using Infrastructure;
using SqlSugar.IOC;
using ZR.Model;
using ZR.Model.Models;
using ZR.Model.System;
namespace ZR.ServiceCore.SqlSugar
{
public enum DataPermiEnum
{
None = 0,
///
/// 全部数据权限
///
All = 1,
///
/// 仅本人数据权限
///
SELF = 5,
///
/// 部门数据权限
///
DEPT = 3,
///
/// 自定数据权限
///
CUSTOM = 2,
///
/// 部门及以下数据权限
///
DEPT_CHILD = 4
}
///
/// 数据权限
///
public class DataPermi
{
///
/// 数据过滤
///
/// 多库id
public static void FilterData(string configId)
{
//获取当前用户的信息
var user = JwtUtil.GetLoginUser(App.HttpContext);
if (user == null || user.RoleKeys == null) return;
var db = DbScoped.SugarScope.GetConnectionScope(configId);
var expUser = Expressionable.Create().And(it => it.DelFlag == 0);
var expRole = Expressionable.Create();
var expLoginlog = Expressionable.Create();
var expSysMsg = Expressionable.Create().And(it => it.IsDelete == 0);
var expDept = Expressionable.Create();
db.QueryFilter.AddTableFilter(expSysMsg.ToExpression());
//管理员不过滤
if (user.RoleKeys.Any(f => f.Equals(GlobalConstant.AdminRole))) return;
foreach (var role in user.Roles.OrderBy(f => f.DataScope))
{
var dataScope = (DataPermiEnum)role.DataScope;
if (DataPermiEnum.All.Equals(dataScope))//所有权限
{
break;
}
else if (DataPermiEnum.CUSTOM.Equals(dataScope))//自定数据权限
{
//" OR {}.dept_id IN ( SELECT dept_id FROM sys_role_dept WHERE role_id = {} ) ", deptAlias, role.getRoleId()));
expUser.Or(it => SqlFunc.Subqueryable().Where(f => f.DeptId == it.DeptId && f.RoleId == role.RoleId).Any());
}
else if (DataPermiEnum.DEPT.Equals(dataScope))//本部门数据
{
expUser.And(it => it.DeptId == user.DeptId);
expDept.And(it => it.DeptId == user.DeptId);
}
else if (DataPermiEnum.DEPT_CHILD.Equals(dataScope))//本部门及以下数据
{
//SQl OR {}.dept_id IN ( SELECT dept_id FROM sys_dept WHERE dept_id = {} or find_in_set( {} , ancestors ) )
var allChildDepts = db.Queryable().ToChildList(it => it.ParentId, user.DeptId);
var allDeptId = allChildDepts.Select(f => f.DeptId).ToList();
expUser.Or(it => allDeptId.Contains(it.DeptId));
expDept.And(it => allDeptId.Contains(it.DeptId));
}
else if (DataPermiEnum.SELF.Equals(dataScope))//仅本人数据
{
expUser.Or(it => it.UserId == user.UserId);
expRole.Or(it => user.RoleKeys.Contains(it.RoleKey));
expLoginlog.And(it => it.UserName == user.UserName);
}
}
db.QueryFilter.AddTableFilter(expDept.ToExpression());
db.QueryFilter.AddTableFilter(expUser.ToExpression());
db.QueryFilter.AddTableFilter(expRole.ToExpression());
db.QueryFilter.AddTableFilter(expLoginlog.ToExpression());
db.QueryFilter.AddTableFilter(f => f.UserId == user.UserId, QueryFilterProvider.FilterJoinPosition.Where);
}
}
}