|
|
|
|
@ -2,19 +2,11 @@ package cn.iocoder.yudao.module.crm.framework.core.aop;
|
|
|
|
|
|
|
|
|
|
import cn.hutool.core.collection.CollUtil;
|
|
|
|
|
import cn.hutool.core.util.ObjUtil;
|
|
|
|
|
import cn.iocoder.yudao.framework.common.core.KeyValue;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.dal.dataobject.business.CrmBusinessDO;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.dal.dataobject.contact.ContactDO;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.dal.dataobject.contract.ContractDO;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.dal.dataobject.customer.CrmCustomerDO;
|
|
|
|
|
import cn.iocoder.yudao.framework.web.core.util.WebFrameworkUtils;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.dal.dataobject.permission.CrmPermissionDO;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.framework.core.annotations.CrmPermission;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.framework.enums.CrmEnum;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.framework.enums.OperationTypeEnum;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.framework.vo.CrmTransferBaseVO;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.service.business.CrmBusinessService;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.service.contact.ContactService;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.service.contract.ContractService;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.service.customer.CrmCustomerService;
|
|
|
|
|
import cn.iocoder.yudao.module.crm.service.permission.CrmPermissionService;
|
|
|
|
|
import lombok.extern.slf4j.Slf4j;
|
|
|
|
|
import org.aspectj.lang.JoinPoint;
|
|
|
|
|
import org.aspectj.lang.annotation.Aspect;
|
|
|
|
|
@ -22,11 +14,11 @@ import org.aspectj.lang.annotation.Before;
|
|
|
|
|
import org.springframework.stereotype.Component;
|
|
|
|
|
|
|
|
|
|
import javax.annotation.Resource;
|
|
|
|
|
import java.util.Collection;
|
|
|
|
|
|
|
|
|
|
import static cn.iocoder.yudao.framework.common.exception.util.ServiceExceptionUtil.exception;
|
|
|
|
|
import static cn.iocoder.yudao.framework.common.util.json.JsonUtils.toJsonString;
|
|
|
|
|
import static cn.iocoder.yudao.module.crm.enums.ErrorCodeConstants.*;
|
|
|
|
|
import static cn.iocoder.yudao.module.crm.enums.ErrorCodeConstants.CRM_PERMISSION_DENIED;
|
|
|
|
|
import static cn.iocoder.yudao.module.crm.enums.ErrorCodeConstants.CRM_PERMISSION_MODEL_NOT_EXISTS;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Crm 数据权限校验 AOP 切面
|
|
|
|
|
@ -38,48 +30,16 @@ import static cn.iocoder.yudao.module.crm.enums.ErrorCodeConstants.*;
|
|
|
|
|
@Slf4j
|
|
|
|
|
public class CrmPermissionAspect {
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* 用户编号
|
|
|
|
|
*/
|
|
|
|
|
private static final ThreadLocal<Long> USER_ID = new ThreadLocal<>();
|
|
|
|
|
/**
|
|
|
|
|
* 用户类型
|
|
|
|
|
*/
|
|
|
|
|
private static final ThreadLocal<Integer> USER_TYPE = new ThreadLocal<>();
|
|
|
|
|
/**
|
|
|
|
|
