From 111270df037596a04df97f787ca8b9199dd99866 Mon Sep 17 00:00:00 2001
From: 云 <2163098428@qq.com>
Date: 星期一, 20 七月 2026 17:28:31 +0800
Subject: [PATCH] feat(crm): 增加商机客户团队权限校验功能
---
yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java | 38 +++++++++++++++++++++++++++++++++-----
1 files changed, 33 insertions(+), 5 deletions(-)
diff --git a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
index 0563af0..c97266b 100644
--- a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
+++ b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
@@ -58,11 +58,16 @@
if (CrmPermissionUtils.isCrmAdmin()) { // 鐗规畩閫昏緫锛氬鏋滄槸瓒呯锛岀洿鎺ユ煡璇㈡墍鏈夛紝涓嶈繃婊ゆ暟鎹潈闄�
return;
}
- query.innerJoin(CrmPermissionDO.class, on -> on.eq(CrmPermissionDO::getBizType, bizType)
- .eq(CrmPermissionDO::getBizId, bizId)
- .in(CrmPermissionDO::getLevel, CrmPermissionLevelEnum.READ.getLevel(), CrmPermissionLevelEnum.WRITE.getLevel())
- .eq(CrmPermissionDO::getUserId,userId));
- query.ne(ownerUserIdField, userId);
+ // 鍟嗘満鐗规畩澶勭悊锛氬悓鏃跺叧鑱斿晢鏈哄洟闃熷拰瀹㈡埛鍥㈤槦鐨勬潈闄�
+ if (CrmBizTypeEnum.CRM_BUSINESS.getType().equals(bizType)) {
+ appendBusinessPermissionCondition(query, bizId, userId, ownerUserIdField);
+ } else {
+ query.innerJoin(CrmPermissionDO.class, on -> on.eq(CrmPermissionDO::getBizType, bizType)
+ .eq(CrmPermissionDO::getBizId, bizId)
+ .in(CrmPermissionDO::getLevel, CrmPermissionLevelEnum.READ.getLevel(), CrmPermissionLevelEnum.WRITE.getLevel())
+ .eq(CrmPermissionDO::getUserId, userId));
+ query.ne(ownerUserIdField, userId);
+ }
}
// 鍦烘櫙涓夛細涓嬪睘璐熻矗鐨勬暟鎹紙涓嬪睘鏄礋璐ｄ汉锛�
if (CrmSceneTypeEnum.isSubordinate(sceneType)) {
@@ -76,4 +81,27 @@
}
}
+ /**
+ * 鍟嗘満鐗规畩鏉冮檺鏉′欢锛氬悓鏃跺叧鑱斿晢鏈哄洟闃熷拰瀹㈡埛鍥㈤槦鐨勬潈闄�
+ * 鍟嗘満缁ф壙瀹㈡埛鍥㈤槦鐨勬潈闄愶紝鍗冲鎴峰洟闃熸垚鍛樹篃鑳界湅鍒拌瀹㈡埛涓嬬殑鍟嗘満
+ */
+ private static <T extends MPJLambdaWrapper<?>, S> void appendBusinessPermissionCondition(T query, SFunction<S, ?> bizId,
+ Long userId, String ownerUserIdField) {
+ // 浣跨敤瀛愭煡璇㈡柟寮忥細鍟嗘満鍥㈤槦鎴愬憳 OR 瀹㈡埛鍥㈤槦鎴愬憳
+ // 瀛愭煡璇�1锛氬晢鏈哄洟闃熸垚鍛樻潈闄�
+ String subQuery1 = "(SELECT p1.biz_id FROM crm_permission p1 " +
+ "WHERE p1.biz_type = " + CrmBizTypeEnum.CRM_BUSINESS.getType() + " " +
+ "AND p1.level IN (" + CrmPermissionLevelEnum.READ.getLevel() + "," + CrmPermissionLevelEnum.WRITE.getLevel() + ") " +
+ "AND p1.user_id = " + userId + ")";
+ // 瀛愭煡璇�2锛氬鎴峰洟闃熸垚鍛樻潈闄愶紙閫氳繃鍟嗘満鐨� customer_id 鍏宠仈锛�
+ String subQuery2 = "(SELECT b.id FROM crm_business b " +
+ "INNER JOIN crm_permission p2 ON p2.biz_type = " + CrmBizTypeEnum.CRM_CUSTOMER.getType() + " " +
+ "AND p2.biz_id = b.customer_id " +
+ "AND p2.level IN (" + CrmPermissionLevelEnum.READ.getLevel() + "," + CrmPermissionLevelEnum.WRITE.getLevel() + ") " +
+ "AND p2.user_id = " + userId + ")";
+ // 浣跨敤 OR 杩炴帴涓や釜瀛愭煡璇紝骞舵帓闄よ嚜宸辨槸璐熻矗浜虹殑鎯呭喌
+ query.apply("t.id IN (" + subQuery1 + " UNION " + subQuery2 + ")")
+ .ne(ownerUserIdField, userId);
+ }
+
}
--
Gitblit v1.9.3