/* * Copyright (c) 2018-2028, Chill Zhuang All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions are met: * * Redistributions of source code must retain the above copyright notice, * this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * Neither the name of the dreamlu.net developer nor the names of its * contributors may be used to endorse or promote products derived from * this software without specific prior written permission. * Author: Chill 庄骞 (smallchill@163.com) */ package com.vci.ubcs.system.service.impl; import com.alibaba.fastjson.JSON; import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper; import com.baomidou.mybatisplus.core.metadata.IPage; import com.baomidou.mybatisplus.core.toolkit.Wrappers; import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl; import com.vci.ubcs.system.entity.Menu; import com.vci.ubcs.system.mapper.RoleMapper; import com.vci.ubcs.system.service.IMenuService; import com.vci.ubcs.system.service.IRoleMenuService; import com.vci.ubcs.system.service.IRoleScopeService; import com.vci.ubcs.system.service.IRoleService; import com.vci.ubcs.system.vo.DeptVO; import com.vci.ubcs.system.wrapper.RoleWrapper; import lombok.AllArgsConstructor; import org.springblade.core.log.annotation.GrantLog; import org.springblade.core.log.exception.ServiceException; import org.springblade.core.secure.utils.AuthUtil; import org.springblade.core.tool.api.R; import org.springblade.core.tool.constant.BladeConstant; import org.springblade.core.tool.constant.RoleConstant; import org.springblade.core.tool.node.ForestNodeMerger; import org.springblade.core.tool.node.TreeNode; import org.springblade.core.tool.utils.CollectionUtil; import org.springblade.core.tool.utils.Func; import com.vci.ubcs.system.entity.Role; import com.vci.ubcs.system.entity.RoleMenu; import com.vci.ubcs.system.entity.RoleScope; import com.vci.ubcs.system.vo.RoleVO; import org.springblade.core.tool.utils.StringUtil; import org.springframework.stereotype.Service; import org.springframework.transaction.annotation.Transactional; import org.springframework.validation.annotation.Validated; import javax.validation.constraints.NotEmpty; import java.util.ArrayList; import java.util.Collections; import java.util.List; import java.util.stream.Collectors; import static com.vci.ubcs.common.constant.CommonConstant.API_SCOPE_CATEGORY; import static com.vci.ubcs.common.constant.CommonConstant.DATA_SCOPE_CATEGORY; /** * 服务实现类 * * @author Chill */ @Service @Validated @AllArgsConstructor public class RoleServiceImpl extends ServiceImpl implements IRoleService { private final IRoleMenuService roleMenuService; private final IRoleScopeService roleScopeService; private final IMenuService menuService; @Override public IPage selectRolePage(IPage page, RoleVO role) { return page.setRecords(baseMapper.selectRolePage(page, role)); } @Override public List tree(String tenantId) { String userRole = AuthUtil.getUserRole(); String excludeRole = null; if (!CollectionUtil.contains(Func.toStrArray(userRole), RoleConstant.ADMIN) && !CollectionUtil.contains(Func.toStrArray(userRole), RoleConstant.ADMINISTRATOR)) { excludeRole = RoleConstant.ADMINISTRATOR; } return ForestNodeMerger.merge(baseMapper.tree(tenantId, excludeRole)); } @Override public List roleList(String tenantId) { // 这里判断我们自己配置的管理组租户,可以查询所有 List tree = baseMapper.roleList(tenantId.equals(tenantId) ? "":tenantId); return tree; } @Override @Transactional(rollbackFor = Exception.class) public boolean grant(@NotEmpty List roleIds, List menuIds, List dataScopeIds, List apiScopeIds) { return grantRoleMenu(roleIds, menuIds) && grantDataScope(roleIds, dataScopeIds) && grantApiScope(roleIds, apiScopeIds); } /** * 角色权限配置日志记录 * @param roleRes * @return */ @Override @GrantLog("grantRole") public boolean grantLog(String roleRes, boolean isException) { return false; } /** * 获取角色授权日志的信息 * @param roleId * @return */ @Override public String getGrantRoleResString(List roleId) { // 获取到菜单信息,再获取到角色信息,进行拼接 List menuTree = menuService.grantTreeByRoleIds(roleId); List roleNames = this.baseMapper.getRoleNames(new Long[]{roleId.get(0)}); String res = roleNames.get(0) + "授权为:{" + JSON.toJSONString(menuTree)+"}"; return res; } private boolean grantRoleMenu(List roleIds, List menuIds) { // 防止越权配置超管角色 Long administratorCount = baseMapper.selectCount(Wrappers.query().lambda().eq(Role::getRoleAlias, RoleConstant.ADMINISTRATOR).in(Role::getId, roleIds)); if (!AuthUtil.isAdministrator() && administratorCount > 0L) { throw new ServiceException("无权配置超管角色!"); } // 防止越权配置管理员角色 Long adminCount = baseMapper.selectCount(Wrappers.query().lambda().eq(Role::getRoleAlias, RoleConstant.ADMIN).in(Role::getId, roleIds)); if (!AuthUtil.isAdmin() && adminCount > 0L) { throw new ServiceException("无权配置管理员角色!"); } // 删除角色配置的菜单集合 roleMenuService.remove(Wrappers.update().lambda().in(RoleMenu::getRoleId, roleIds)); // 组装配置 List roleMenus = new ArrayList<>(); roleIds.forEach(roleId -> menuIds.forEach(menuId -> { RoleMenu roleMenu = new RoleMenu(); roleMenu.setRoleId(roleId); roleMenu.setMenuId(menuId); roleMenus.add(roleMenu); })); // 新增配置 roleMenuService.saveBatch(roleMenus); // 递归设置下属角色菜单集合 recursionRoleMenu(roleIds, menuIds); return true; } private void recursionRoleMenu(List roleIds, List menuIds) { roleIds.forEach(roleId -> baseMapper.selectList(Wrappers.query().lambda().eq(Role::getParentId, roleId)).forEach(role -> { List roleMenuList = roleMenuService.list(Wrappers.query().lambda().eq(RoleMenu::getRoleId, role.getId())); // 子节点过滤出父节点删除的菜单集合 List collectRoleMenuIds = roleMenuList.stream().map(RoleMenu::getMenuId).filter(menuId -> !menuIds.contains(menuId)).collect(Collectors.toList()); if (collectRoleMenuIds.size() > 0) { // 删除子节点权限外的菜单集合 roleMenuService.remove(Wrappers.update().lambda().eq(RoleMenu::getRoleId, role.getId()).in(RoleMenu::getMenuId, collectRoleMenuIds)); // 递归设置下属角色菜单集合 recursionRoleMenu(Collections.singletonList(role.getId()), menuIds); } })); } private boolean grantDataScope(List roleIds, List dataScopeIds) { // 删除角色配置的数据权限集合 roleScopeService.remove(Wrappers.update().lambda().eq(RoleScope::getScopeCategory, DATA_SCOPE_CATEGORY).in(RoleScope::getRoleId, roleIds)); // 组装配置 List roleDataScopes = new ArrayList<>(); roleIds.forEach(roleId -> dataScopeIds.forEach(scopeId -> { RoleScope roleScope = new RoleScope(); roleScope.setScopeCategory(DATA_SCOPE_CATEGORY); roleScope.setRoleId(roleId); roleScope.setScopeId(scopeId); roleDataScopes.add(roleScope); })); // 新增配置 roleScopeService.saveBatch(roleDataScopes); return true; } private boolean grantApiScope(List roleIds, List apiScopeIds) { // 删除角色配置的接口权限集合 roleScopeService.remove(Wrappers.update().lambda().eq(RoleScope::getScopeCategory, API_SCOPE_CATEGORY).in(RoleScope::getRoleId, roleIds)); // 组装配置 List roleApiScopes = new ArrayList<>(); roleIds.forEach(roleId -> apiScopeIds.forEach(scopeId -> { RoleScope roleScope = new RoleScope(); roleScope.setScopeCategory(API_SCOPE_CATEGORY); roleScope.setScopeId(scopeId); roleScope.setRoleId(roleId); roleApiScopes.add(roleScope); })); // 新增配置 roleScopeService.saveBatch(roleApiScopes); return true; } @Override public String getRoleIds(String tenantId, String roleNames) { List roleList = baseMapper.selectList(Wrappers.query().lambda().eq(Role::getTenantId, tenantId).in(Role::getRoleName, Func.toStrList(roleNames))); if (roleList != null && roleList.size() > 0) { return roleList.stream().map(role -> Func.toStr(role.getId())).distinct().collect(Collectors.joining(",")); } return ""; } @Override public List getRoleNames(String roleIds) { return baseMapper.getRoleNames(Func.toLongArray(roleIds)); } @Override public List getRoleAliases(String roleIds) { return baseMapper.getRoleAliases(Func.toLongArray(roleIds)); } @Override public boolean submit(Role role) { if (!AuthUtil.isAdministrator()) { if (Func.toStr(role.getRoleAlias()).equals(RoleConstant.ADMINISTRATOR)) { throw new ServiceException("无权限创建超管角色!"); } } if (Func.isEmpty(role.getParentId())) { role.setParentId(BladeConstant.TOP_PARENT_ID); // 前端传了是属于那个租户id下的角色 if(Func.isEmpty(role.getTenantId())){ role.setTenantId(AuthUtil.getTenantId()); } } if (role.getParentId() > 0) { Role parent = getById(role.getParentId()); if (Func.toLong(role.getParentId()) == Func.toLong(role.getId())) { throw new ServiceException("父节点不可选择自身!"); } role.setTenantId(parent.getTenantId()); } role.setIsDeleted(BladeConstant.DB_NOT_DELETED); return saveOrUpdate(role); } @Override public List search(String roleName, Long parentId) { String tenantId = AuthUtil.getTenantId(); LambdaQueryWrapper queryWrapper = Wrappers.query().lambda(); if (Func.isNotEmpty(roleName)) { queryWrapper.like(Role::getRoleName, roleName); } if (Func.isNotEmpty(parentId) && parentId > 0L) { queryWrapper.eq(Role::getParentId, parentId); } if (Func.isNotEmpty(tenantId)) { queryWrapper.eq(Role::getTenantId, tenantId); } List roleList = baseMapper.selectList(queryWrapper); return RoleWrapper.build().listNodeVO(roleList); } @Override public boolean removeRole(String ids) { Long cnt = baseMapper.selectCount(Wrappers.query().lambda().in(Role::getParentId, Func.toLongList(ids))); if (cnt > 0L) { throw new ServiceException("请先删除子节点!"); } return removeByIds(Func.toLongList(ids)); } }