通用数据级别权限的框架设计与实现(4)-单条记录的权限控制

Target({ ElementType.PARAMETER, ElementType.METHOD })
@Retention(RetentionPolicy.RUNTIME)
@Documented
public @interface AuthCheck {
    /**权限校验规则
     * @return
     */
    Class classModel() ;

    /**
     *  判断是否IN查询
     * @return
     */
    boolean isIn() default true;

}

@Target(ElementType.PARAMETER)
@Retention(RetentionPolicy.RUNTIME)
public  @interface AuthParam {
}

  /**
     * 生成对一条记录的权限校限SQL
     * @param id
     * @param valueList
     * @return
     */

    public String getAuthSqlIn(Object id, List valueList){
        StringBuffer sb = new StringBuffer();
        sb.append("select count(1) from ");
        sb.append (this.getSalveTableName() );
        sb.append(" where    ").append(this.getSalveTableField()).append("=").append(id);
        sb.append(" and ");
        sb.append(this.buildLogicIN(this.getSearchUserField(), valueList));
        return sb.toString();
    }

    /**
     * 生成对一条记录的权限校验SQL，用EQ
     * @param id
     * @param userId
     * @return
     */

    public String getAuthSqlEq(Object id,Object userId){
        StringBuffer sb = new StringBuffer();
        sb.append("select count(1) from ");
        sb.append (this.getSalveTableName() );
        sb.append(" where    ").append(this.getSalveTableField()).append("=").append(id);
        sb.append(" and ");
        sb.append(  this.getSearchUserField()).append("=").append(userId);
        return sb.toString();
    }

 //生成校验的
    public static String  getAuthModelSql(String classModel, Object id,boolean isIn) {
        AuthValidatorModel authValidatorModel = AuthConfig.get(classModel);
        if (authValidatorModel == null) {
            return "";
        }
        boolean isAuth = authValidatorModel.getRoles().stream().anyMatch(role -> UserUtil.containRole(role));
        if (isAuth) {
            return "";
        }
        String checkAuthSql="";
        if (isIn) {
            checkAuthSql = authValidatorModel.getAuthFiledFilter().getAuthSqlIn(id, UserUtil.getOrgIds());
        } else {
            checkAuthSql = authValidatorModel.getAuthFiledFilter().getAuthSqlEq(id, UserUtil.getUserId());
        }
        return checkAuthSql;
    }

@Aspect
@Order(1)
@Component
public class AuchCheckAspect {
    protected final Log logger = LogFactory.getLog(AuchCheckAspect.class);

    @Autowired
    AuthMapper authMapper;

    /**
     * 权限校验
     *
     * @param joinPoint
     * @throws Throwable
     */
    @Before(value = "@annotation( com.starmark.auth.anno.AuthCheck)")
    public void timeAroundAdvice(JoinPoint joinPoint) throws Throwable {
        //相关参数
        MethodSignature signature = (MethodSignature) joinPoint.getSignature();
        Method method = signature.getMethod();
        AuthCheck AuthCheck = method.getAnnotation(AuthCheck.class);
        String classModel = AuthCheck.classModel().getName();
        Assert.notNull(classModel, " 权限校验模型不允许为空");
        Object id = null;
        Object[] args = joinPoint.getArgs();
        //从方法中获取相关主键校验参数
        Parameter[] parameters = method.getParameters();
        for (int i = 0; i < parameters.length; i++) {
            AuthParam authParam = parameters[i].getAnnotation(AuthParam.class);
            if (authParam != null) {
                id = args[i];
                break;
            }
        }
        AuthValidatorModel authValidatorModel = AuthConfig.get(classModel);
        String checkAuthSql = AuthValidatorUtil.getAuthModelSql(classModel,id,AuthCheck.isIn());
        if (StringUtils.isNotEmpty(checkAuthSql)) {
            boolean isAuth = authMapper.isAuth(checkAuthSql);
            if (!isAuth) {
                throw new AuthCheckException();
            }
        }
    }


}

    <!-- 生成 SQL判断有没有权限-->
    <select id="isAuth"  resultType="boolean" >
         ${authSql}
    </select>

@GetMapping(value = "/{id}")
    @AuthCheck(classModel = SysAuthRole.class)
    public Object get(@PathVariable("id") @AuthParam Long id) {
        return sysAuthRoleService.get(id);
    }