* 操作数据编号
|
|
|
|
|
*/
|
|
|
|
|
private static final ThreadLocal<Long> DATA_ID = new ThreadLocal<>();
|
|
|
|
|
/**
|
|
|
|
|
* Crm 转换数据 VO 数据
|
|
|
|
|
*/
|
|
|
|
|
private static final ThreadLocal<CrmTransferBaseVO> CRM_TRANSFER_VO = new ThreadLocal<>();
|
|
|
|
|
|
|
|
|
|
@Resource
|
|
|
|
|
private CrmBusinessService crmBusinessService;
|
|
|
|
|
@Resource
|
|
|
|
|
private ContactService contactService;
|
|
|
|
|
@Resource
|
|
|
|
|
private ContractService contractService;
|
|
|
|
|
@Resource
|
|
|
|
|
private CrmCustomerService crmCustomerService;
|
|
|
|
|
|
|
|
|
|
public static void setCrmTransferInfo(Long userId, Integer userType, Object crmTransferBaseVO) {
|
|
|
|
|
USER_ID.set(userId);
|
|
|
|
|
USER_TYPE.set(userType);
|
|
|
|
|
CRM_TRANSFER_VO.set((CrmTransferBaseVO) crmTransferBaseVO);
|
|
|
|
|
}
|
|
|
|
|
private CrmPermissionService crmPermissionService;
|
|
|
|
|
|
|
|
|
|
public static void setCrmTransferInfo(Long userId, Integer userType) {
|
|
|
|
|
USER_ID.set(userId);
|
|
|
|
|
USER_TYPE.set(userType);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private static void clear() {
|
|
|
|
|
USER_ID.remove();
|
|
|
|
|
USER_TYPE.remove();
|
|
|
|
|
DATA_ID.remove();
|
|
|
|
|
CRM_TRANSFER_VO.remove();
|
|
|
|
|
/**
|
|
|
|
|
* 获得用户编号
|
|
|
|
|
*
|
|
|
|
|
* @return 用户编号
|
|
|
|
|
*/
|
|
|
|
|
private static Long getUserId() {
|
|
|
|
|
return WebFrameworkUtils.getLoginUserId();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Before("@annotation(crmPermission)")
|
|
|
|
|
@ -87,78 +47,46 @@ public class CrmPermissionAspect {
|
|
|
|
|
try {
|
|
|
|
|
Integer crmType = crmPermission.crmType().getType();
|
|
|
|
|
Integer operationType = crmPermission.operationType().getType();
|
|
|
|
|
Long id = DATA_ID.get();// 获取操作数据的编号
|
|
|
|
|
KeyValue<Collection<Long>, Collection<Long>> keyValue = new KeyValue<>(); // 数据权限 key 只读，value 读写
|
|
|
|
|
// 客户
|
|
|
|
|
if (ObjUtil.equal(crmType, CrmEnum.CRM_CUSTOMER.getType())) {
|
|
|
|
|
CrmCustomerDO customer = crmCustomerService.getCustomer(id);
|
|
|
|
|
if (customer == null) {
|
|
|
|
|
throw exception(CUSTOMER_NOT_EXISTS);
|
|
|
|
|
}
|
|
|
|
|
// 如果是自己则直接过
|
|
|
|
|
if (ObjUtil.equal(customer.getOwnerUserId(), USER_ID.get())) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
new KeyValue<>(customer.getRoUserIds(), customer.getRwUserIds());
|
|
|
|
|
Long id = (Long) joinPoint.getArgs()[0];// 获取操作数据的编号
|
|
|
|
|
|
|
|
|
|
// 1. 获取数据权限
|
|
|
|
|
CrmPermissionDO permission = crmPermissionService.getCrmPermissionByCrmTypeAndCrmDataId(crmType, id);
|
|
|
|
|
if (permission == null) {
|
|
|
|
|
// 不存在说明数据也不存在
|
|
|
|
|
throw exception(CRM_PERMISSION_MODEL_NOT_EXISTS, crmPermission.crmType().getName());
|
|
|
|
|
}
|
|
|
|
|
// 联系人
|
|
|
|
|
if (ObjUtil.equal(crmType, CrmEnum.CRM_CONTACTS.getType())) {
|
|
|
|
|
ContactDO contact = contactService.getContact(id);
|
|
|
|
|
if (contact == null) {
|
|
|
|
|
throw exception(CONTACT_NOT_EXISTS);
|
|
|
|
|
}
|
|
