package cn.iocoder.yudao.module.crm.service.permission;
|
|
import cn.hutool.core.collection.CollUtil;
|
import cn.hutool.core.util.ObjUtil;
|
import cn.iocoder.yudao.framework.common.util.collection.CollectionUtils;
|
import cn.iocoder.yudao.framework.common.util.object.BeanUtils;
|
import cn.iocoder.yudao.module.crm.controller.admin.permission.vo.CrmPermissionSaveReqVO;
|
import cn.iocoder.yudao.module.crm.controller.admin.permission.vo.CrmPermissionUpdateReqVO;
|
import cn.iocoder.yudao.module.crm.dal.dataobject.business.CrmBusinessDO;
|
import cn.iocoder.yudao.module.crm.dal.dataobject.contact.CrmContactDO;
|
import cn.iocoder.yudao.module.crm.dal.dataobject.contract.CrmContractDO;
|
import cn.iocoder.yudao.module.crm.dal.dataobject.customer.CrmCustomerDO;
|
import cn.iocoder.yudao.module.crm.dal.dataobject.permission.CrmPermissionDO;
|
import cn.iocoder.yudao.module.crm.dal.mysql.business.CrmBusinessMapper;
|
import cn.iocoder.yudao.module.crm.dal.mysql.contact.CrmContactMapper;
|
import cn.iocoder.yudao.module.crm.dal.mysql.contract.CrmContractMapper;
|
import cn.iocoder.yudao.module.crm.dal.mysql.customer.CrmCustomerMapper;
|
import cn.iocoder.yudao.module.crm.dal.mysql.permission.CrmPermissionMapper;
|
import cn.iocoder.yudao.module.crm.enums.common.CrmBizTypeEnum;
|
import cn.iocoder.yudao.module.crm.enums.permission.CrmPermissionLevelEnum;
|
import cn.iocoder.yudao.module.crm.framework.permission.core.annotations.CrmPermission;
|
import cn.iocoder.yudao.module.crm.service.business.CrmBusinessService;
|
import cn.iocoder.yudao.module.crm.service.contact.CrmContactService;
|
import cn.iocoder.yudao.module.crm.service.contract.CrmContractService;
|
import cn.iocoder.yudao.module.crm.service.permission.bo.CrmPermissionCreateReqBO;
|
import cn.iocoder.yudao.module.crm.service.permission.bo.CrmPermissionTransferReqBO;
|
import cn.iocoder.yudao.module.crm.util.CrmPermissionUtils;
|
import cn.iocoder.yudao.module.system.api.user.AdminUserApi;
|
import cn.iocoder.yudao.module.system.api.user.dto.AdminUserRespDTO;
|
import jakarta.annotation.Resource;
|
import org.springframework.context.annotation.Lazy;
|
import org.springframework.stereotype.Service;
|
import org.springframework.transaction.annotation.Transactional;
|
import org.springframework.validation.annotation.Validated;
|
|
import java.util.*;
|
|
import static cn.iocoder.yudao.framework.common.exception.util.ServiceExceptionUtil.exception;
|
import static cn.iocoder.yudao.framework.common.util.collection.CollectionUtils.*;
|
import static cn.iocoder.yudao.module.crm.enums.ErrorCodeConstants.*;
|
import static cn.iocoder.yudao.module.crm.enums.permission.CrmPermissionLevelEnum.isOwner;
|
|
/**
|
* CRM 数据权限 Service 接口实现类
|
*
|
* @author HUIHUI
|
*/
|
@Service
|
@Validated
|
public class CrmPermissionServiceImpl implements CrmPermissionService {
|
|
@Resource
|
private CrmPermissionMapper permissionMapper;
|
@Resource
|
private CrmCustomerMapper customerMapper;
|
@Resource
|
private CrmContactMapper contactMapper;
|
@Resource
|
