From 4bc513be11e671caf20ec6013a51dee42c2ed96e Mon Sep 17 00:00:00 2001
From: liu <2021943741@qq.com>
Date: 星期六, 07 十一月 2026 18:31:26 +0800
Subject: [PATCH] fix(crm): 禁止物料类合同开票
---
yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java | 106 ++++++++++++++++++++++++++++++++++++++++++++++++----
1 files changed, 97 insertions(+), 9 deletions(-)
diff --git a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
index 0563af0..8044f25 100644
--- a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
+++ b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
@@ -27,13 +27,26 @@
public class CrmPermissionUtils {
/**
- * 鏍￠獙鐢ㄦ埛鏄惁鏄� CRM 绠＄悊鍛�
+ * 鏍￠獙鐢ㄦ埛鏄惁鏄� CRM 绠＄悊鍛橈紙CRM 绠＄悊鍛樻垨绯荤粺瓒呯骇绠＄悊鍛橈級
+ *
+ * 瓒呯骇绠＄悊鍛橈紙super_admin锛変笉鍙� CRM 鏁版嵁鏉冮檺闄愬埗锛屽彲浠ユ煡鐪嬪叏閮ㄦ暟鎹�
*
* @return 鏄�/鍚�
*/
public static boolean isCrmAdmin() {
PermissionCommonApi permissionApi = SpringUtil.getBean(PermissionCommonApi.class);
- return permissionApi.hasAnyRoles(getLoginUserId(), RoleCodeEnum.CRM_ADMIN.getCode());
+ return permissionApi.hasAnyRoles(getLoginUserId(),
+ RoleCodeEnum.CRM_ADMIN.getCode(), RoleCodeEnum.SUPER_ADMIN.getCode());
+ }
+
+ /**
+ * 鏍￠獙鐢ㄦ埛鏄惁鏈夋煡鐪嬪叏閮ㄥ鎴风殑鏉冮檺
+ *
+ * @return 鏄�/鍚�
+ */
+ private static boolean hasCustomerViewAllPermission() {
+ PermissionCommonApi permissionApi = SpringUtil.getBean(PermissionCommonApi.class);
+ return permissionApi.hasAnyPermissions(getLoginUserId(), "crm:customer:view-all");
}
/**
@@ -47,6 +60,10 @@
*/
public static <T extends MPJLambdaWrapper<?>, S> void appendPermissionCondition(T query, Integer bizType, SFunction<S, ?> bizId,
Long userId, Integer sceneType) {
+ // 鐗规畩閫昏緫锛欳RM 绠＄悊鍛� / 瓒呯骇绠＄悊鍛樼洿鎺ユ煡璇㈡墍鏈夛紝涓嶈繃婊ゆ暟鎹潈闄�
+ if (isCrmAdmin()) {
+ return;
+ }
MybatisPlusJoinProperties mybatisPlusJoinProperties = SpringUtil.getBean(MybatisPlusJoinProperties.class);
final String ownerUserIdField = mybatisPlusJoinProperties.getTableAlias() + ".owner_user_id";
// 鍦烘櫙涓�锛氭垜璐熻矗鐨勬暟鎹�
@@ -55,14 +72,17 @@
}
// 鍦烘櫙浜岋細鎴戝弬涓庣殑鏁版嵁锛堟垜鏈夎鎴栧啓鏉冮檺锛屽苟涓斾笉鏄礋璐ｄ汉锛�
if (CrmSceneTypeEnum.isInvolved(sceneType)) {
- if (CrmPermissionUtils.isCrmAdmin()) { // 鐗规畩閫昏緫锛氬鏋滄槸瓒呯锛岀洿鎺ユ煡璇㈡墍鏈夛紝涓嶈繃婊ゆ暟鎹潈闄�
- return;
+ // 闇�瑕佺户鎵垮鎴峰洟闃熺殑妯″潡锛氭暟鎹嚜韬洟闃� 鈭� 瀹㈡埛璐熻矗浜�/瀹㈡埛鍥㈤槦
+ String tableName = getInheritCustomerTeamTable(bizType);
+ if (tableName != null) {
+ appendCustomerInheritedPermissionCondition(query, bizType, tableName, userId, ownerUserIdField);
+ } else {
+ query.innerJoin(CrmPermissionDO.class, on -> on.eq(CrmPermissionDO::getBizType, bizType)
+ .eq(CrmPermissionDO::getBizId, bizId)
+ .in(CrmPermissionDO::getLevel, CrmPermissionLevelEnum.READ.getLevel(), CrmPermissionLevelEnum.WRITE.getLevel())
+ .eq(CrmPermissionDO::getUserId, userId));
+ query.ne(ownerUserIdField, userId);
}
- query.innerJoin(CrmPermissionDO.class, on -> on.eq(CrmPermissionDO::getBizType, bizType)
- .eq(CrmPermissionDO::getBizId, bizId)
- .in(CrmPermissionDO::getLevel, CrmPermissionLevelEnum.READ.getLevel(), CrmPermissionLevelEnum.WRITE.getLevel())
