package com.vci.server.query.util;
|
|
import java.sql.CallableStatement;
|
import java.sql.Connection;
|
import java.sql.PreparedStatement;
|
import java.sql.ResultSet;
|
import java.sql.SQLException;
|
import java.util.HashMap;
|
import java.util.Map;
|
|
import org.hibernate.Session;
|
|
import com.vci.corba.framework.data.CheckValue;
|
import com.vci.corba.common.VCIError;
|
import com.vci.corba.omd.btm.BtmItem;
|
import com.vci.server.base.persistence.dao.HibernateSessionFactory;
|
import com.vci.server.cache.ConfigCacheProvider;
|
import com.vci.server.cache.OMCacheProvider;
|
|
public class SecretUtil {
|
private static final String PROP_SECURITY = "secret";
|
private static final String PROP_SECURITY2 = "secretgrade";
|
|
public String checkRight(CheckValue params) throws VCIError {
|
// TODO on = ... 是否是三元角色，是的话不检查权限
|
if (isAdmin(params))
|
return "";
|
String where = getCheckSqlRes(params);
|
if (where.replace(" ", "").contains("1=0")) {
|
return where;
|
}
|
return where;
|
}
|
|
public String checkUserSecret(CheckValue params) throws VCIError {
|
if (isAdmin(params))
|
return "";
|
//BtmItem btmItem = ServerServiceProvider.getOMDService(current).getBTMService().getBtmItemByName(params.businesstype);
|
BtmItem btmItem = OMCacheProvider.getBizType(params.businesstype);
|
String where = getUserCheck(params, btmItem);
|
return where;
|
}
|
|
public String getUserCheck(CheckValue params, BtmItem btmItem) throws VCIError {
|
//if (!isUserCheckOpen(current)) {
|
if (!ConfigCacheProvider.isUserSecurity()) {
|
return "";
|
}
|
for (String arrName : btmItem.apNameArray) {
|
if (PROP_SECURITY.equals(arrName) || PROP_SECURITY2.equals(arrName)) {
|
String userSecret = getParamValue(params, "CURRENTUSER.SECRETGRADE");
|
if (userSecret != null && !"".equals(userSecret.trim())) {
|
return " and PLATFORMBTM_" + params.businesstype + "." + arrName + "<=" + userSecret;
|
}
|
return " and 1=0 ";
|
}
|
}
|
return "";
|
}
|
|
public String checkIPSecret(CheckValue params) throws VCIError {
|
if (isAdmin(params))
|
return "";
|
|
//BtmItem btmItem = ServerServiceProvider.getOMDService(current).getBTMService().getBtmItemByName(params.businesstype);
|
BtmItem btmItem = OMCacheProvider.getBizType(params.businesstype);
|
String where = getIPCheck(params, btmItem);
|
return where;
|
}
|
|
private String getIPCheck(CheckValue params, BtmItem btmItem) throws VCIError {
|
//if (!isUserCheckOpen(current) || !isIPCheckOpen(current)) { // 用户保密检测未开启就不作任何检查了
|
if (!ConfigCacheProvider.isIpSecurity() || !ConfigCacheProvider.isUserSecurity()) { // 用户保密检测未开启就不作任何检查了
|
return "";
|
}
|
for (String arrName : btmItem.apNameArray) {
|
if (PROP_SECURITY.equals(arrName) || PROP_SECURITY2.equals(arrName)) {
|
String machineSecret = getParamValue(params, "CURRENTMACHINE.SECRET");
|
if (machineSecret != null && !"".equals(machineSecret.trim())) {
|
return " and PLATFORMBTM_" + params.businesstype + "." + arrName + "<=" + machineSecret;
|
}
|
return " and 1=0 ";
|
}
|
}
|
return "";
|
}
|
|
private boolean isAdmin(CheckValue params) throws VCIError {
|
if (params.users == null || "".equals(params.users.trim())) {
|
return false;
|
}
|
String userName = params.users.split(",")[0];
|
try {
|
String userType = getUserTypeByUserName(userName);
|
if (userType != null && userType.matches("\\d")) {
|
return Integer.parseInt(userType) <= 1;
|
}
|
} catch (SQLException e) {
|
e.printStackTrace();
|
}
|
return false;
|
}
|
|
private String getUserTypeByUserName(String userName) throws VCIError, SQLException {
|
String sql = "select plusertype from pluser t where t.plusername=?";
|
Connection connection = HibernateSessionFactory.getSessionConnection();
|
PreparedStatement pst = connection.prepareStatement(sql);
|
pst.setString(1, userName);
|
ResultSet rs = pst.executeQuery();
|
String userType = "";
|
while (rs.next()) {
|
userType = rs.getString("plusertype");
|
}
|
rs.close();
|
pst.close();
|
return userType;
|
}
|
|
private String getParamValue(CheckValue params, String key) {
|
String paramValues = params.paramValues;
|
Map<String, String> map = getValuesMap(paramValues);
|
return map.get(key);
|
}
|
|
private Map<String, String> getValuesMap(String paramValues) {
|
Map<String, String> map = new HashMap<String, String>();
|
String[] split = paramValues.split(",");
|
for (String kvStr : split) {
|
String[] kv = kvStr.split("=");
|
if (kv.length == 2) {
|
map.put(kv[0], kv[1]);
|
}
|
}
|
return map;
|
}
|
|
|
private String getCheckSqlRes(CheckValue params) throws VCIError {
|
Session session = HibernateSessionFactory.getSession();
|
// procedure
|
Connection conn = session.connection();
|
String where = "";
|
try {
|
//String defaultHasRight = getDefaultRightConf(current);
|
String defaultHasRight = ConfigCacheProvider.defaultHasRight() ? "1" : "0";
|
|
CallableStatement cs = null;
|
if (params.objectoid != null && params.objectoid.split(",").length == 1
|
&& params.opname.split(",").length == 1 && params.opname.equals("query")) {
|
cs = conn.prepareCall("{call CheckQueryRight(?,?,?,?,?,?,?,?,?,?)}");
|
} else if (params.objectoid != null && params.objectoid.split(",").length == 1) {
|
cs = conn.prepareCall("{call checkordinaryright(?,?,?,?,?,?,?,?,?,?)}");
|
} else {
|
cs = conn.prepareCall("{call CHECHOBJECTSRIGHT(?,?,?,?,?,?,?,?,?,?)}");
|
}
|
cs.setString(1, params.users);
|
cs.setString(2, params.roles);
|
cs.setString(3, params.userGroups);
|
cs.setString(4, params.paramValues);
|
cs.setString(5, params.businesstype);
|
cs.setString(6, params.opname);
|
cs.setString(7, params.objectoid);
|
cs.setString(8, params.objectroid);
|
cs.setString(9, params.objectmoid);
|
cs.setString(10, defaultHasRight);
|
cs.registerOutParameter(10, java.sql.Types.VARCHAR);
|
cs.execute();
|
where = cs.getString(10);
|
if (conn != null) {
|
conn.close();
|
}
|
// System.out.println("=====================RightValue=======================");
|
// System.out.println(" " + defaultHasRight + " : " + where);
|
// System.out.println("=====================RightValue=======================");
|
} catch (SQLException e) {
|
throw new VCIError("checkRight_0001", new String[] {e.getMessage()});
|
}
|
return where;
|
}
|
|
}
|
