森中灵 最后提交于7月前 替换为8.0.5版本

/*
 * 版权所有 (C) 2015 知启蒙(ZHIQIM) 保留所有权利。[遇见知启蒙，邂逅框架梦]
 * 
 * https://zhiqim.org/project/zhiqim_components/zhiqim_master.htm
 *
 * Zhiqim Master is licensed under Mulan PSL v2.
 * You can use this software according to the terms and conditions of the Mulan PSL v2.
 * You may obtain a copy of Mulan PSL v2 at:
 *          http://license.coscl.org.cn/MulanPSL2
 * THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
 * EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
 * MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
 * See the Mulan PSL v2 for more details.
 */
package org.zhiqim.manager.rule;

import org.zhiqim.httpd.HttpRequest;
import org.zhiqim.httpd.context.rule.CheckRule;
import org.zhiqim.kernel.annotation.AnAlias;
import org.zhiqim.kernel.annotation.AnGlobal;
import org.zhiqim.kernel.util.Validates;
import org.zhiqim.manager.ZmrConstants;
import org.zhiqim.manager.ZmrSessionUser;
import org.zhiqim.manager.dbo.ZmrDept;
import org.zhiqim.manager.dbo.ZmrOperator;
import org.zhiqim.manager.dbo.ZmrRole;
import org.zhiqim.orm.ORM;

/**
 * 页面验证是否有管理权限，返回boolean =true表示有，=false表示没有
 *
 * @version v1.0.0 @author zouzhigang 2015-5-28 新建与整理
 */
@AnAlias("ZmrManageRule")
@AnGlobal
public class ZmrManageRule implements CheckRule, ZmrConstants
{
    public boolean check(HttpRequest request) throws Exception
    {
        ZmrSessionUser sessionUser = request.getSessionUser(ZmrSessionUser.class);
        if (sessionUser == null)
        {// 用户未登录或超时
            return false;
        }

        if (sessionUser.isSuperAdmin())
        {//1.超级管理员类型
            return true;
        }
        
        if (sessionUser.getOperatorOrgId() == _ID_13_ && sessionUser.isAdmin())
        {//2.1 根组织管理员
            return true;
        }
        
        if (sessionUser.getSelectedOrgId() == sessionUser.getOperatorOrgId() && sessionUser.isAdmin())
        {//2.2 本组织管理员
            return true;
        }
        
        //3.管理权限
        ZmrDept dept = ORM.table().item(ZmrDept.class, sessionUser.getOperatorOrgId(), _ID_13_);
        ZmrRole role = ORM.table().item(ZmrRole.class, sessionUser.getOperatorOrgId(), _ID_13_);
        if (!hasManageRule(sessionUser.getOperator(), dept, role))
        {//没有管理权限
            return false;
        }
        
        if (sessionUser.getOperatorOrgId() == _ID_13_)
        {//3.1 根组织的管理权限
            return true;
        }
        
        if (sessionUser.getSelectedOrgId() == sessionUser.getOperatorOrgId())
        {//3.2 本组织管理权限
            return true;
        }
        
        return false;
    }
    
    /** 判断是否有管理权限 */
    static boolean hasManageRule(ZmrOperator operator, ZmrDept dept, ZmrRole role)
    {
        if (dept != null && dept.isDeptValid())
        {//根部门是否有效
            if (operator.getOperatorCode().equals(dept.getDeptManager()))
            {//根部门负责人
                return true;
            }
            
            if (Validates.isContain(dept.getDeptSubManager(), ",", operator.getOperatorCode()))
            {//根部门副负责人
                return true;
            }
        }
        
        if (role != null && role.isRoleValid())
        {//管理员角色是否有效
            if (Validates.isContain(operator.getOperatorRole(), ",", ""+_ID_13_))
            {//含管理员角色
                return true;
            }
        }
        
        return false;
    }
}