- .eq(CrmPermissionDO::getUserId,userId));
- query.ne(ownerUserIdField, userId);
}
// 鍦烘櫙涓夛細涓嬪睘璐熻矗鐨勬暟鎹紙涓嬪睘鏄礋璐ｄ汉锛�
if (CrmSceneTypeEnum.isSubordinate(sceneType)) {
@@ -74,6 +94,74 @@
query.in(ownerUserIdField, convertSet(subordinateUsers, AdminUserRespDTO::getId));
}
}
+ // 鍦烘櫙鍥涳細鍏ㄩ儴鏁版嵁锛堥渶瑕佹湁 view-all 鏉冮檺鎴� CRM 绠＄悊鍛橈級
+ if (CrmSceneTypeEnum.isAll(sceneType)) {
+ if (isCrmAdmin() || hasCustomerViewAllPermission()) {
+ return; // 璺宠繃杩囨护锛屾煡鐪嬪叏閮�
+ }
+ // 鏃犳潈闄愬垯闄嶇骇涓�"鎴戣礋璐ｇ殑"
+ query.eq(ownerUserIdField, userId);
+ }
+ }
+
+ /**
+ * 鑾峰緱銆岀户鎵垮鎴峰洟闃熴�嶇殑涓氬姟琛ㄥ悕锛涗笉闇�瑕佺户鎵跨殑杩斿洖 null
+ *
+ * 鐩墠缁熶竴涓猴細鑱旂郴浜恒�佸晢鏈恒�佸悎鍚屻�侀攢鍞姤浠枫�佸洖娆俱�佸洖娆捐鍒掋�佸紑绁�
+ */
+ private static String getInheritCustomerTeamTable(Integer bizType) {
+ if (CrmBizTypeEnum.CRM_CONTACT.getType().equals(bizType)) {
+ return "crm_contact";
+ }
+ if (CrmBizTypeEnum.CRM_BUSINESS.getType().equals(bizType)) {
+ return "crm_business";
+ }
+ if (CrmBizTypeEnum.CRM_CONTRACT.getType().equals(bizType)) {
+ return "crm_contract";
+ }
+ if (CrmBizTypeEnum.CRM_SALE_QUOTATION.getType().equals(bizType)) {
+ return "crm_sale_quotation";
+ }
+ if (CrmBizTypeEnum.CRM_RECEIVABLE.getType().equals(bizType)) {
+ return "crm_receivable";
+ }
+ if (CrmBizTypeEnum.CRM_RECEIVABLE_PLAN.getType().equals(bizType)) {
+ return "crm_receivable_plan";
+ }
+ if (CrmBizTypeEnum.CRM_INVOICE.getType().equals(bizType)) {
+ return "crm_invoice";
+ }
+ return null;
+ }
+
+ /**
+ * 缁ф壙瀹㈡埛鍥㈤槦鐨勬暟鎹潈闄愶細鏁版嵁鑷韩鍥㈤槦 鈭� 瀹㈡埛璐熻矗浜�/瀹㈡埛鍥㈤槦
+ *
+ * @param query 杩炶〃鏌ヨ瀵硅薄
+ * @param bizType 鏁版嵁绫诲瀷
+ * @param tableName 涓氬姟琛ㄥ悕
+ * @param userId 鐢ㄦ埛缂栧彿
+ * @param ownerUserIdField 璐熻矗浜哄瓧娈�
+ */
+ private static <T extends MPJLambdaWrapper<?>> void appendCustomerInheritedPermissionCondition(
+ T query, Integer bizType, String tableName, Long userId, String ownerUserIdField) {
+ // 瀛愭煡璇�1锛氭暟鎹嚜韬殑鍥㈤槦鎴愬憳鏉冮檺
+ String subQuery1 = "(SELECT p1.biz_id FROM crm_permission p1 " +
+ "WHERE p1.biz_type = " + bizType + " " +
+ "AND p1.level IN (" + CrmPermissionLevelEnum.OWNER.getLevel() + "," +
+ CrmPermissionLevelEnum.READ.getLevel() + "," + CrmPermissionLevelEnum.WRITE.getLevel() + ") " +
+ "AND p1.user_id = " + userId + " AND p1.deleted = 0)";
+ // 瀛愭煡璇�2锛氭墍灞炲鎴风殑璐熻矗浜� + 鍥㈤槦鎴愬憳
+ // 娉ㄦ剰锛氫互 crm_customer.owner_user_id 涓哄噯锛屽吋瀹规潈闄愯〃涓礋璐ｄ汉璁板綍缂哄け/涓嶄竴鑷寸殑鍘嗗彶鏁版嵁
+ String subQuery2 = "(SELECT x.id FROM " + tableName + " x " +
+ "INNER JOIN crm_customer cu ON cu.id = x.customer_id AND cu.deleted = 0 " +
+ "WHERE x.deleted = 0 AND (cu.owner_user_id = " + userId +
+ " OR EXISTS (SELECT 1 FROM crm_permission p2 " +
+ "WHERE p2.biz_type = " + CrmBizTypeEnum.CRM_CUSTOMER.getType() + " " +
+ "AND p2.biz_id = x.customer_id AND p2.user_id = " + userId + " AND p2.deleted = 0)))";
+ // 浣跨敤 OR 杩炴帴涓や釜瀛愭煡璇紝骞舵帓闄よ嚜宸辨槸璐熻矗浜虹殑鎯呭喌
+ query.apply("t.id IN (" + subQuery1 + " UNION " + subQuery2 + ")")
+ .ne(ownerUserIdField, userId);
}
}
--
Gitblit v1.9.3