From 8ad99e5f72085d14fd56e8faa7aa36701823c8b5 Mon Sep 17 00:00:00 2001
From: liu <2021943741@qq.com>
Date: 星期四, 05 十一月 2026 20:16:23 +0800
Subject: [PATCH] feat(crm): 统一客户团队数据权限并放开开票金额上限
---
yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java | 88 ++++++++++++++++++++++++++++++++-----------
1 files changed, 65 insertions(+), 23 deletions(-)
diff --git a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
index 24740c9..8044f25 100644
--- a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
+++ b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/util/CrmPermissionUtils.java
@@ -27,13 +27,16 @@
public class CrmPermissionUtils {
/**
- * 鏍￠獙鐢ㄦ埛鏄惁鏄� CRM 绠＄悊鍛�
+ * 鏍￠獙鐢ㄦ埛鏄惁鏄� CRM 绠＄悊鍛橈紙CRM 绠＄悊鍛樻垨绯荤粺瓒呯骇绠＄悊鍛橈級
+ *
+ * 瓒呯骇绠＄悊鍛橈紙super_admin锛変笉鍙� CRM 鏁版嵁鏉冮檺闄愬埗锛屽彲浠ユ煡鐪嬪叏閮ㄦ暟鎹�
*
* @return 鏄�/鍚�
*/
public static boolean isCrmAdmin() {
PermissionCommonApi permissionApi = SpringUtil.getBean(PermissionCommonApi.class);
- return permissionApi.hasAnyRoles(getLoginUserId(), RoleCodeEnum.CRM_ADMIN.getCode());
+ return permissionApi.hasAnyRoles(getLoginUserId(),
+ RoleCodeEnum.CRM_ADMIN.getCode(), RoleCodeEnum.SUPER_ADMIN.getCode());
}
/**
@@ -57,6 +60,10 @@
*/
public static <T extends MPJLambdaWrapper<?>, S> void appendPermissionCondition(T query, Integer bizType, SFunction<S, ?> bizId,
Long userId, Integer sceneType) {
+ // 鐗规畩閫昏緫锛欳RM 绠＄悊鍛� / 瓒呯骇绠＄悊鍛樼洿鎺ユ煡璇㈡墍鏈夛紝涓嶈繃婊ゆ暟鎹潈闄�
+ if (isCrmAdmin()) {
+ return;
+ }
MybatisPlusJoinProperties mybatisPlusJoinProperties = SpringUtil.getBean(MybatisPlusJoinProperties.class);
final String ownerUserIdField = mybatisPlusJoinProperties.getTableAlias() + ".owner_user_id";
// 鍦烘櫙涓�锛氭垜璐熻矗鐨勬暟鎹�
@@ -65,12 +72,10 @@
}
// 鍦烘櫙浜岋細鎴戝弬涓庣殑鏁版嵁锛堟垜鏈夎鎴栧啓鏉冮檺锛屽苟涓斾笉鏄礋璐ｄ汉锛�
if (CrmSceneTypeEnum.isInvolved(sceneType)) {
- if (CrmPermissionUtils.isCrmAdmin()) { // 鐗规畩閫昏緫锛氬鏋滄槸瓒呯锛岀洿鎺ユ煡璇㈡墍鏈夛紝涓嶈繃婊ゆ暟鎹潈闄�
- return;
- }
- // 鍟嗘満鐗规畩澶勭悊锛氬悓鏃跺叧鑱斿晢鏈哄洟闃熷拰瀹㈡埛鍥㈤槦鐨勬潈闄�
- if (CrmBizTypeEnum.CRM_BUSINESS.getType().equals(bizType)) {
- appendBusinessPermissionCondition(query, bizId, userId, ownerUserIdField);
+ // 闇�瑕佺户鎵垮鎴峰洟闃熺殑妯″潡锛氭暟鎹嚜韬洟闃� 鈭� 瀹㈡埛璐熻矗浜�/瀹㈡埛鍥㈤槦
+ String tableName = getInheritCustomerTeamTable(bizType);
+ if (tableName != null) {
+ appendCustomerInheritedPermissionCondition(query, bizType, tableName, userId, ownerUserIdField);
} else {
query.innerJoin(CrmPermissionDO.class, on -> on.eq(CrmPermissionDO::getBizType, bizType)
.eq(CrmPermissionDO::getBizId, bizId)
@@ -100,23 +105,60 @@
}
/**
- * 鍟嗘満鐗规畩鏉冮檺鏉′欢锛氬悓鏃跺叧鑱斿晢鏈哄洟闃熷拰瀹㈡埛鍥㈤槦鐨勬潈闄�
- * 鍟嗘満缁ф壙瀹㈡埛鍥㈤槦鐨勬潈闄愶紝鍗冲鎴峰洟闃熸垚鍛樹篃鑳界湅鍒拌瀹㈡埛涓嬬殑鍟嗘満
+ * 鑾峰緱銆岀户鎵垮鎴峰洟闃熴�嶇殑涓氬姟琛ㄥ悕锛涗笉闇�瑕佺户鎵跨殑杩斿洖 null
+ *
+ * 鐩墠缁熶竴涓猴細鑱旂郴浜恒�佸晢鏈恒�佸悎鍚屻�侀攢鍞姤浠枫�佸洖娆俱�佸洖娆捐鍒掋�佸紑绁�
*/
- private static <T extends MPJLambdaWrapper<?>, S> void appendBusinessPermissionCondition(T query, SFunction<S, ?> bizId,
- Long userId, String ownerUserIdField) {
- // 浣跨敤瀛愭煡璇㈡柟寮忥細鍟嗘満鍥㈤槦鎴愬憳 OR 瀹㈡埛鍥㈤槦鎴愬憳
- // 瀛愭煡璇�1锛氬晢鏈哄洟闃熸垚鍛樻潈闄�
