| | |
| | | package com.ruoyi.framework.aspectj; |
| | | |
| | | import cn.hutool.core.lang.Validator; |
| | | import cn.hutool.core.util.StrUtil; |
| | | import com.ruoyi.common.annotation.DataScope; |
| | | import com.ruoyi.common.core.domain.BaseEntity; |
| | | import com.ruoyi.common.core.domain.entity.SysRole; |
| | | import com.ruoyi.common.core.domain.entity.SysUser; |
| | | import com.ruoyi.common.core.domain.model.LoginUser; |
| | | import com.ruoyi.common.utils.ServletUtils; |
| | | import com.ruoyi.common.utils.StringUtils; |
| | | import com.ruoyi.common.utils.reflect.ReflectUtils; |
| | | import com.ruoyi.common.utils.spring.SpringUtils; |
| | | import com.ruoyi.common.utils.SecurityUtils; |
| | | import com.ruoyi.framework.web.service.TokenService; |
| | | import org.aspectj.lang.JoinPoint; |
| | | import org.aspectj.lang.Signature; |
| | |
| | | return; |
| | | } |
| | | // 获取当前的用户 |
| | | LoginUser loginUser = SpringUtils.getBean(TokenService.class).getLoginUser(ServletUtils.getRequest()); |
| | | if (Validator.isNotNull(loginUser)) { |
| | | LoginUser loginUser = SecurityUtils.getLoginUser(); |
| | | if (StringUtils.isNotNull(loginUser)) { |
| | | SysUser currentUser = loginUser.getUser(); |
| | | // 如果是超级管理员,则不过滤数据 |
| | | if (Validator.isNotNull(currentUser) && !currentUser.isAdmin()) { |
| | | if (StringUtils.isNotNull(currentUser) && !currentUser.isAdmin()) { |
| | | dataScopeFilter(joinPoint, currentUser, controllerDataScope.deptAlias(), |
| | | controllerDataScope.userAlias(), controllerDataScope.isUser()); |
| | | } |
| | |
| | | StringBuilder sqlString = new StringBuilder(); |
| | | |
| | | // 将 "." 提取出,不写别名为单表查询,写别名为多表查询 |
| | | deptAlias = StrUtil.isNotBlank(deptAlias) ? deptAlias + "." : ""; |
| | | userAlias = StrUtil.isNotBlank(userAlias) ? userAlias + "." : ""; |
| | | deptAlias = StringUtils.isNotBlank(deptAlias) ? deptAlias + "." : ""; |
| | | userAlias = StringUtils.isNotBlank(userAlias) ? userAlias + "." : ""; |
| | | |
| | | for (SysRole role : user.getRoles()) { |
| | | String dataScope = role.getDataScope(); |
| | |
| | | sqlString = new StringBuilder(); |
| | | break; |
| | | } else if (DATA_SCOPE_CUSTOM.equals(dataScope)) { |
| | | sqlString.append(StrUtil.format( |
| | | sqlString.append(StringUtils.format( |
| | | " OR {}dept_id IN ( SELECT dept_id FROM sys_role_dept WHERE role_id = {} ) ", |
| | | deptAlias, role.getRoleId())); |
| | | } else if (DATA_SCOPE_DEPT.equals(dataScope)) { |
| | | sqlString.append(StrUtil.format(" OR {}dept_id = {} ", |
| | | sqlString.append(StringUtils.format(" OR {}dept_id = {} ", |
| | | deptAlias, user.getDeptId())); |
| | | } else if (DATA_SCOPE_DEPT_AND_CHILD.equals(dataScope)) { |
| | | sqlString.append(StrUtil.format( |
| | | sqlString.append(StringUtils.format( |
| | | " OR {}dept_id IN ( SELECT dept_id FROM sys_dept WHERE dept_id = {} or find_in_set( {} , ancestors ) )", |
| | | deptAlias, user.getDeptId(), user.getDeptId())); |
| | | } else if (DATA_SCOPE_SELF.equals(dataScope)) { |
| | | if (isUser) { |
| | | sqlString.append(StrUtil.format(" OR {}user_id = {} ", |
| | | sqlString.append(StringUtils.format(" OR {}user_id = {} ", |
| | | userAlias, user.getUserId())); |
| | | } else { |
| | | // 数据权限为仅本人且没有userAlias别名不查询任何数据 |
| | |
| | | } |
| | | } |
| | | |
| | | if (StrUtil.isNotBlank(sqlString.toString())) { |
| | | if (StringUtils.isNotBlank(sqlString.toString())) { |
| | | putDataScope(joinPoint, sqlString.substring(4)); |
| | | } |
| | | } |
| | |
| | | */ |
| | | private void clearDataScope(final JoinPoint joinPoint) { |
| | | Object params = joinPoint.getArgs()[0]; |
| | | if (Validator.isNotNull(params)) { |
| | | if (StringUtils.isNotNull(params)) { |
| | | putDataScope(joinPoint, ""); |
| | | } |
| | | } |
| | | |
| | | private static void putDataScope(JoinPoint joinPoint, String sql) { |
| | | Object params = joinPoint.getArgs()[0]; |
| | | if (Validator.isNotNull(params)) { |
| | | if (StringUtils.isNotNull(params)) { |
| | | if (params instanceof BaseEntity) { |
| | | BaseEntity baseEntity = (BaseEntity) params; |
| | | baseEntity.getParams().put(DATA_SCOPE, sql); |