
||||
case MY_AND_CHILD_ORG:
|
||||
return getMyAndChildOrgUserId();
|
||||
case MY_AND_ORG_AND_CHILD_ORG:
|
||||
return getMyAndOrgAndChildOrgUserId();
|
||||
default:
|
||||
return getRoleUserId();
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取同岗位的用户id
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
private static List<Long> getMyAndPostUserId() {
|
||||
List<UserPostRelation> userRelationList = redisUtil.get(GlobalConstant.USER_POST_RELATION_CACHE_KEY, new TypeReference<List<UserPostRelation>>() {
|
||||
});
|
||||
SaSession tokenSession = StpUtil.getTokenSession();
|
||||
List<Post> postList = tokenSession.get(GlobalConstant.LOGIN_USER_POST_LIST_KEY, new ArrayList<>(0));
|
||||
List<Long> postIdList = postList.stream().map(Post::getId).collect(Collectors.toList());
|
||||
|
||||
return userRelationList.stream()
|
||||
.filter(x -> postIdList.contains(x.getPostId()))
|
||||
.map(UserPostRelation::getUserId).collect(Collectors.toList());
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取同岗位的用户id
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
private static List<Long> getMyAndChildPostUserId() {
|
||||
List<UserPostRelation> userRelationList = redisUtil.get(GlobalConstant.USER_POST_RELATION_CACHE_KEY, new TypeReference<List<UserPostRelation>>() {
|
||||
});
|
||||
|
||||
List<Post> postList = redisUtil.get(GlobalConstant.POST_CACHE_KEY, new TypeReference<List<Post>>() {
|
||||
});
|
||||
SaSession tokenSession = StpUtil.getTokenSession();
|
||||
List<Post> currentPostList = tokenSession.get(GlobalConstant.LOGIN_USER_POST_LIST_KEY, new ArrayList<>(0));
|
||||
List<Long> postIdList = currentPostList.stream().map(Post::getId).collect(Collectors.toList());
|
||||
|
||||
List<Long> resultList = new ArrayList<>();
|
||||
//如果有下级 则使用递归 找到所有下级post 求出所有用户id
|
||||
if (postList.stream().anyMatch(x -> postIdList.contains(x.getParentId()))) {
|
||||
List<Long> allPostId = getAllPostChildId(postIdList, postList);
|
||||
resultList.addAll(userRelationList.stream().filter(user -> allPostId.contains(user.getPostId())).map(UserPostRelation::getUserId).collect(Collectors.toList()));
|
||||
}
|
||||
|
||||
//当前登录人id
|
||||
resultList.add(StpUtil.getLoginIdAsLong());
|
||||
return resultList;
|
||||
}
|
||||
|
||||
private static List<Long> getMyAndPostAndChildPostUserId() {
|
||||
List<Long> result = new ArrayList<>();
|
||||
result.addAll(getMyAndPostUserId());
|
||||
result.addAll(getMyAndChildPostUserId());
|
||||
return result;
|
||||
}
|
||||
|
||||
private static List<Long> getAllPostChildId(List<Long> postIds, List<Post> postList) {
|
||||
List<Long> resultList = new ArrayList<>();
|
||||
for (Long postId : postIds) {
|
||||
for (Post post : postList) {
|
||||
if (postId.equals(post.getParentId())) {
|
||||
resultList.add(post.getId());
|
||||
}
|
||||
}
|
||||
}
|
||||
if (CollectionUtils.isNotEmpty(resultList)) {
|
||||
resultList.addAll(getAllPostChildId(resultList, postList));
|
||||
}
|
||||
return resultList;
|
||||
|
||||
}
|
||||
|
||||
private static List<Long> getAllOrgChildId(List<Long> depIds, List<Department> departmentList) {
|
||||
List<Long> resultList = new ArrayList<>();
|
||||
for (Long depId : depIds) {
|
||||
for (Department department : departmentList) {
|
||||
if (depId.equals(department.getParentId())) {
|
||||
resultList.add(department.getId());
|
||||
}
|
||||
}
|
||||
}
|
||||
