重写登录用户权限验证部分

liurunyu

2023-11-07 7ce92488d62ee9a26f2e76fdf0a5e84ab115f623

重写登录用户权限验证部分

 pipIrr-platform/pipIrr-web/pipIrr-web-sso/src/main/java/com/dy/sso/busi/SsoCtrl.java

@@ -199,62 +199,22 @@
        BaUser userPo = this.sv.getByUuid(token) ;
        SsoVo vo = new SsoVo();
        if(userPo != null){
            vo.dataSourceName = userPo.orgTag ;
            vo.logined = true ;
            vo.hasPower = false ;//默认是无权限
            if(userPo.supperAdmin != null && userPo.supperAdmin == 1){
                vo.hasPower = true ;
            }else{
                if(userPo.privileges != null && userPo.privileges.size() > 0){
                    if(privilege != null && !privilege.trim().equals("")){
                        int intPri = Integer.parseInt(privilege) ;
                        for(Integer pri : userPo.privileges){
                            if(pri == intPri){
                                vo.hasPower = true ;
                                break ;
                            }
                        }
                    }else{
                        if(allPrivilege != null && allPrivilege.length > 0){
                            int intPri ;
                            boolean ok = false ;
                            boolean allOk = true ;
                            for(String strPri : allPrivilege){
                                intPri = Integer.parseInt(strPri) ;
                                for(Integer pri : userPo.privileges){
                                    if(pri == intPri){
                                        ok = true ;
                                        break ;
                                    }
                                }
                                if(!ok){
                                    allOk = false ;
                                    break ;
                                }
                            }
                            if(allOk){
                                vo.hasPower = true ;
                            }
                        }else{
                            int intPri ;
                            if(anyPrivilege != null && anyPrivilege.length > 0){
                                for(String strPri : anyPrivilege){
                                    intPri = Integer.parseInt(strPri) ;
                                    for(Integer pri : userPo.privileges){
                                        if(pri == intPri){
                                            vo.hasPower = true ;
                                            break ;
                                        }
                                    }
                                    if(vo.hasPower){
                                        break ;
                                    }
                                }
                            }
                    vo.hasPower = this.hasOnePrivilege(privilege, userPo) ;
                    if(!vo.hasPower){
                        vo.hasPower = this.hasAllPrivilege(allPrivilege, userPo) ;
                        if(!vo.hasPower){
                            vo.hasPower = this.hasAnyPrivilege(anyPrivilege, userPo) ;
                        }
                    }
                }
            }
            vo.dataSourceName = userPo.getOrgTag() ;
        }else{
            vo.logined = false ;
            vo.hasPower = false ;
@@ -262,5 +222,79 @@
        return vo ;
    }

    /**
     * 判断登录用户是否拥有指定的一个权限
     * @param privilege 指定的一个权限
     * @param userPo 当前登录用户
     * @return 是否有权限
     */
    private boolean hasOnePrivilege(String privilege, BaUser userPo){
        boolean hasPrivilege  = false ;
        if (privilege != null && !privilege.trim().equals("")) {
            int intPri = Integer.parseInt(privilege);
            for (Integer pri : userPo.privileges) {
                if (pri == intPri) {
                    hasPrivilege = true;
                    break;
                }
            }
        }
        return hasPrivilege ;
    }

    /**
     * 判断登录用户是否拥有指定的多个权限
     * @param allPrivilege 指定的多个权限
     * @param userPo 当前登录用户
     * @return 是否有权限
     */
    private boolean hasAllPrivilege(String[] allPrivilege, BaUser userPo){
        boolean hasPrivilege  = false ;
        if(allPrivilege != null && allPrivilege.length > 0){
            int intPri ;
            int count = 0 ;
            for(String strPri : allPrivilege){
                intPri = Integer.parseInt(strPri) ;
                for(Integer pri : userPo.privileges){
                    if(pri == intPri){
                        count++ ;
                        break ;
                    }
                }
            }
            if(count  == allPrivilege.length){
                hasPrivilege = true ;
            }
        }
        return hasPrivilege ;
    }


    /**
     * 判断登录用户是否拥有指定的某个权限
     * @param anyPrivilege 指定的多个权限
     * @param userPo 当前登录用户
     * @return 是否有权限
     */
    private boolean hasAnyPrivilege(String[] anyPrivilege, BaUser userPo){
        boolean hasPrivilege  = false ;
        int intPri ;
        if(anyPrivilege != null && anyPrivilege.length > 0){
            for(String strPri : anyPrivilege){
                intPri = Integer.parseInt(strPri) ;
                for(Integer pri : userPo.privileges){
                    if(pri == intPri){
                        hasPrivilege = true ;
                        break ;
                    }
                }
                if(hasPrivilege){
                    break ;
                }
            }
        }
        return hasPrivilege ;
    }


}