|
|
|
// 如果是自己则直接过
|
|
|
|
|
if (ObjUtil.equal(contact.getOwnerUserId(), USER_ID.get())) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
new KeyValue<>(contact.getRoUserIds(), contact.getRwUserIds());
|
|
|
|
|
// 1.2. 校验是否为公海数据
|
|
|
|
|
if (permission.getOwnerUserId() == null) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
// 商机
|
|
|
|
|
if (ObjUtil.equal(crmType, CrmEnum.CRM_BUSINESS.getType())) {
|
|
|
|
|
CrmBusinessDO business = crmBusinessService.getBusiness(id);
|
|
|
|
|
if (business == null) {
|
|
|
|
|
throw exception(BUSINESS_NOT_EXISTS);
|
|
|
|
|
}
|
|
|
|
|
// 如果是自己则直接过
|
|
|
|
|
if (ObjUtil.equal(business.getOwnerUserId(), USER_ID.get())) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
new KeyValue<>(business.getRoUserIds(), business.getRwUserIds());
|
|
|
|
|
}
|
|
|
|
|
// 合同
|
|
|
|
|
if (ObjUtil.equal(crmType, CrmEnum.CRM_CONTRACT.getType())) {
|
|
|
|
|
ContractDO contract = contractService.getContract(id);
|
|
|
|
|
if (contract == null) {
|
|
|
|
|
throw exception(CONTRACT_NOT_EXISTS);
|
|
|
|
|
}
|
|
|
|
|
// 如果是自己则直接过
|
|
|
|
|
if (ObjUtil.equal(contract.getOwnerUserId(), USER_ID.get())) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
new KeyValue<>(contract.getRoUserIds(), contract.getRwUserIds());
|
|
|
|
|
// 1.3. 校验当前负责人是不是自己
|
|
|
|
|
if (ObjUtil.equal(permission.getOwnerUserId(), getUserId())) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
// 1. 校验是否有读权限
|
|
|
|
|
// 1.4 TODO 校验是否为超级管理员
|
|
|
|
|
|
|
|
|
|
// 2. 校验是否有读权限
|
|
|
|
|
if (OperationTypeEnum.isRead(operationType)) {
|
|
|
|
|
// 校验该数据当前用户是否可读
|
|
|
|
|
boolean isRead = CollUtil.contains(keyValue.getKey(), item -> ObjUtil.equal(id, USER_ID.get()))
|
|
|
|
|
|| CollUtil.contains(keyValue.getValue(), item -> ObjUtil.equal(id, USER_ID.get()));
|
|
|
|
|
boolean isRead = CollUtil.contains(permission.getRoUserIds(), item -> ObjUtil.equal(item, getUserId()))
|
|
|
|
|
|| CollUtil.contains(permission.getRwUserIds(), item -> ObjUtil.equal(item, getUserId()));
|
|
|
|
|
if (isRead) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
throw exception(CONTRACT_NOT_EXISTS);
|
|
|
|
|
}
|
|
|
|
|
// 2. 校验是否有编辑权限
|
|
|
|
|
|
|
|
|
|
// 3. 校验是否有编辑权限
|
|
|
|
|
if (OperationTypeEnum.isEdit(operationType)) {
|
|
|
|
|
// 校验该数据当前用户是否可读写
|
|
|
|
|
if (CollUtil.contains(keyValue.getValue(), item -> ObjUtil.equal(id, USER_ID.get()))) {
|
|
|
|
|
if (CollUtil.contains(permission.getRwUserIds(), item -> ObjUtil.equal(item, getUserId()))) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
throw exception(CONTRACT_NOT_EXISTS);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 4. 没通过结束，报错 {}操作失败，原因：没有权限
|
|
|
|
|
throw exception(CRM_PERMISSION_DENIED, crmPermission.crmType().getName());
|
|
|
|
|
} catch (Exception ex) {
|
|
|
|
|
log.error("[doBefore][crmPermission({}) 数据校验错误]", toJsonString(crmPermission), ex);
|
|
|
|
|
} finally {
|
|
|
|
|
clear();
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
puhui999
2 years ago