private CrmBusinessMapper businessMapper;
|
@Resource
|
private CrmContractMapper contractMapper;
|
@Resource
|
@Lazy // 解决依赖循环
|
private CrmContactService contactService;
|
@Resource
|
@Lazy // 解决依赖循环
|
private CrmBusinessService businessService;
|
@Resource
|
@Lazy // 解决依赖循环
|
private CrmContractService contractService;
|
@Resource
|
private AdminUserApi adminUserApi;
|
|
|
@Override
|
@Transactional(rollbackFor = Exception.class)
|
@CrmPermission(bizTypeValue = "#reqVO.bizType", bizId = "#reqVO.bizId", level = CrmPermissionLevelEnum.OWNER)
|
public void createPermission(CrmPermissionSaveReqVO reqVO, Long userId) {
|
// 1. 创建数据权限
|
createPermission0(BeanUtils.toBean(reqVO, CrmPermissionCreateReqBO.class));
|
|
// 2. 处理【同时添加至】的权限
|
if (CollUtil.isEmpty(reqVO.getToBizTypes())) {
|
return;
|
}
|
List<CrmPermissionCreateReqBO> createPermissions = new ArrayList<>();
|
buildContactPermissions(reqVO, userId, createPermissions);
|
buildBusinessPermissions(reqVO, userId, createPermissions);
|
buildContractPermissions(reqVO, userId, createPermissions);
|
if (CollUtil.isEmpty(createPermissions)) {
|
return;
|
}
|
createPermissionBatch(createPermissions);
|
}
|
|
/**
|
* 处理同时添加至联系人
|
*
|
* @param reqVO 请求
|
* @param userId 操作人
|
* @param createPermissions 待添加权限列表
|
*/
|
private void buildContactPermissions(CrmPermissionSaveReqVO reqVO, Long userId, List<CrmPermissionCreateReqBO> createPermissions) {
|
// 1. 校验是否被同时添加
|
Integer type = CrmBizTypeEnum.CRM_CONTACT.getType();
|
if (!reqVO.getToBizTypes().contains(type)) {
|
return;
|
}
|
// 2. 添加数据权限
|
List<CrmContactDO> contactList = contactService.getContactListByCustomerIdOwnerUserId(reqVO.getBizId(), userId);
|
contactList.forEach(item -> createBizTypePermissions(reqVO, type, item.getId(), item.getName(), createPermissions));
|
}
|
|
/**
|
* 处理同时添加至商机
|
*
|
* @param reqVO 请求
|
* @param userId 操作人
|
* @param createPermissions 待添加权限列表
|
*/
|
private void buildBusinessPermissions(CrmPermissionSaveReqVO reqVO, Long userId, List<CrmPermissionCreateReqBO> createPermissions) {
|
// 1. 校验是否被同时添加
|
Integer type = CrmBizTypeEnum.CRM_BUSINESS.getType();
|
if (!reqVO.getToBizTypes().contains(type)) {
|
return;
|
}
|
// 2. 添加数据权限
|
List<CrmBusinessDO> businessList = businessService.getBusinessListByCustomerIdOwnerUserId(reqVO.getBizId(), userId);
|
businessList.forEach(item -> createBizTypePermissions(reqVO, type, item.getId(), item.getName(), createPermissions));
|
}
|
|
/**
|
* 处理同时添加至合同
|
*
|
* @param reqVO 请求
|
* @param userId 操作人
|
* @param createPermissions 待添加权限列表
|
*/
|
private void buildContractPermissions(CrmPermissionSaveReqVO reqVO, Long userId, List<CrmPermissionCreateReqBO> createPermissions) {
|
// 1. 校验是否被同时添加
|
Integer type = CrmBizTypeEnum.CRM_CONTRACT.getType();
|
if (!reqVO.getToBizTypes().contains(type)) {
|
return;
|
}
|
// 2. 添加数据权限
|
List<CrmContractDO> contractList = contractService.getContractListByCustomerIdOwnerUserId(reqVO.getBizId(), userId);
|
contractList.forEach(item -> createBizTypePermissions(reqVO, type, item.getId(), item.getName(), createPermissions));
