优化多角色数据权限匹配规则

RuoYi

2022-08-22 767f7c86217336079cb9044b2f54ac010126329c

 ruoyi-modules/ruoyi-system/src/main/java/com/ruoyi/system/controller/SysUserController.java

@@ -29,10 +29,12 @@
import com.ruoyi.common.security.annotation.InnerAuth;

import com.ruoyi.common.security.annotation.RequiresPermissions;

import com.ruoyi.common.security.utils.SecurityUtils;

import com.ruoyi.system.api.domain.SysDept;

import com.ruoyi.system.api.domain.SysRole;

import com.ruoyi.system.api.domain.SysUser;

import com.ruoyi.system.api.model.LoginUser;

import com.ruoyi.system.service.ISysConfigService;

import com.ruoyi.system.service.ISysDeptService;

import com.ruoyi.system.service.ISysPermissionService;

import com.ruoyi.system.service.ISysPostService;

import com.ruoyi.system.service.ISysRoleService;

@@ -52,6 +54,9 @@


    @Autowired

    private ISysRoleService roleService;



    @Autowired

    private ISysDeptService deptService;



    @Autowired

    private ISysPostService postService;

@@ -116,9 +121,9 @@
            return R.fail("用户名或密码错误");

        }

        // 角色集合

        Set<String> roles = permissionService.getRolePermission(sysUser.getUserId());

        Set<String> roles = permissionService.getRolePermission(sysUser);

        // 权限集合

        Set<String> permissions = permissionService.getMenuPermission(sysUser.getUserId());

        Set<String> permissions = permissionService.getMenuPermission(sysUser);

        LoginUser sysUserVo = new LoginUser();

        sysUserVo.setSysUser(sysUser);

        sysUserVo.setRoles(roles);

@@ -153,13 +158,13 @@
    @GetMapping("getInfo")

    public AjaxResult getInfo()

    {

        Long userId = SecurityUtils.getUserId();

        SysUser user = userService.selectUserById(SecurityUtils.getUserId());

        // 角色集合

        Set<String> roles = permissionService.getRolePermission(userId);

        Set<String> roles = permissionService.getRolePermission(user);

        // 权限集合

        Set<String> permissions = permissionService.getMenuPermission(userId);

        Set<String> permissions = permissionService.getMenuPermission(user);

        AjaxResult ajax = AjaxResult.success();

        ajax.put("user", userService.selectUserById(userId));

        ajax.put("user", user);

        ajax.put("roles", roles);

        ajax.put("permissions", permissions);

        return ajax;

@@ -179,9 +184,10 @@
        ajax.put("posts", postService.selectPostAll());

        if (StringUtils.isNotNull(userId))

        {

            ajax.put(AjaxResult.DATA_TAG, userService.selectUserById(userId));

            SysUser sysUser = userService.selectUserById(userId);

            ajax.put(AjaxResult.DATA_TAG, sysUser);

            ajax.put("postIds", postService.selectPostListByUserId(userId));

            ajax.put("roleIds", roleService.selectRoleListByUserId(userId));

            ajax.put("roleIds", sysUser.getRoles().stream().map(SysRole::getRoleId).collect(Collectors.toList()));

        }

        return ajax;

    }

@@ -222,6 +228,7 @@
    public AjaxResult edit(@Validated @RequestBody SysUser user)

    {

        userService.checkUserAllowed(user);

        userService.checkUserDataScope(user.getUserId());

        if (StringUtils.isNotEmpty(user.getPhonenumber())

                && UserConstants.NOT_UNIQUE.equals(userService.checkPhoneUnique(user)))

        {

@@ -260,6 +267,7 @@
    public AjaxResult resetPwd(@RequestBody SysUser user)

    {

        userService.checkUserAllowed(user);

        userService.checkUserDataScope(user.getUserId());

        user.setPassword(SecurityUtils.encryptPassword(user.getPassword()));

        user.setUpdateBy(SecurityUtils.getUsername());

        return toAjax(userService.resetPwd(user));

@@ -274,6 +282,7 @@
    public AjaxResult changeStatus(@RequestBody SysUser user)

    {

        userService.checkUserAllowed(user);

        userService.checkUserDataScope(user.getUserId());

        user.setUpdateBy(SecurityUtils.getUsername());

        return toAjax(userService.updateUserStatus(user));

    }

@@ -301,7 +310,18 @@
    @PutMapping("/authRole")

    public AjaxResult insertAuthRole(Long userId, Long[] roleIds)

    {

        userService.checkUserDataScope(userId);

        userService.insertUserAuth(userId, roleIds);

        return success();

    }



    /**

     * 获取部门树列表

     */

    @RequiresPermissions("system:user:list")

    @GetMapping("/deptTree")

    public AjaxResult deptTree(SysDept dept)

    {

        return AjaxResult.success(deptService.selectDeptTreeList(dept));

    }

}