森中灵 最后提交于7月前 替换为8.0.5版本

/*
 * 版权所有 (C) 2015 知启蒙(ZHIQIM) 保留所有权利。[遇见知启蒙，邂逅框架梦]
 * 
 * https://zhiqim.org/project/zhiqim_components/zhiqim_master.htm
 *
 * Zhiqim Master is licensed under Mulan PSL v2.
 * You can use this software according to the terms and conditions of the Mulan PSL v2.
 * You may obtain a copy of Mulan PSL v2 at:
 *          http://license.coscl.org.cn/MulanPSL2
 * THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
 * EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
 * MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
 * See the Mulan PSL v2 for more details.
 */
package org.zhiqim.manager.action;

import java.util.ArrayList;
import java.util.List;

import org.zhiqim.httpd.HttpRequest;
import org.zhiqim.httpd.context.extend.GetPostAction;
import org.zhiqim.httpd.validate.ones.IsNotEmpty;
import org.zhiqim.kernel.json.Jsons;
import org.zhiqim.kernel.model.tree.Tree;
import org.zhiqim.kernel.model.tree.TreeBuilder;
import org.zhiqim.manager.ZmrConstants;
import org.zhiqim.manager.ZmrSessionUser;
import org.zhiqim.manager.dao.ZmrOperatorDao;
import org.zhiqim.manager.dbo.ZmrMenu;
import org.zhiqim.manager.dbo.ZmrRole;
import org.zhiqim.manager.dbo.ZmrRoleRule;
import org.zhiqim.orm.ORM;
import org.zhiqim.orm.dbo.Selector;

/**
 * 角色权限列表<br>
 * 
 * @version v1.0.0 @author zouzhigang 2014-3-21 新建与整理
 */
public class RoleRuleAction extends GetPostAction implements ZmrConstants
{
    protected void validate(HttpRequest request)
    {
        request.addValidate(new IsNotEmpty("roleId", "请选择一个角色"));
    }

    @Override
    protected void doGet(HttpRequest request) throws Exception
    {
        long roleId = request.getParameterLong("roleId");
        ZmrSessionUser sessionUser = request.getSessionUser(ZmrSessionUser.class);
        ZmrRole role = ORM.table().item(ZmrRole.class, sessionUser.getSelectedOrgId(), roleId);
        if (role == null)
        {
            request.setResponseError("请选择一个有效的角色");
            return;
        }
        
        // 获取角色已有权限
        List<ZmrRoleRule> ruleList = ORM.table().list(ZmrRoleRule.class, new Selector("orgId", role.getOrgId()).addMust("roleId", roleId));
        
        //获取所有有效的权限菜单
        List<ZmrMenu> menuList = ZmrOperatorDao.getValidMenuList(role.getOrgId());
        if (menuList.isEmpty())
        {
            if (role.getOrgId() == _ID_13_)
                request.returnHistory("系统没有定义菜单，请与管理员联系");
            else
                request.returnHistory("本组织没有权限菜单，请与上级组织管理员联系");
            return;
        }
        
        //菜单列表转换为树型菜单
        Tree<ZmrMenu> tree = TreeBuilder.newTree(menuList, "parentCode", "menuCode");
        
        request.setAttribute("role", role);
        request.setAttribute("ruleList", ruleList);
        request.setAttribute("tree", tree);
    }

    @Override
    protected void doPost(HttpRequest request) throws Exception
    {
        long roleId = request.getParameterLong("roleId");
        String[] menuCodes = request.getParameterValuesOnCNT("rule");
        if (menuCodes == null)
        {//没有数据转为空数组
            menuCodes = new String[0];
        }
    
        ZmrSessionUser sessionUser = request.getSessionUser(ZmrSessionUser.class);
        if (ORM.table().count(ZmrRole.class, sessionUser.getSelectedOrgId(), roleId) == 0)
        {//判断角色是否存在
            request.returnHistory("请选择一个有效的角色");
            return;
        }
        
        // 重置操作员权限
        ORM.table().delete(ZmrRoleRule.class, new Selector("orgId", sessionUser.getSelectedOrgId()).addMust("roleId", roleId));
        if (menuCodes.length > 0)
        {
            List<ZmrRoleRule> bathList = new ArrayList<ZmrRoleRule>();
            for (int i = 0; i < menuCodes.length; i++)
            {
                ZmrRoleRule rule = new ZmrRoleRule();
                rule.setOrgId(sessionUser.getSelectedOrgId());
                rule.setRoleId(roleId);
                rule.setMenuCode(menuCodes[i]);
                
                bathList.add(rule);
            }

            ORM.table().insertBatch(bathList);
        }
        
        //增加操作日志
        ZmrOperatorDao.addOperateLog(request, "修改操作员角色权限", Jsons.toString("orgId", sessionUser.getSelectedOrgId(), "roleId", roleId));
    }
}