|
}
|
|
private void createBizTypePermissions(CrmPermissionSaveReqVO reqVO, Integer type, Long bizId, String name,
|
List<CrmPermissionCreateReqBO> createPermissions) {
|
AdminUserRespDTO user = adminUserApi.getUser(reqVO.getUserId());
|
// 1. 需要考虑，被添加人，是不是应该有对应的权限了；
|
CrmPermissionDO permission = hasAnyPermission(type, bizId, reqVO.getUserId());
|
if (ObjUtil.isNotNull(permission)) {
|
throw exception(CRM_PERMISSION_CREATE_FAIL_EXISTS, user.getNickname(), CrmBizTypeEnum.getNameByType(type),
|
name, CrmPermissionLevelEnum.getNameByLevel(permission.getLevel()));
|
}
|
// 2. 添加数据权限
|
createPermissions.add(new CrmPermissionCreateReqBO().setBizType(type)
|
.setBizId(bizId).setUserId(reqVO.getUserId()).setLevel(reqVO.getLevel()));
|
}
|
|
@Override
|
@Transactional(rollbackFor = Exception.class)
|
public Long createPermission(CrmPermissionCreateReqBO createReqBO) {
|
return createPermission0(createReqBO);
|
}
|
|
private Long createPermission0(CrmPermissionCreateReqBO createReqBO) {
|
validatePermissionNotExists(Collections.singletonList(createReqBO));
|
// 1. 校验用户是否存在
|
adminUserApi.validateUserList(Collections.singletonList(createReqBO.getUserId()));
|
// 2. 插入权限
|
CrmPermissionDO permission = BeanUtils.toBean(createReqBO, CrmPermissionDO.class);
|
permissionMapper.insert(permission);
|
return permission.getId();
|
}
|
|
@Override
|
public void createPermissionBatch(List<CrmPermissionCreateReqBO> createReqBOs) {
|
validatePermissionNotExists(createReqBOs);
|
// 1. 校验用户是否存在
|
adminUserApi.validateUserList(convertSet(createReqBOs, CrmPermissionCreateReqBO::getUserId));
|
|
// 2. 创建
|
List<CrmPermissionDO> permissions = BeanUtils.toBean(createReqBOs, CrmPermissionDO.class);
|
permissionMapper.insertBatch(permissions);
|
}
|
|
@Override
|
@Transactional(rollbackFor = Exception.class)
|
public void syncCustomerOwnerPermission(Long customerId, Long ownerUserId) {
|
if (customerId == null || ownerUserId == null) {
|
return;
|
}
|
// 1. 联系人
|
syncCustomerOwnerPermission(CrmBizTypeEnum.CRM_CONTACT.getType(), ownerUserId,
|
convertSet(contactMapper.selectListByCustomerId(customerId), CrmContactDO::getId));
|
// 2. 商机
|
syncCustomerOwnerPermission(CrmBizTypeEnum.CRM_BUSINESS.getType(), ownerUserId,
|
convertSet(businessMapper.selectListByCustomerId(customerId), CrmBusinessDO::getId));
|
// 3. 合同
|
syncCustomerOwnerPermission(CrmBizTypeEnum.CRM_CONTRACT.getType(), ownerUserId,
|
convertSet(contractMapper.selectListByCustomerId(customerId), CrmContractDO::getId));
|
}
|
|
/**
|
* 同步某个业务类型下，客户负责人的【读写】权限
|
*
|
* @param bizType 数据类型
|
* @param ownerUserId 客户负责人编号
|
* @param bizIds 数据编号集合
|
*/
|
private void syncCustomerOwnerPermission(Integer bizType, Long ownerUserId, Set<Long> bizIds) {
|
if (CollUtil.isEmpty(bizIds)) {
|
return;
|
}
|
// 1. 查询已有的权限，避免重复插入
|
Map<Long, CrmPermissionDO> permissionMap = new HashMap<>();
|
for (CrmPermissionDO permission : permissionMapper.selectByBizTypeAndBizIds(bizType, bizIds)) {
|
if (ObjUtil.equal(permission.getUserId(), ownerUserId)) {
|
