120 lines
2.9 KiB
Plaintext
120 lines
2.9 KiB
Plaintext
package com.bonus.sys;
|
||
|
||
import java.util.List;
|
||
|
||
import javax.servlet.http.HttpServletRequest;
|
||
|
||
import org.apache.commons.lang3.StringUtils;
|
||
import org.slf4j.Logger;
|
||
import org.slf4j.LoggerFactory;
|
||
import org.springframework.beans.factory.annotation.Autowired;
|
||
import org.springframework.web.context.request.RequestContextHolder;
|
||
import org.springframework.web.context.request.ServletRequestAttributes;
|
||
import org.springframework.web.servlet.ModelAndView;
|
||
|
||
import com.bonus.core.UUIDHelper;
|
||
import com.bonus.sys.beans.ResourcesBean;
|
||
import com.bonus.sys.service.ResourcesService;
|
||
|
||
public class BaseController<T> {
|
||
|
||
protected Logger logger = LoggerFactory.getLogger(this.getClass());
|
||
|
||
@Autowired
|
||
public ResourcesService resourcesService;
|
||
|
||
/**
|
||
* 得到ModelAndView
|
||
*/
|
||
public ModelAndView getModelAndView() {
|
||
return new ModelAndView();
|
||
}
|
||
|
||
public AjaxRes getAjaxRes() {
|
||
return new AjaxRes();
|
||
}
|
||
|
||
/**
|
||
* 得到32位的uuid
|
||
* @return
|
||
*/
|
||
public String get32UUID(){
|
||
return UUIDHelper.get32UUID();
|
||
}
|
||
|
||
|
||
/**
|
||
* 得到PageData
|
||
*/
|
||
public PageData getPageData() {
|
||
return new PageData(this.getRequest());
|
||
}
|
||
|
||
/**
|
||
* 得到request对象
|
||
*/
|
||
public HttpServletRequest getRequest() {
|
||
HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder
|
||
.getRequestAttributes()).getRequest();
|
||
return request;
|
||
}
|
||
|
||
/**
|
||
* 资源的权限（URl级别）
|
||
*
|
||
* @param type
|
||
* 资源类别(优化速度)
|
||
* @return
|
||
*/
|
||
protected boolean doSecurityIntercept(String type) {
|
||
try {
|
||
String servletPath = getRequest().getServletPath();
|
||
servletPath = StringUtils.substringBeforeLast(servletPath, ".");// 去掉后面的后缀
|
||
int userId = UserShiroHelper.getCurrentUser().getId();
|
||
List<ResourcesBean> authorized = resourcesService.resAuthorized(userId,
|
||
type);
|
||
for (ResourcesBean r : authorized) {
|
||
if (r != null && StringUtils.isNotBlank(r.getUrl())) {
|
||
if (StringUtils.equals(r.getUrl(), servletPath)) {
|
||
return true;
|
||
}
|
||
}
|
||
}
|
||
} catch (Exception e) {
|
||
logger.error(e.toString(), e);
|
||
}
|
||
return false;
|
||
}
|
||
|
||
/**
|
||
* 资源的权限（URl级别,拥有第一级资源权限，这资源才能访问）
|
||
*
|
||
* @param type
|
||
* 资源类别(优化速度)
|
||
* @param url
|
||
* 第一级资源
|
||
* @return
|
||
*/
|
||
|
||
protected boolean doSecurityIntercept(String type, String url) {
|
||
try {
|
||
int userId = UserShiroHelper.getCurrentUser().getId();
|
||
List<ResourcesBean> authorized = resourcesService.resAuthorized(
|
||
userId, type);
|
||
logger.debug("authorized=" + authorized + ",type=" + type
|
||
+ ",userId=" + userId + ",url=" + url);
|
||
for (ResourcesBean r : authorized) {
|
||
if (r != null && StringUtils.isNotBlank(r.getUrl())) {
|
||
if (StringUtils.equals(r.getUrl(), url)) {
|
||
return true;
|
||
}
|
||
}
|
||
}
|
||
} catch (Exception e) {
|
||
logger.error(e.toString(), e);
|
||
}
|
||
return false;
|
||
}
|
||
|
||
}
|