优化多角色数据权限匹配规则

RuoYi

2022-08-21 a36dc6635f92b1a6a5ea43c801f028dea08a7f0b

 src/main/java/com/ruoyi/framework/aspectj/DataScopeAspect.java

@@ -10,6 +10,7 @@
import com.ruoyi.common.utils.StringUtils;

import com.ruoyi.framework.aspectj.lang.annotation.DataScope;

import com.ruoyi.framework.security.LoginUser;

import com.ruoyi.framework.security.context.PermissionContextHolder;

import com.ruoyi.framework.web.domain.BaseEntity;

import com.ruoyi.project.system.domain.SysRole;

import com.ruoyi.project.system.domain.SysUser;

@@ -70,8 +71,9 @@
            // 如果是超级管理员，则不过滤数据

            if (StringUtils.isNotNull(currentUser) && !currentUser.isAdmin())

            {

                String permission = StringUtils.defaultIfEmpty(controllerDataScope.permission(), PermissionContextHolder.getContext());

                dataScopeFilter(joinPoint, currentUser, controllerDataScope.deptAlias(),

                        controllerDataScope.userAlias());

                        controllerDataScope.userAlias(), permission);

            }

        }

    }

@@ -83,8 +85,9 @@
     * @param user 用户

     * @param deptAlias 部门别名

     * @param userAlias 用户别名

     * @param permission 权限字符

     */

    public static void dataScopeFilter(JoinPoint joinPoint, SysUser user, String deptAlias, String userAlias)

    public static void dataScopeFilter(JoinPoint joinPoint, SysUser user, String deptAlias, String userAlias, String permission)

    {

        StringBuilder sqlString = new StringBuilder();

        List<String> conditions = new ArrayList<String>();

@@ -96,6 +99,10 @@
            {

                continue;

            }

            if (StringUtils.isNotEmpty(permission) && StringUtils.isNotEmpty(role.getPermissions()) && !role.getPermissions().contains(permission))

            {

                continue;

            }

            if (DATA_SCOPE_ALL.equals(dataScope))

            {

                sqlString = new StringBuilder();