| | |
| | | package com.ruoyi.framework.aspectj;
|
| | |
|
| | | import java.lang.reflect.Method;
|
| | | import org.aspectj.lang.JoinPoint;
|
| | | import org.aspectj.lang.Signature;
|
| | | import org.aspectj.lang.annotation.Aspect;
|
| | | import org.aspectj.lang.annotation.Before;
|
| | | import org.aspectj.lang.annotation.Pointcut;
|
| | | import org.aspectj.lang.reflect.MethodSignature;
|
| | | import org.springframework.stereotype.Component;
|
| | | import com.ruoyi.common.utils.ServletUtils;
|
| | | import com.ruoyi.common.utils.SecurityUtils;
|
| | | import com.ruoyi.common.utils.StringUtils;
|
| | | import com.ruoyi.common.utils.spring.SpringUtils;
|
| | | import com.ruoyi.framework.aspectj.lang.annotation.DataScope;
|
| | | import com.ruoyi.framework.security.LoginUser;
|
| | | import com.ruoyi.framework.security.service.TokenService;
|
| | | import com.ruoyi.framework.web.domain.BaseEntity;
|
| | | import com.ruoyi.project.system.domain.SysRole;
|
| | | import com.ruoyi.project.system.domain.SysUser;
|
| | |
|
| | | /**
|
| | | * 数据过滤处理
|
| | | * |
| | | *
|
| | | * @author ruoyi
|
| | | */
|
| | | @Aspect
|
| | |
| | | */
|
| | | public static final String DATA_SCOPE = "dataScope";
|
| | |
|
| | | // 配置织入点
|
| | | @Pointcut("@annotation(com.ruoyi.framework.aspectj.lang.annotation.DataScope)")
|
| | | public void dataScopePointCut()
|
| | | {
|
| | | }
|
| | |
|
| | | @Before("dataScopePointCut()")
|
| | | public void doBefore(JoinPoint point) throws Throwable
|
| | | @Before("@annotation(controllerDataScope)")
|
| | | public void doBefore(JoinPoint point, DataScope controllerDataScope) throws Throwable
|
| | | {
|
| | | clearDataScope(point);
|
| | | handleDataScope(point);
|
| | | handleDataScope(point, controllerDataScope);
|
| | | }
|
| | |
|
| | | protected void handleDataScope(final JoinPoint joinPoint)
|
| | | protected void handleDataScope(final JoinPoint joinPoint, DataScope controllerDataScope)
|
| | | {
|
| | | // 获得注解
|
| | | DataScope controllerDataScope = getAnnotationLog(joinPoint);
|
| | | if (controllerDataScope == null)
|
| | | {
|
| | | return;
|
| | | }
|
| | | // 获取当前的用户
|
| | | LoginUser loginUser = SpringUtils.getBean(TokenService.class).getLoginUser(ServletUtils.getRequest());
|
| | | LoginUser loginUser = SecurityUtils.getLoginUser();
|
| | | if (StringUtils.isNotNull(loginUser))
|
| | | {
|
| | | SysUser currentUser = loginUser.getUser();
|
| | |
| | |
|
| | | /**
|
| | | * 数据范围过滤
|
| | | * |
| | | *
|
| | | * @param joinPoint 切点
|
| | | * @param user 用户
|
| | | * @param alias 别名
|
| | | * @param userAlias 别名
|
| | | */
|
| | | public static void dataScopeFilter(JoinPoint joinPoint, SysUser user, String deptAlias, String userAlias)
|
| | | {
|
| | |
| | | else
|
| | | {
|
| | | // 数据权限为仅本人且没有userAlias别名不查询任何数据
|
| | | sqlString.append(" OR 1=0 ");
|
| | | sqlString.append(StringUtils.format(" OR {}.dept_id = 0 ", deptAlias));
|
| | | }
|
| | | }
|
| | | }
|
| | |
| | | baseEntity.getParams().put(DATA_SCOPE, " AND (" + sqlString.substring(4) + ")");
|
| | | }
|
| | | }
|
| | | }
|
| | |
|
| | | /**
|
| | | * 是否存在注解,如果存在就获取
|
| | | */
|
| | | private DataScope getAnnotationLog(JoinPoint joinPoint)
|
| | | {
|
| | | Signature signature = joinPoint.getSignature();
|
| | | MethodSignature methodSignature = (MethodSignature) signature;
|
| | | Method method = methodSignature.getMethod();
|
| | |
|
| | | if (method != null)
|
| | | {
|
| | | return method.getAnnotation(DataScope.class);
|
| | | }
|
| | | return null;
|
| | | }
|
| | |
|
| | | /**
|