permissionMap.putIfAbsent(permission.getBizId(), permission);
|
}
|
}
|
// 2. 计算需要新增、升级的权限
|
List<CrmPermissionDO> createPermissions = new ArrayList<>();
|
List<CrmPermissionDO> updatePermissions = new ArrayList<>();
|
for (Long bizId : bizIds) {
|
CrmPermissionDO permission = permissionMap.get(bizId);
|
if (permission == null) {
|
createPermissions.add(new CrmPermissionDO().setBizType(bizType).setBizId(bizId)
|
.setUserId(ownerUserId).setLevel(CrmPermissionLevelEnum.WRITE.getLevel()));
|
} else if (CrmPermissionLevelEnum.isRead(permission.getLevel())) {
|
// 只读升级为读写；负责人级别不降级
|
updatePermissions.add(new CrmPermissionDO().setId(permission.getId())
|
.setLevel(CrmPermissionLevelEnum.WRITE.getLevel()));
|
}
|
}
|
// 3. 批量写入
|
if (CollUtil.isNotEmpty(createPermissions)) {
|
permissionMapper.insertBatch(createPermissions);
|
}
|
if (CollUtil.isNotEmpty(updatePermissions)) {
|
permissionMapper.updateBatch(updatePermissions);
|
}
|
}
|
|
@Override
|
public void createPermissionForCustomerOwner(Integer bizType, Long bizId, Long customerId, Long ownerUserId) {
|
if (bizId == null || customerId == null) {
|
return;
|
}
|
// 1. 查询客户负责人
|
CrmCustomerDO customer = customerMapper.selectById(customerId);
|
if (customer == null || customer.getOwnerUserId() == null) {
|
return;
|
}
|
Long customerOwnerUserId = customer.getOwnerUserId();
|
// 2. 数据负责人本身就是客户负责人时，已经拥有权限，无需重复授权
|
if (ObjUtil.equal(customerOwnerUserId, ownerUserId)) {
|
return;
|
}
|
// 3. 不存在则新增读写权限，只读则升级为读写
|
CrmPermissionDO permission = permissionMapper.selectByBizTypeAndBizIdByUserId(bizType, bizId, customerOwnerUserId);
|
if (permission == null) {
|
permissionMapper.insert(new CrmPermissionDO().setBizType(bizType).setBizId(bizId)
|
.setUserId(customerOwnerUserId).setLevel(CrmPermissionLevelEnum.WRITE.getLevel()));
|
} else if (CrmPermissionLevelEnum.isRead(permission.getLevel())) {
|
permissionMapper.updateById(new CrmPermissionDO().setId(permission.getId())
|
.setLevel(CrmPermissionLevelEnum.WRITE.getLevel()));
|
}
|
}
|
|
@Override
|
@Transactional(rollbackFor = Exception.class)
|
public void updatePermission(CrmPermissionUpdateReqVO updateReqVO) {
|
// 1. 校验存在
|
validatePermissionExists(updateReqVO.getIds());
|
// 2. 更新
|
List<CrmPermissionDO> updateList = CollectionUtils.convertList(updateReqVO.getIds(),
|
id -> new CrmPermissionDO().setId(id).setLevel(updateReqVO.getLevel()));
|
permissionMapper.updateBatch(updateList);
|
}
|
|
private void validatePermissionExists(Collection<Long> ids) {
|
List<CrmPermissionDO> permissionList = permissionMapper.selectByIds(ids);
|
if (ObjUtil.notEqual(permissionList.size(), ids.size())) {
|
throw exception(CRM_PERMISSION_NOT_EXISTS);
|
}
|
}
|
|
private void validatePermissionNotExists(Collection<CrmPermissionCreateReqBO> createReqBOs) {
|
Set<Integer> bizTypes = convertSet(createReqBOs, CrmPermissionCreateReqBO::getBizType);
|
Set<Long> bizIds = convertSet(createReqBOs, CrmPermissionCreateReqBO::getBizId);
|
Set<Long> userIds = convertSet(createReqBOs, CrmPermissionCreateReqBO::getUserId);
|
