| | |
|---|
| | | @Before("dataScopePointCut()")
|
|---|
| | | public void doBefore(JoinPoint point) throws Throwable
|
|---|
| | | {
|
|---|
| | | clearDataScope(point);
|
|---|
| | | handleDataScope(point);
|
|---|
| | | }
|
|---|
| | |
|
|---|
| | |
|---|
| | | }
|
|---|
| | | // 获取当前的用户
|
|---|
| | | LoginUser loginUser = tokenService.getLoginUser();
|
|---|
| | | SysUser currentUser = loginUser.getSysUser();
|
|---|
| | | if (currentUser != null)
|
|---|
| | | if (StringUtils.isNotNull(loginUser))
|
|---|
| | | {
|
|---|
| | | SysUser currentUser = loginUser.getSysUser();
|
|---|
| | | // 如果是超级管理员，则不过滤数据
|
|---|
| | | if (!currentUser.isAdmin())
|
|---|
| | | if (StringUtils.isNotNull(currentUser) && !currentUser.isAdmin())
|
|---|
| | | {
|
|---|
| | | dataScopeFilter(joinPoint, currentUser, controllerDataScope.deptAlias(),
|
|---|
| | | controllerDataScope.userAlias());
|
|---|
| | |
|---|
| | | }
|
|---|
| | | return null;
|
|---|
| | | }
|
|---|
| | |
|
|---|
| | | /**
|
|---|
| | | * 拼接权限sql前先清空params.dataScope参数防止注入
|
|---|
| | | */
|
|---|
| | | private void clearDataScope(final JoinPoint joinPoint)
|
|---|
| | | {
|
|---|
| | | Object params = joinPoint.getArgs()[0];
|
|---|
| | | if (StringUtils.isNotNull(params) && params instanceof BaseEntity)
|
|---|
| | | {
|
|---|
| | | BaseEntity baseEntity = (BaseEntity) params;
|
|---|
| | | baseEntity.getParams().put(DATA_SCOPE, "");
|
|---|
| | | }
|
|---|
| | | }
|
|---|
| | | }
|
|---|
