| | |
| | | package com.ruoyi.common.datascope.aspect;
|
| | |
|
| | | import java.util.ArrayList;
|
| | | import java.util.List;
|
| | | import org.aspectj.lang.JoinPoint;
|
| | | import org.aspectj.lang.annotation.Aspect;
|
| | | import org.aspectj.lang.annotation.Before;
|
| | |
| | | public static void dataScopeFilter(JoinPoint joinPoint, SysUser user, String deptAlias, String userAlias)
|
| | | {
|
| | | StringBuilder sqlString = new StringBuilder();
|
| | | List<String> conditions = new ArrayList<String>();
|
| | |
|
| | | for (SysRole role : user.getRoles())
|
| | | {
|
| | | String dataScope = role.getDataScope();
|
| | | if (conditions.contains(dataScope))
|
| | | {
|
| | | continue;
|
| | | }
|
| | | if (DATA_SCOPE_ALL.equals(dataScope))
|
| | | {
|
| | | sqlString = new StringBuilder();
|
| | |
| | | else
|
| | | {
|
| | | // 数据权限为仅本人且没有userAlias别名不查询任何数据
|
| | | sqlString.append(" OR 1=0 ");
|
| | | sqlString.append(StringUtils.format(" OR {}.dept_id = 0 ", deptAlias));
|
| | | }
|
| | | }
|
| | | conditions.add(dataScope);
|
| | | }
|
| | |
|
| | | if (StringUtils.isNotBlank(sqlString.toString()))
|