Long count = permissionMapper.selectListByBiz(bizTypes, bizIds, userIds);
|
if (count > 0) {
|
throw exception(CRM_PERMISSION_CREATE_FAIL);
|
}
|
}
|
|
@Override
|
@Transactional(rollbackFor = Exception.class)
|
public void transferPermission(CrmPermissionTransferReqBO transferReqBO) {
|
// 1. 校验数据权限：是否是负责人，只有负责人才可以转移
|
CrmPermissionDO oldPermission = permissionMapper.selectByBizTypeAndBizIdByUserId(
|
transferReqBO.getBizType(), transferReqBO.getBizId(), transferReqBO.getUserId());
|
String bizTypeName = CrmBizTypeEnum.getNameByType(transferReqBO.getBizType());
|
if ((oldPermission == null || !isOwner(oldPermission.getLevel()))
|
&& !CrmPermissionUtils.isCrmAdmin()) { // 并且不是超管
|
throw exception(CRM_PERMISSION_DENIED, bizTypeName);
|
}
|
// 1.1 校验转移对象是否已经是该负责人
|
if (oldPermission != null && ObjUtil.equal(transferReqBO.getNewOwnerUserId(), oldPermission.getUserId())) {
|
throw exception(CRM_PERMISSION_MODEL_TRANSFER_FAIL_OWNER_USER_EXISTS, bizTypeName);
|
}
|
// 1.2 校验新负责人是否存在
|
adminUserApi.validateUserList(Collections.singletonList(transferReqBO.getNewOwnerUserId()));
|
|
// 2. 修改新负责人的权限
|
List<CrmPermissionDO> permissions = permissionMapper.selectByBizTypeAndBizId(
|
transferReqBO.getBizType(), transferReqBO.getBizId()); // 获得所有数据权限
|
CrmPermissionDO permission = CollUtil.findOne(permissions,
|
item -> ObjUtil.equal(item.getUserId(), transferReqBO.getNewOwnerUserId()));
|
if (permission == null) {
|
permissionMapper.insert(new CrmPermissionDO().setBizType(transferReqBO.getBizType())
|
.setBizId(transferReqBO.getBizId()).setUserId(transferReqBO.getNewOwnerUserId())
|
.setLevel(CrmPermissionLevelEnum.OWNER.getLevel()));
|
} else {
|
permissionMapper.updateById(new CrmPermissionDO().setId(permission.getId())
|
.setLevel(CrmPermissionLevelEnum.OWNER.getLevel()));
|
}
|
|
// 3. 修改老负责人的权限
|
if (transferReqBO.getOldOwnerPermissionLevel() != null) {
|
permissionMapper.updateById(new CrmPermissionDO().setId(oldPermission.getId())
|
.setLevel(transferReqBO.getOldOwnerPermissionLevel()));
|
} else {
|
permissionMapper.deleteById(oldPermission.getId());
|
}
|
}
|
|
@Override
|
@Transactional(rollbackFor = Exception.class)
|
public void deletePermission(Integer bizType, Long bizId, Integer level) {
|
// 校验存在
|
List<CrmPermissionDO> permissions = permissionMapper.selectListByBizTypeAndBizIdAndLevel(
|
bizType, bizId, level);
|
if (CollUtil.isEmpty(permissions)) {
|
throw exception(CRM_PERMISSION_NOT_EXISTS);
|
}
|
|
// 删除数据权限
|
permissionMapper.deleteByIds(convertSet(permissions, CrmPermissionDO::getId));
|
}
|
|
@Override
|
public void deletePermission(Integer bizType, Long bizId) {
|
int deletedCount = permissionMapper.deletePermission(bizType, bizId);
|
if (deletedCount == 0) {
|
throw exception(CRM_PERMISSION_NOT_EXISTS);
|
}
|
}
|
|
@Override
|
public void deletePermissionBatch(Collection<Long> ids, Long userId) {
|
List<CrmPermissionDO> permissions = permissionMapper.selectByIds(ids);
|
if (CollUtil.isEmpty(permissions)) {
|
throw exception(CRM_PERMISSION_NOT_EXISTS);
|
}
|
// 校验：数据权限必须属于同一个业务类型、同一条业务数据
|
