package com.nis.web.service; import java.lang.reflect.Type; import java.text.SimpleDateFormat; import java.util.ArrayList; import java.util.Date; import java.util.HashMap; import java.util.List; import java.util.Map; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.beans.BeanUtils; import com.google.common.collect.Lists; import com.google.gson.Gson; import com.google.gson.GsonBuilder; import com.google.gson.JsonElement; import com.google.gson.JsonPrimitive; import com.google.gson.JsonSerializationContext; import com.google.gson.JsonSerializer; import com.nis.domain.SysRole; import com.nis.domain.SysUser; import com.nis.domain.configuration.BaseCfg; import com.nis.domain.configuration.BaseIpCfg; import com.nis.domain.configuration.BaseStringCfg; import com.nis.domain.configuration.ComplexkeywordCfg; import com.nis.domain.configuration.HttpBodyCfg; import com.nis.domain.configuration.IpPortCfg; import com.nis.domain.maat.MaatCfg.GroupCfg; import com.nis.domain.maat.MaatCfg.IpCfg; import com.nis.domain.maat.MaatCfg.NumBoundaryCfg; import com.nis.domain.maat.MaatCfg.StringCfg; import com.nis.util.ConfigServiceUtil; import com.nis.util.Configurations; import com.nis.util.IpUtil; import com.nis.util.StringUtils; /** * Service基类 * @author ThinkGem * @version 2014-05-16 */ public abstract class BaseService { /** * 日志对象 */ protected Logger logger = LoggerFactory.getLogger(getClass()); /** * 数据范围过滤 * @param user 当前用户对象,通过“entity.getCurrentUser()”获取 * @param officeAlias 机构表别名,多个用“,”逗号隔开。 * @param userAlias 用户表别名,多个用“,”逗号隔开,传递空,忽略此参数 * @return 标准连接条件对象 */ public static String dataScopeFilter(SysUser user, String officeAlias, String userAlias) { StringBuilder sqlString = new StringBuilder(); // 进行权限过滤,多个角色权限范围之间为或者关系。 List dataScope = Lists.newArrayList(); if (StringUtils.isBlank(user.getLoginId())){ return ""; } // 超级管理员,跳过权限过滤 if (user.isAdmin()){ boolean isDataScopeAll = isContainsDataScopeAll(user.getUserRoleList()); for (SysRole r : user.getUserRoleList()) { for (String oa : StringUtils.split(officeAlias, ",")){ if (!dataScope.contains(r.getDataScope()) && StringUtils.isNotBlank(oa)){ sqlString.append(createScopeSql(r.getDataScope(),oa,user,null)); dataScope.add(r.getDataScope()); } } } // 如果没有全部数据权限,并设置了用户别名,则当前权限为本人;如果未设置别名,当前无权限为已植入权限 if (!isDataScopeAll){ if (StringUtils.isNotBlank(userAlias)){ for (String ua : StringUtils.split(userAlias, ",")){ sqlString.append(" OR " + ua + ".id = '" + user.getId() + "'"); } }else { for (String oa : StringUtils.split(officeAlias, ",")){ //sqlString.append(" OR " + oa + ".id = " + user.getOffice().getId()); sqlString.append(" OR " + oa + ".id IS NULL"); } } }else{ // 如果包含全部权限,则去掉之前添加的所有条件,并跳出循环。 sqlString = new StringBuilder(); } } if (StringUtils.isNotBlank(sqlString.toString())){ return " AND (" + sqlString.substring(4) + ")"; } return ""; } /** * 数据范围过滤 * @param user 当前用户对象,通过“entity.getCurrentUser()”获取 * @param configAlias 配置表别名,多个用","逗号隔开,传递空,忽略此参数 * @return 标准连接条件对象 */ public static String configScopeFilter(SysUser user, String configAlias) { StringBuilder sqlString = new StringBuilder(); // 进行权限过滤,多个角色权限范围之间为或者关系。 List dataScope = Lists.newArrayList(); if (StringUtils.isBlank(user.getLoginId())){ return ""; } // 超级管理员,跳过权限过滤 if (!user.isAdmin()){ boolean isDataScopeAll = isContainsDataScopeAll(user.getUserRoleList()); // 如果没有全部数据权限 if (!isDataScopeAll){ for (SysRole r : user.getUserRoleList()) { for (String c : StringUtils.split(configAlias, ",")){ if (!dataScope.contains(r.getDataScope()) && StringUtils.isNotBlank(c)){ sqlString.append(createScopeSql(r.getDataScope(),"",user,c)); dataScope.add(r.getDataScope()); } } } }else{ // 如果包含全部权限,则去掉之前添加的所有条件,并跳出循环。 