package com.ard.framework.aspectj;
|
|
import com.ard.common.annotation.DataScopePlus;
|
import com.ard.common.constant.UserConstants;
|
import com.ard.common.core.domain.entity.SysRole;
|
import com.ard.common.core.domain.entity.SysUser;
|
import com.ard.common.core.domain.model.LoginUser;
|
import com.ard.common.core.text.Convert;
|
import com.ard.common.utils.SecurityUtils;
|
import com.ard.common.utils.StringUtils;
|
import com.ard.framework.security.context.PermissionContextHolder;
|
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
|
import org.aspectj.lang.JoinPoint;
|
import org.aspectj.lang.annotation.Aspect;
|
import org.aspectj.lang.annotation.Before;
|
import org.aspectj.lang.annotation.Pointcut;
|
import org.springframework.stereotype.Component;
|
import java.util.ArrayList;
|
import java.util.List;
|
|
@Aspect
|
@Component
|
public class DataScopePlusAspect {
|
/**
|
* 全部数据权限
|
*/
|
public static final String DATA_SCOPE_ALL = "1";
|
|
/**
|
* 自定数据权限
|
*/
|
public static final String DATA_SCOPE_CUSTOM = "2";
|
|
/**
|
* 部门数据权限
|
*/
|
public static final String DATA_SCOPE_DEPT = "3";
|
|
/**
|
* 部门及以下数据权限
|
*/
|
public static final String DATA_SCOPE_DEPT_AND_CHILD = "4";
|
|
/**
|
* 仅本人数据权限
|
*/
|
public static final String DATA_SCOPE_SELF = "5";
|
|
|
@Pointcut("@annotation(com.ard.common.annotation.DataScopePlus)")
|
public void dataScopePointcut() {
|
}
|
|
@Before("@annotation(controllerDataScopePlus)")
|
public void doBefore(JoinPoint joinPoint, DataScopePlus controllerDataScopePlus) {
|
handleDataScope(joinPoint, controllerDataScopePlus);
|
}
|
|
protected void handleDataScope(final JoinPoint joinPoint, DataScopePlus controllerDataScope) {
|
// 获取当前用户
|
LoginUser loginUser = SecurityUtils.getLoginUser();
|
if (StringUtils.isNotNull(loginUser)) {
|
SysUser currentUser = loginUser.getUser();
|
if (currentUser != null && !currentUser.isAdmin()) {
|
String permission = StringUtils.defaultIfEmpty(controllerDataScope.permission(),
|
PermissionContextHolder.getContext());
|
dataScopeFilter(joinPoint, currentUser, permission);
|
}
|
}
|
}
|
|
private void dataScopeFilter(JoinPoint joinPoint, SysUser user, String permission) {
|
StringBuilder sqlString = new StringBuilder();
|
List<String> conditions = new ArrayList<>();
|
List<String> scopeCustomIds = new ArrayList<>();
|
|
// 获取用户角色并遍历进行权限检查
|
user.getRoles().forEach(role -> {
|
if (DATA_SCOPE_CUSTOM.equals(role.getDataScope()) && StringUtils.equals(role.getStatus(),
|
UserConstants.ROLE_NORMAL)) {
|
if (StringUtils.containsAny(role.getPermissions(), Convert.toStrArray(permission))) {
|
scopeCustomIds.add(Convert.toStr(role.getRoleId()));
|
}
|
}
|
});
|
|
for (SysRole role : user.getRoles()) {
|
String dataScope = role.getDataScope();
|
if (conditions.contains(dataScope) || StringUtils.equals(role.getStatus(), UserConstants.ROLE_DISABLE)) {
|
continue;
|
}
|
|
if (!StringUtils.containsAny(role.getPermissions(), Convert.toStrArray(permission))) {
|
continue;
|
}
|
|
if (DATA_SCOPE_ALL.equals(dataScope)) {
|
sqlString = new StringBuilder();
|
conditions.add(dataScope);
|
break;
|
} else if (DATA_SCOPE_CUSTOM.equals(dataScope)) {
|
// 自定义数据权限
|
if (scopeCustomIds.size() > 1) {
|
sqlString.append(StringUtils.format(" OR dept_id IN (SELECT dept_id FROM sys_role_dept WHERE " +
|
"role_id IN ({}) )", String.join(",", scopeCustomIds)));
|
} else {
|
sqlString.append(StringUtils.format(" OR dept_id IN (SELECT dept_id FROM sys_role_dept WHERE " +
|
"role_id = {} )", role.getRoleId()));
|
}
|
} else if (DATA_SCOPE_DEPT.equals(dataScope)) {
|
// 部门数据权限
|
sqlString.append(StringUtils.format(" OR dept_id = {}", user.getDeptId()));
|
} else if (DATA_SCOPE_DEPT_AND_CHILD.equals(dataScope)) {
|
// 部门及以下数据权限
|
sqlString.append(StringUtils.format(" OR dept_id IN (SELECT dept_id FROM sys_dept WHERE dept_id = {} " +
|
"OR find_in_set({}, ancestors))", user.getDeptId(), user.getDeptId()));
|
} else if (DATA_SCOPE_SELF.equals(dataScope)) {
|
// 仅本人数据权限
|
sqlString.append(StringUtils.format(" OR user_id = {}", user.getUserId()));
|
}
|
conditions.add(dataScope);
|
}
|
QueryWrapper<?> queryWrapper = getQueryWrapper(joinPoint);
|
if (StringUtils.isNotBlank(sqlString.toString())) {
|
queryWrapper.apply(sqlString.substring(4));
|
}
|
}
|
|
private QueryWrapper<?> getQueryWrapper(JoinPoint joinPoint) {
|
Object[] args = joinPoint.getArgs();
|
if (args != null && args.length > 0 && args[0] instanceof QueryWrapper) {
|
return (QueryWrapper<?>) args[0];
|
}
|
return null;
|
}
|
}
|