if (convertSet(permissions, CrmPermissionDO::getBizType).size() > 1
|
|| convertSet(permissions, CrmPermissionDO::getBizId).size() > 1) {
|
throw exception(CRM_PERMISSION_DELETE_FAIL);
|
}
|
// 负责人只能通过转移操作变更，不能直接移出团队
|
if (anyMatch(permissions, permission -> CrmPermissionLevelEnum.isOwner(permission.getLevel()))) {
|
throw exception(CRM_PERMISSION_DELETE_SELF_PERMISSION_FAIL_EXIST_OWNER);
|
}
|
|
Integer bizType = permissions.get(0).getBizType();
|
Long bizId = permissions.get(0).getBizId();
|
CrmPermissionDO operatorPermission = permissionMapper.selectByBizAndUserId(bizType, bizId, userId);
|
boolean isOwner = operatorPermission != null
|
&& CrmPermissionLevelEnum.isOwner(operatorPermission.getLevel());
|
if (!isOwner && !isSubordinateOwner(bizType, bizId, userId)) {
|
throw exception(CRM_PERMISSION_DELETE_DENIED);
|
}
|
|
// 删除数据权限
|
permissionMapper.deleteByIds(ids);
|
}
|
|
/** 当前用户的下属是否为该业务数据的负责人 */
|
private boolean isSubordinateOwner(Integer bizType, Long bizId, Long userId) {
|
Set<Long> subordinateUserIds = convertSet(adminUserApi.getUserListBySubordinate(userId), AdminUserRespDTO::getId);
|
if (CollUtil.isEmpty(subordinateUserIds)) {
|
return false;
|
}
|
return anyMatch(permissionMapper.selectByBizTypeAndBizId(bizType, bizId),
|
permission -> subordinateUserIds.contains(permission.getUserId())
|
&& CrmPermissionLevelEnum.isOwner(permission.getLevel()));
|
}
|
|
@Override
|
public void deleteSelfPermission(Long id, Long userId) {
|
// 校验数据存在且是自己
|
CrmPermissionDO permission = permissionMapper.selectByIdAndUserId(id, userId);
|
if (permission == null) {
|
throw exception(CRM_PERMISSION_NOT_EXISTS);
|
}
|
// 校验是否是负责人
|
if (CrmPermissionLevelEnum.isOwner(permission.getLevel())) {
|
throw exception(CRM_PERMISSION_DELETE_SELF_PERMISSION_FAIL_EXIST_OWNER);
|
}
|
|
// 删除
|
permissionMapper.deleteById(id);
|
}
|
|
@Override
|
public List<CrmPermissionDO> getPermissionListByBiz(Integer bizType, Long bizId) {
|
return permissionMapper.selectByBizTypeAndBizId(bizType, bizId);
|
}
|
|
@Override
|
public List<CrmPermissionDO> getPermissionListByBiz(Integer bizType, Collection<Long> bizIds) {
|
return permissionMapper.selectByBizTypeAndBizIds(bizType, bizIds);
|
}
|
|
@Override
|
public List<CrmPermissionDO> getPermissionListByBizTypeAndUserId(Integer bizType, Long userId) {
|
return permissionMapper.selectListByBizTypeAndUserId(bizType, userId);
|
}
|
|
@Override
|
public boolean hasPermission(Integer bizType, Long bizId, Long userId, CrmPermissionLevelEnum level) {
|
List<CrmPermissionDO> permissionList = permissionMapper.selectByBizTypeAndBizId(bizType, bizId);
|
return anyMatch(permissionList, permission ->
|
ObjUtil.equal(permission.getUserId(), userId) && ObjUtil.equal(permission.getLevel(), level.getLevel()));
|
}
|
|
public CrmPermissionDO hasAnyPermission(Integer bizType, Long bizId, Long userId) {
|
List<CrmPermissionDO> permissionList = permissionMapper.selectByBizTypeAndBizId(bizType, bizId);
|
return findFirst(permissionList, permission -> ObjUtil.equal(permission.getUserId(), userId));
|
}
|
|
}
|
