/*
|
* Copyright [2020-2030] [https://www.stylefeng.cn]
|
*
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
* you may not use this file except in compliance with the License.
|
* You may obtain a copy of the License at
|
*
|
* http://www.apache.org/licenses/LICENSE-2.0
|
*
|
* Unless required by applicable law or agreed to in writing, software
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
* See the License for the specific language governing permissions and
|
* limitations under the License.
|
*
|
* Guns采用APACHE LICENSE 2.0开源协议，您在使用过程中，需要注意以下几点：
|
*
|
* 1.请不要删除和修改根目录下的LICENSE文件。
|
* 2.请不要删除和修改Guns源码头部的版权声明。
|
* 3.请保留源码和相关描述文件的项目出处，作者声明等。
|
* 4.分发源码时候，请注明软件出处 https://gitee.com/stylefeng/guns
|
* 5.在修改包名，模块名称，项目代码等时，请注明软件出处 https://gitee.com/stylefeng/guns
|
* 6.若您的项目无法满足以上几点，可申请商业授权
|
*/
|
package cn.stylefeng.roses.kernel.system.modular.organization.service;
|
|
import cn.hutool.core.collection.CollectionUtil;
|
import cn.hutool.core.util.ObjectUtil;
|
import cn.stylefeng.roses.kernel.auth.api.enums.DataScopeTypeEnum;
|
import cn.stylefeng.roses.kernel.auth.api.exception.enums.AuthExceptionEnum;
|
import cn.stylefeng.roses.kernel.db.api.DbOperatorApi;
|
import cn.stylefeng.roses.kernel.system.api.*;
|
import cn.stylefeng.roses.kernel.system.api.exception.SystemModularException;
|
import cn.stylefeng.roses.kernel.system.api.exception.enums.organization.DataScopeExceptionEnum;
|
import cn.stylefeng.roses.kernel.system.api.pojo.organization.DataScopeDTO;
|
import cn.stylefeng.roses.kernel.system.api.pojo.role.dto.SysRoleDTO;
|
import cn.stylefeng.roses.kernel.system.api.pojo.user.SysUserOrgDTO;
|
import org.springframework.stereotype.Service;
|
|
import javax.annotation.Resource;
|
import java.util.HashSet;
|
import java.util.List;
|
import java.util.Set;
|
import java.util.stream.Collectors;
|
|
/**
|
* 数据范围服务
|
*
|
* @author fengshuonan
|
* @date 2020/11/6 12:01
|
*/
|
@Service
|
public class DataScopeService implements DataScopeApi {
|
|
@Resource
|
private UserServiceApi userServiceApi;
|
|
@Resource
|
private RoleServiceApi roleServiceApi;
|
|
@Resource
|
private UserOrgServiceApi userOrgServiceApi;
|
|
@Resource
|
private DbOperatorApi dbOperatorApi;
|
|
@Resource
|
private SysUserRoleApi sysUserRoleApi;
|
|
|
@Override
|
public DataScopeDTO getDataScope(Long userId, List<SysRoleDTO> sysRoles) {
|
|
// 初始化返回结果
|
DataScopeDTO dataScopeResponse = new DataScopeDTO();
|
Set<Long> userIds = new HashSet<>();
|
Set<Long> organizationIds = new HashSet<>();
|
|
if (userId == null) {
|
throw new SystemModularException(DataScopeExceptionEnum.USER_ID_EMPTY_ERROR, userId);
|
}
|
|
// 获取用户的主要部门信息
|
SysUserOrgDTO sysUserOrgResponse = userOrgServiceApi.getUserOrgByUserId(userId);
|
|
// 获取角色中的数据范围类型
|
Set<DataScopeTypeEnum> dataScopeTypeEnums = sysRoles.stream().map(SysRoleDTO::getDataScopeTypeEnum).collect(Collectors.toSet());
|
dataScopeResponse.setDataScopeTypeEnums(dataScopeTypeEnums);
|
|
// 1.根据数据范围类型的不同，填充角色拥有的 organizationIds 和 userIds 范围
|
// 1.1 包含全部数据类型的，直接不用设置组织机构，直接放开
|
if (dataScopeTypeEnums.contains(DataScopeTypeEnum.ALL)) {
|
return dataScopeResponse;
|
}
|
|
// 1.2 包含指定部门数据，将指定数据范围增加到Set中
|
if (dataScopeTypeEnums.contains(DataScopeTypeEnum.DEFINE)) {
|
|
// 获取角色对应的组织机构范围
|
List<Long> roleIds = sysRoles.stream().map(SysRoleDTO::getRoleId).collect(Collectors.toList());
|
List<Long> orgIds = roleServiceApi.getRoleDataScopes(roleIds);
|
organizationIds.addAll(orgIds);
|
}
|
|
// 1.3 本部门和本部门以下，查出用户的主要部门，并且查询该部门本部门及以下的组织机构id列表
|
if (dataScopeTypeEnums.contains(DataScopeTypeEnum.DEPT_WITH_CHILD)) {
|
|
// 获取部门及以下部门的id列表
|
Long organizationId = sysUserOrgResponse.getOrgId();
|
Set<Long> subOrgIds = dbOperatorApi.findSubListByParentId("hr_organization", "org_pids", "org_id", organizationId);
|
organizationIds.add(organizationId);
|
organizationIds.addAll(subOrgIds);
|
}
|
|
// 1.4 如果是本部门，则查出本部门并添加到组织机构列表
|
if (dataScopeTypeEnums.contains(DataScopeTypeEnum.DEPT)) {
|
|
// 获取本部门的id
|
Long organizationId = sysUserOrgResponse.getOrgId();
|
organizationIds.add(organizationId);
|
}
|
|
// 1.5 如果只是本用户数据，将用户本身装进userId数据范围
|
if (dataScopeTypeEnums.contains(DataScopeTypeEnum.SELF)) {
|
userIds.add(userId);
|
}
|
|
// 2. 获取用户单独绑定的组织机构id
|
List<Long> userBindDataScope = userServiceApi.getUserBindDataScope(userId);
|
organizationIds.addAll(userBindDataScope);
|
|
// 3. 如果userIds为空 organizationIds不为空 则userIds 为organizationIds下所有用户id
|
if (CollectionUtil.isEmpty(userIds) && CollectionUtil.isNotEmpty(organizationIds)) {
|
userIds.addAll(userOrgServiceApi.getUserIdsByOrgIds(organizationIds));
|
}
|
|
// 4. 组装返回结果
|
dataScopeResponse.setUserIds(userIds);
|
dataScopeResponse.setOrganizationIds(organizationIds);
|
|
return dataScopeResponse;
|
}
|
|
@Override
|
public DataScopeDTO getDataScope(Long userId) {
|
// 2. 获取用户角色信息
|
List<Long> roleIds = sysUserRoleApi.findRoleIdsByUserId(userId);
|
if (ObjectUtil.isEmpty(roleIds)) {
|
throw new SystemModularException(AuthExceptionEnum.ROLE_IS_EMPTY);
|
}
|
List<SysRoleDTO> roleResponseList = roleServiceApi.getRolesByIds(roleIds);
|
return this.getDataScope(userId, roleResponseList);
|
}
|
}
|