+ private static String getInheritCustomerTeamTable(Integer bizType) {
+ if (CrmBizTypeEnum.CRM_CONTACT.getType().equals(bizType)) {
+ return "crm_contact";
+ }
+ if (CrmBizTypeEnum.CRM_BUSINESS.getType().equals(bizType)) {
+ return "crm_business";
+ }
+ if (CrmBizTypeEnum.CRM_CONTRACT.getType().equals(bizType)) {
+ return "crm_contract";
+ }
+ if (CrmBizTypeEnum.CRM_SALE_QUOTATION.getType().equals(bizType)) {
+ return "crm_sale_quotation";
+ }
+ if (CrmBizTypeEnum.CRM_RECEIVABLE.getType().equals(bizType)) {
+ return "crm_receivable";
+ }
+ if (CrmBizTypeEnum.CRM_RECEIVABLE_PLAN.getType().equals(bizType)) {
+ return "crm_receivable_plan";
+ }
+ if (CrmBizTypeEnum.CRM_INVOICE.getType().equals(bizType)) {
+ return "crm_invoice";
+ }
+ return null;
+ }
+
+ /**
+ * 缁ф壙瀹㈡埛鍥㈤槦鐨勬暟鎹潈闄愶細鏁版嵁鑷韩鍥㈤槦 鈭� 瀹㈡埛璐熻矗浜�/瀹㈡埛鍥㈤槦
+ *
+ * @param query 杩炶〃鏌ヨ瀵硅薄
+ * @param bizType 鏁版嵁绫诲瀷
+ * @param tableName 涓氬姟琛ㄥ悕
+ * @param userId 鐢ㄦ埛缂栧彿
+ * @param ownerUserIdField 璐熻矗浜哄瓧娈�
+ */
+ private static <T extends MPJLambdaWrapper<?>> void appendCustomerInheritedPermissionCondition(
+ T query, Integer bizType, String tableName, Long userId, String ownerUserIdField) {
+ // 瀛愭煡璇�1锛氭暟鎹嚜韬殑鍥㈤槦鎴愬憳鏉冮檺
String subQuery1 = "(SELECT p1.biz_id FROM crm_permission p1 " +
- "WHERE p1.biz_type = " + CrmBizTypeEnum.CRM_BUSINESS.getType() + " " +
- "AND p1.level IN (" + CrmPermissionLevelEnum.READ.getLevel() + "," + CrmPermissionLevelEnum.WRITE.getLevel() + ") " +
- "AND p1.user_id = " + userId + ")";
- // 瀛愭煡璇�2锛氬鎴峰洟闃熸垚鍛樻潈闄愶紙閫氳繃鍟嗘満鐨� customer_id 鍏宠仈锛�
- String subQuery2 = "(SELECT b.id FROM crm_business b " +
- "INNER JOIN crm_permission p2 ON p2.biz_type = " + CrmBizTypeEnum.CRM_CUSTOMER.getType() + " " +
- "AND p2.biz_id = b.customer_id " +
- "AND p2.level IN (" + CrmPermissionLevelEnum.READ.getLevel() + "," + CrmPermissionLevelEnum.WRITE.getLevel() + ") " +
- "AND p2.user_id = " + userId + ")";
+ "WHERE p1.biz_type = " + bizType + " " +
+ "AND p1.level IN (" + CrmPermissionLevelEnum.OWNER.getLevel() + "," +
+ CrmPermissionLevelEnum.READ.getLevel() + "," + CrmPermissionLevelEnum.WRITE.getLevel() + ") " +
+ "AND p1.user_id = " + userId + " AND p1.deleted = 0)";
+ // 瀛愭煡璇�2锛氭墍灞炲鎴风殑璐熻矗浜� + 鍥㈤槦鎴愬憳
+ // 娉ㄦ剰锛氫互 crm_customer.owner_user_id 涓哄噯锛屽吋瀹规潈闄愯〃涓礋璐ｄ汉璁板綍缂哄け/涓嶄竴鑷寸殑鍘嗗彶鏁版嵁
+ String subQuery2 = "(SELECT x.id FROM " + tableName + " x " +
+ "INNER JOIN crm_customer cu ON cu.id = x.customer_id AND cu.deleted = 0 " +
+ "WHERE x.deleted = 0 AND (cu.owner_user_id = " + userId +
+ " OR EXISTS (SELECT 1 FROM crm_permission p2 " +
+ "WHERE p2.biz_type = " + CrmBizTypeEnum.CRM_CUSTOMER.getType() + " " +
+ "AND p2.biz_id = x.customer_id AND p2.user_id = " + userId + " AND p2.deleted = 0)))";
// 浣跨敤 OR 杩炴帴涓や釜瀛愭煡璇紝骞舵帓闄よ嚜宸辨槸璐熻矗浜虹殑鎯呭喌
query.apply("t.id IN (" + subQuery1 + " UNION " + subQuery2 + ")")
.ne(ownerUserIdField, userId);
--
Gitblit v1.9.3