using Infrastructure; using SqlSugar.IOC; using ZR.Model; using ZR.Model.Models; using ZR.Model.System; namespace ZR.ServiceCore.SqlSugar { public enum DataPermiEnum { None = 0, /// /// 全部数据权限 /// All = 1, /// /// 仅本人数据权限 /// SELF = 5, /// /// 部门数据权限 /// DEPT = 3, /// /// 自定数据权限 /// CUSTOM = 2, /// /// 部门及以下数据权限 /// DEPT_CHILD = 4 } /// /// 数据权限 /// public class DataPermi { /// /// 数据过滤 /// /// 多库id public static void FilterData(string configId) { //获取当前用户的信息 var user = JwtUtil.GetLoginUser(App.HttpContext); if (user == null || user.RoleKeys == null) return; var db = DbScoped.SugarScope.GetConnectionScope(configId); var expUser = Expressionable.Create().And(it => it.DelFlag == 0); var expRole = Expressionable.Create(); var expLoginlog = Expressionable.Create(); var expSysMsg = Expressionable.Create().And(it => it.IsDelete == 0); var expDept = Expressionable.Create(); db.QueryFilter.AddTableFilter(expSysMsg.ToExpression()); //管理员不过滤 if (user.RoleKeys.Any(f => f.Equals(GlobalConstant.AdminRole))) return; foreach (var role in user.Roles.OrderBy(f => f.DataScope)) { var dataScope = (DataPermiEnum)role.DataScope; if (DataPermiEnum.All.Equals(dataScope))//所有权限 { break; } else if (DataPermiEnum.CUSTOM.Equals(dataScope))//自定数据权限 { //" OR {}.dept_id IN ( SELECT dept_id FROM sys_role_dept WHERE role_id = {} ) ", deptAlias, role.getRoleId())); expUser.Or(it => SqlFunc.Subqueryable().Where(f => f.DeptId == it.DeptId && f.RoleId == role.RoleId).Any()); } else if (DataPermiEnum.DEPT.Equals(dataScope))//本部门数据 { expUser.And(it => it.DeptId == user.DeptId); expDept.And(it => it.DeptId == user.DeptId); } else if (DataPermiEnum.DEPT_CHILD.Equals(dataScope))//本部门及以下数据 { //SQl OR {}.dept_id IN ( SELECT dept_id FROM sys_dept WHERE dept_id = {} or find_in_set( {} , ancestors ) ) var allChildDepts = db.Queryable().ToChildList(it => it.ParentId, user.DeptId); var allDeptId = allChildDepts.Select(f => f.DeptId).ToList(); expUser.Or(it => allDeptId.Contains(it.DeptId)); expDept.And(it => allDeptId.Contains(it.DeptId)); } else if (DataPermiEnum.SELF.Equals(dataScope))//仅本人数据 { expUser.Or(it => it.UserId == user.UserId); expRole.Or(it => user.RoleKeys.Contains(it.RoleKey)); expLoginlog.And(it => it.UserName == user.UserName); } } db.QueryFilter.AddTableFilter(expDept.ToExpression()); db.QueryFilter.AddTableFilter(expUser.ToExpression()); db.QueryFilter.AddTableFilter(expRole.ToExpression()); db.QueryFilter.AddTableFilter(expLoginlog.ToExpression()); db.QueryFilter.AddTableFilter(f => f.UserId == user.UserId, QueryFilterProvider.FilterJoinPosition.Where); } } }