if (CollectionUtils.isNotEmpty(resultList)) {
|
||||
resultList.addAll(getAllOrgChildId(resultList, departmentList));
|
||||
}
|
||||
return resultList;
|
||||
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取同机构/部门的数据
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
public static List<Long> getMyAndOrgUserId() {
|
||||
List<UserDeptRelation> userDeptRelations = redisUtil.get(GlobalConstant.USER_DEPT_RELATION_CACHE_KEY, new TypeReference<List<UserDeptRelation>>() {
|
||||
});
|
||||
SaSession tokenSession = StpUtil.getTokenSession();
|
||||
List<Department> departmentList = tokenSession.get(GlobalConstant.LOGIN_USER_DEPT_LIST_KEY, new ArrayList<>(0));
|
||||
List<Long> departmentIdList = departmentList.stream().map(Department::getId).collect(Collectors.toList());
|
||||
|
||||
return userDeptRelations.stream()
|
||||
.filter(x -> departmentIdList.contains(x.getDeptId()))
|
||||
.map(UserDeptRelation::getUserId).collect(Collectors.toList());
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取下属机构数据的用户id
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
private static List<Long> getMyAndChildOrgUserId() {
|
||||
List<Long> resultList = new ArrayList<>();
|
||||
List<UserDeptRelation> userDeptRelations = redisUtil.get(GlobalConstant.USER_DEPT_RELATION_CACHE_KEY, new TypeReference<List<UserDeptRelation>>() {
|
||||
});
|
||||
|
||||
List<Department> departmentList = redisUtil.get(GlobalConstant.DEP_CACHE_KEY, new TypeReference<List<Department>>() {
|
||||
});
|
||||
SaSession tokenSession = StpUtil.getTokenSession();
|
||||
List<Department> currentDepartmentList = tokenSession.get(GlobalConstant.LOGIN_USER_DEPT_LIST_KEY, new ArrayList<>(0));
|
||||
List<Long> currentDepartmentIdList = currentDepartmentList.stream().map(Department::getId).collect(Collectors.toList());
|
||||
|
||||
//如果有下级 则使用递归 找到所有下级post 求出所有用户id
|
||||
if (departmentList.stream().anyMatch(x -> currentDepartmentIdList.contains(x.getParentId()))) {
|
||||
List<Long> allChildIdList = getAllOrgChildId(currentDepartmentIdList, departmentList);
|
||||
resultList.addAll(userDeptRelations.stream().filter(user -> allChildIdList.contains(user.getDeptId())).map(UserDeptRelation::getUserId).collect(Collectors.toList()));
|
||||
}
|
||||
|
||||
//如果没有下级 直接使用当前登陆人岗位
|
||||
resultList.add(StpUtil.getLoginIdAsLong());
|
||||
return resultList;
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取当前机构 和下属机构
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
private static List<Long> getMyAndOrgAndChildOrgUserId() {
|
||||
List<Long> result = new ArrayList<>();
|
||||
result.addAll(getMyAndOrgUserId());
|
||||
result.addAll(getMyAndChildOrgUserId());
|
||||
return result;
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取同角色
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
private static List<Long> getRoleUserId() {
|
||||
List<UserRoleRelation> userRoleRelationList = redisUtil.get(GlobalConstant.USER_ROLE_RELATION_CACHE_KEY, new TypeReference<List<UserRoleRelation>>() {
|
||||
});
|
||||
|
||||
|
||||
List<Long> roleIdList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_ROLE_ID_KEY, new ArrayList<>());
|
||||
|
||||
|
||||
return userRoleRelationList.stream().filter(r -> roleIdList.contains(r.getRoleId())).map(UserRoleRelation::getUserId).collect(Collectors.toList());
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* 根据 tableName 生成 expression 给自定义表单 生成sql