sqlString = new StringBuilder(); } } if (StringUtils.isNotBlank(sqlString.toString())){ return " AND (" + sqlString.substring(4) + ")"; } return ""; } /** * 测试数据是否包含全集 * @return */ private static boolean isContainsDataScopeAll(List roleList) { boolean isDataScopeAll = false; for(SysRole role : roleList) { if(SysRole.DATA_SCOPE_ALL.equals(role.getDataScope())){ isDataScopeAll = true; break; } } return isDataScopeAll; } /** * 过滤机构信息 * @param dataScope 数据范围(1:所有数据;2:所在公司及以下数据;3:所在公司数据; * 4:所在部门及以下数据;5:所在部门数据;6:所在单位及以下数据;7:所在单位数据; * 8:操作员数据;9:审核员数据,10:审计员数据) * @return */ private static String createScopeSql(int dataScope,String officeAlias,SysUser user,String configAlias) { StringBuilder scopeSql = new StringBuilder(1024); if (SysRole.DATA_SCOPE_COMPANY_AND_CHILD.equals(dataScope)){ scopeSql.append(" OR " + officeAlias + ".id = " + user.getCompany().getId()); scopeSql.append(" OR " + officeAlias + ".parent_ids LIKE '" + user.getCompany().getParentIds() + user.getCompany().getId() + ",%'"); } else if (SysRole.DATA_SCOPE_COMPANY.equals(dataScope)){ scopeSql.append(" OR " + officeAlias + ".id = " + user.getCompany().getId()); // 包括本公司下的部门 (type=1:公司;type=2:单位 3.部门) scopeSql.append(" OR (" + officeAlias + ".parent_id = '" + user.getCompany().getId() + "' AND " + officeAlias + ".type>1)"); } else if (SysRole.DATA_SCOPE_OFFICE_AND_CHILD.equals(dataScope)){ scopeSql.append(" OR " + officeAlias + ".id = " + user.getOffice().getId()); scopeSql.append(" OR " + officeAlias + ".parent_ids LIKE '" + user.getOffice().getParentIds() + user.getOffice().getId() + ",%'"); } else if (SysRole.DATA_SCOPE_OFFICE.equals(dataScope)){ scopeSql.append(" OR " + officeAlias + ".id = " + user.getOffice().getId()); } else if (SysRole.DATA_SCOPE_ENTITY_AND_CHILD.equals(dataScope)){ scopeSql.append(" OR " + officeAlias + ".id = " + user.getEntity().getId()); scopeSql.append(" OR " + officeAlias + ".parent_ids LIKE '" + user.getEntity().getParentIds() + user.getEntity().getId() + ",%'"); } else if (SysRole.DATA_SCOPE_ENTITY.equals(dataScope)){ scopeSql.append(" OR " + officeAlias + ".id = " + user.getEntity().getId()); // 包括本公司下的部门 (type=1:公司;type=2:单位 3.部门) scopeSql.append(" OR (" + officeAlias + ".parent_id = '" + user.getEntity().getId() + "' AND " + officeAlias + ".type>1)"); }else if (SysRole.DATA_SCOPE_CREATOR.equals(dataScope)){ scopeSql.append(" OR " + configAlias + ".is_audit !=3"); } else if (SysRole.DATA_SCOPE_AUDITOR.equals(dataScope)){ scopeSql.append(" OR " + configAlias + ".is_audit = 0 and " + configAlias + ".is_valid = 0"); } else if (SysRole.DATA_SCOPE_SHOWER.equals(dataScope)){ scopeSql.append(" OR " + configAlias + ".is_audit = 1"); } return scopeSql.toString(); } /** * * getTableName(获取表名对应的Class) * (这里描述这个方法适用条件 – 可选) * @param clazz * @return *String * @exception * @since 1.0.0 */ public String getClassName(String tableName){ return Configurations.getStringProperty(tableName, null); } /** * 转换成字符串 * @param obj * @return */ public static String gsonToJson(T obj){ Gson gson = new GsonBuilder().disableHtmlEscaping(). excludeFieldsWithoutExposeAnnotation(). registerTypeAdapter(Date.class, new JsonSerializer() { @Override public JsonElement serialize(Date src, Type type, JsonSerializationContext context) { String format = "yyyy-MM-dd'T'HH:mm:ss.SSS"; long time= ((Date) src).getTime()-8*60*60*1000; SimpleDateFormat sdf = new SimpleDateFormat(format); return new JsonPrimitive(sdf.format(time)); } }).create(); return gson.toJson(obj); } /** * 界面配置list转换为服务接口端的list * @param dstList * @param srcList * @param cfgType,1为IP类型,2为字符串类型,3为增强字符串,4数值类型,5摘要类,6回调类[但字符串类域配置和增强字符串域配置在接口参数中同属于strRegionList] * @param baseCfg,配置基本信息 * @param groupRelationList 配置分组列表 * @return */ public static Map cfgConvert(List dstList,List srcList,Integer cfgType,BaseCfg baseCfg,List groupRelationList){ GroupCfg group = new GroupCfg(); group.setGroupId(ConfigServiceUtil.getId(2, 1).get(0)); group.setCompileId(baseCfg.getCompileId()); group.setAuditTime(baseCfg.getAuditTime()); group.setIsValid(baseCfg.getIsValid()); groupRelationList.add(group); Map map = new HashMap(); if(cfgType==1){ List numRegionList = new ArrayList(); Integer groupId = 0; for(int i=0;i