J2EE-OA管理系统 spring+struts2+hibernate

package com.oa.manager.impl; import java.util.ArrayList; import java.util.HashMap; import java.util.List; import java.util.Map; import java.util.Set; import org.springframework.orm.hibernate3.support.HibernateDaoSupport; import com.oa.manager.AclManager; import com.oa.model.ACL; import com.oa.model.Module; import com.oa.model.Permission; public class AclManagerImpl extends HibernateDaoSupport implements AclManager { //授权 public void addOrModifyPermission(String principalType, int principalSn, int resourceSn, int permission, boolean yes) { //根据主体标识和资源标识查找ACL实例 ACL acl = this.findAcl(principalType, principalSn, resourceSn); //如果存在ACL实例，则更新 if(acl != null) { acl.setPermission(permission, yes); this.getHibernateTemplate().update(acl); return; } //不存在ACL实例 acl = new ACL(); acl.setPrincipalType(principalType); acl.setPrincipalSn(principalSn); acl.setResourceSn(resourceSn); acl.setPermission(permission, yes); this.getHibernateTemplate().save(acl); } //设置用户的继承特性 //true表示继承，false表示不继承 public void addOrModifyUserExtends(int userId, int resourceSn, boolean yes) { //根据主体标识和资源标识查找ACL实例 ACL acl = this.findAcl(ACL.TYPE_USER, userId, resourceSn); //如果存在ACL实例，则更新 if(acl != null) { acl.setExtends(yes); this.getHibernateTemplate().update(acl); return; } //不存在ACL实例 acl = new ACL(); acl.setPrincipalType(ACL.TYPE_USER); acl.setPrincipalSn(userId); acl.setResourceSn(resourceSn); acl.setExtends(yes); this.getHibernateTemplate().save(acl); } //删除 public void deletePermission(String principalType, int principalSn, int resourceSn) { this.getHibernateTemplate().delete(this.findAcl(principalType, principalSn, resourceSn)); } //即时认证 @SuppressWarnings("unchecked") public boolean hasPermission(int userId, int resourceSn, int permission) { //查找直接授予用户的授权 ACL acl = this.findAcl(ACL.TYPE_USER, userId, resourceSn); if(acl != null) { int result = acl.getPermission(permission); if(result != ACL.ACL_NEUTRAL) { return result == ACL.ACL_YES ? true : false; } } //继续查找用户的角色授权 String hql = "select r.id from UsersRoles ur join ur.role r join ur.user u " + "where u.id = ? order by ur.orderNum"; List<Integer> aclIds = this.getHibernateTemplate().find(hql, userId); //依照角色优先级，查找ACL实例 for(int id : aclIds) { acl = this.findAcl(ACL.TYPE_USER, id, resourceSn); if(acl != null) { return acl.getPermission(permission) == ACL.ACL_YES ? true : false; } } return false; } public boolean hasPermissionByResourceSn(int userId, String sn, int permission){ String hql = "select m.id from Module m where m.sn = ?"; return this.hasPermission( userId, (Integer)this.getSession().createQuery(hql).setParameter(0, sn).uniqueResult(), permission); } @SuppressWarnings("unchecked") public List<Module> searchModules(int userId) { Map<Integer, ACL> temp = new HashMap<Integer, ACL>(); //根据优先级从低到高查找用户拥有的角色 String hql = "select r.id from UsersRoles ur join ur.role r join ur.user u " + "where u.id = ? order by ur.orderNum desc"; List<Integer> rIds = this.getHibernateTemplate().find(hql, userId); //依次获得角色的权限列表 for(int rId : rIds) { List<ACL> acls = this.findRoleACLs(rId); //把授权放入临时变量 for(ACL acl : acls) { temp.put(acl.getResourceSn(), acl); } } //查找直接授予用户的授权列表 List<ACL> acls = this.findUserAcls(userId); for(ACL acl : acls) { temp.put(acl.getResourceSn(), acl); } //已经获得用户所拥有的所有授权 //去掉没有读取权限的授权 //临时变量 List<Integer> delR = new ArrayList<Integer>(); Set<Map.Entry<Integer, ACL>> entries = temp.entrySet(); for(Map.Entry<Integer, ACL> entry : entries) { ACL acl = entry.getValue(); if(acl.getPermission(Permission.READ) == ACL.ACL_NO) { delR.add(entry.getKey()); } } for(Integer key : delR) { System.out.println(key); } //删除没有读取权限的授权 for(Integer key : delR) { temp.remove(key); } //判断 if(temp.isEmpty()) { return new ArrayList<Module>(); } String searchModules = "select m from Module m where m.id in (:ids)"; return this.getSession().createQuery(searchModules) .setParameterList("ids", temp.keySet()) .list(); } //根据用户查找直接授予用户的权限列表，返回元素是ACL实例（注意：若权限是继承的，则不应该包含在列表中） @SuppressWarnings({ "unchecked", "unused" }) private List<ACL> findUserAcls(int userId) { String hql = "select acl from ACL acl where acl.principalType = ? " + "and acl.principalSn = ? and acl.extendsState = 0"; return this.getHibernateTemplate().find(hql, new Object[]{ACL.TYPE_USER,userId}); } //根据角色查找角色的授权列表，返回列表的元素是：ACL @SuppressWarnings({ "unused", "unchecked" }) private List<ACL> findRoleACLs(int roleId) { String hql = "select acl from ACL acl where acl.principalType = ? " + "and acl.principalSn = ?"; return this.getHibernateTemplate().find(hql, new Object[]{ACL.TYPE_ROLE,roleId}); } //查找符合条件的ACL实例 private ACL findAcl(String principalType, int principalSn, int resourceSn) { return (ACL)this.getSession().createQuery( "select acl from ACL acl where acl.principalType = ? " + "and acl.principalSn = ? and acl.resourceSn = ?") .setParameter(0, principalType) .setParameter(1, principalSn) .setParameter(2, resourceSn) .uniqueResult(); } public List<?> searchAclRecord(String principalType, int principalSn) { String sql = "select resourceSn,aclState&1,aclState&2," + "aclState&4,aclState&8,extendsState " + "from t_acl where principalType = '"+principalType + "' and principalSn = "+principalSn; return this.getSession().createSQLQuery(sql).list(); } }