|
||||
*
|
||||
* @param tableName 表名
|
||||
* @return
|
||||
*/
|
||||
// public static Expression getDataAuthEntityByTableName(String tableName) {
|
||||
// SelectUtils.buildSelectFromTable(new Table(tableName));
|
||||
//
|
||||
// List<DataAuthTableRelation> dataAuthTableRelations = redisUtil.get(GlobalConstant.DATA_AUTH_TABLE_RELATION_CACHE_KEY, new TypeReference<List<DataAuthTableRelation>>() {
|
||||
// });
|
||||
//
|
||||
// //是否有设置权限
|
||||
// if (dataAuthTableRelations.stream().noneMatch(x -> x.getTableName().equals(tableName))) {
|
||||
// return where;
|
||||
// }
|
||||
//
|
||||
// //找到当前表所关联的 数据权限
|
||||
// List<DataAuthTableRelation> tableDataAuths = dataAuthTableRelations.stream().filter(x -> x.getTableName().equals(tableName)).collect(Collectors.toList());
|
||||
//
|
||||
// List<Long> allDataAuthId = tableDataAuths.stream().map(DataAuthTableRelation::getDataAuthId).collect(Collectors.toList());
|
||||
// List<DataAuth> dataAuths = redisUtil.get(GlobalConstant.DATA_AUTH_CACHE_KEY, new TypeReference<List<DataAuth>>() {
|
||||
// });
|
||||
//
|
||||
// List<DataAuth> thisTableAuthDataList = dataAuths.stream().filter(x -> allDataAuthId.contains(x.getId())).collect(Collectors.toList());
|
||||
//
|
||||
// List<DataAuthRelation> authRelationList = redisUtil.get(GlobalConstant.DATA_AUTH_RELATION_CACHE_KEY, new TypeReference<List<DataAuthRelation>>() {
|
||||
// });
|
||||
//
|
||||
// List<DataAuthConfig> authConfigList = redisUtil.get(GlobalConstant.DATA_AUTH_CONFIG_CACHE_KEY, new TypeReference<List<DataAuthConfig>>() {
|
||||
// });
|
||||
//
|
||||
// for (DataAuth dataAuth : thisTableAuthDataList) {
|
||||
// List<Long> userIds = new ArrayList<>();
|
||||
// //如果是用户权限
|
||||
// if (dataAuth.getAuthType() == DataAuthTypeEnum.USER.getCode()) {
|
||||
// //找出有那些用户被赋值了 此数据权限
|
||||
// userIds = authRelationList.stream().filter(x -> x.getDataAuthId().equals(dataAuth.getId())).map(DataAuthRelation::getObjectId).collect(Collectors.toList());
|
||||
// } else {
|
||||
// List<Long> roleIds = authRelationList.stream().filter(x -> x.getDataAuthId().equals(dataAuth.getId())).map(DataAuthRelation::getObjectId).collect(Collectors.toList());
|
||||
//
|
||||
// List<Role> roleList = StpUtil.getTokenSession().get(GlobalConstant.LOGIN_USER_INFO_KEY, new ArrayList<>());
|
||||
//
|
||||
// //如果当前登陆人不包含 这些 角色id 默认不添加数据权限
|
||||
// if (roleList.stream().map(Role::getId).noneMatch(roleIds::contains)) {
|
||||
// continue;
|
||||
// }
|
||||
// }
|
||||
// //判断当前用户是否包含此数据权限
|
||||
// if (userIds.contains(StpUtil.getLoginIdAsLong())) {
|
||||
//
|
||||
// //如果是简易模式
|
||||
// if (dataAuth.getAuthMethod() == DataAuthMethodEnum.SIMPLE.getCode()) {
|
||||
// //所有能查看的用户数据
|
||||
// List<Long> dataAuthSimpleUserId = getDataAuthSimpleUserId(dataAuth.getAuthScope());
|
||||
//
|
||||
//// where.set(GlobalConstant.AUTH_USER_ID, new Condition(GlobalConstant.AUTH_USER_ID, "in", dataAuthSimpleUserId));
|
||||
// where.set(GlobalConstant.AUTH_USER_ID, dataAuthSimpleUserId);
|
||||
//
|
||||
// }
|
||||
// //如果是自定义模式
|
||||
// else {
|
||||
// List<DataAuthConfig> thisDataAuthConfig = authConfigList.stream().filter(x -> x.getDataAuthId().equals(dataAuth.getId())).collect(Collectors.toList());
|
||||
// }
|
||||
//
|
||||
// }
|
||||
// }
|
||||
//
|
||||
// return where;
|
||||
// }
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user