模块添加自定义标签鉴权 在Token启用的情况下。通过自定义标签定义的modname和Operate 判断用户是否有访问模块的权限

chenhaozhe

6 天以前 a985e6ba578b4ec28a25932f871c4df76ce092f2

 WebAPI/Controllers/BLL/Xt_UserController.cs

@@ -1,6 +1,7 @@
using Newtonsoft.Json;
using Newtonsoft.Json.Linq;
using Pub_Class;
using SyntacticSugar.constant;
using System;
using System.Collections;
using System.Collections.Generic;
@@ -11,6 +12,8 @@
using System.Web.Http;
using WebAPI.Controllers.SCGL.日计划管理;
using WebAPI.Models;
using WebAPI.Utility;

namespace WebAPI.Controllers
{
    public class Xt_UserController : ApiController
@@ -25,6 +28,7 @@
        #region[用户列表查询]
        [Route("Xt_User/list")]
        [HttpGet]
        [Permission(HModName = "Xt_User_Query")]
        public object list(string sWhere,string user)
        {
            try
@@ -107,6 +111,26 @@
                    objJsonResult.data = null;
                    return objJsonResult;
                }

                ////获取当前用户身份列表
                //string sql = "select HLev from System_UserGroupInfo u " +
                //        " left join System_UserGroup r " +
                //        "on u.GroupId = r.GroupID where u.UserId = '" + HCzybm + "'";

                ////用户身份判断
                //DataSet hLev = oCN.RunProcReturn(sql, "System_UserGroupInfo");
                //foreach(DataRow dr in hLev.Tables[0].Rows)
                //{
                //    if (!dr["HLev"].Equals(RoleConstant.EMPLOYEE))
                //    {
                //        objJsonResult.code = CodeConstant.FAIL;
                //        objJsonResult.count = CountConstant.FAIL;
                //        objJsonResult.Message = "管理员身份不允许删除！";
                //        objJsonResult.data = null;
                //        return objJsonResult;
                //    }
                //}      

                oCN.BeginTran();
                //删除用户信息
                oCN.RunProc("delete from  Gy_Czygl where Czybm='" + HCzybm + "'");
@@ -200,20 +224,31 @@
                        return objJsonResult;
                    }

                    //判断用户数是否大于客户账号数
                    ds = oCN.RunProcReturn("Exec h_p_Xt_BaseInfo ", "h_p_Xt_BaseInfo");
                    if (DBUtility.ClsPub.isStrNull(ds.Tables[0].Rows[0]["HBack"]) != "0")
                    {
                        objJsonResult.code = "0";
                        objJsonResult.count = 0;
                        objJsonResult.Message = ds.Tables[0].Rows[0]["HBackRemark"].ToString();
                        objJsonResult.data = null;
                        return objJsonResult;
                    }

                    oCN.RunProc("insert into Gy_Czygl (Czybm,Czymc,Czmm,Explain,HempID,HK3UserID " +
                    ",HKeeperID,HKeeper,HSecManagerID,HSecManager " +
                    ",HSellManID,HSellMan,HDeptID,HDept " +
                    ",HWhID,HWHName,HSupID,HSupName " +
                    ",HSCWHID,HSCWHName " +
                    ",HCloudUserName,HCloudUserPsd,HUSEORGID,HProcID" +
                    ",HGroupID,HSourceID,HCheckEmpID,HWorkCenterID,HICNumber) " +
                    ",HGroupID,HSourceID,HCheckEmpID,HWorkCenterID,HICNumber,HDingDingUserID,HCusID) " +
                    "values ('" + lsmain[0].Czybm.ToString() + "','" + lsmain[0].Czymc.ToString() + "','" + ClsPub.StrToPsd(lsmain[0].Czmm.ToString()) + "','" + lsmain[0].Explain.ToString() + "','" + lsmain[0].HEmpID.ToString() + "',"+ lsmain[0].HK3UserID.ToString() + "" +
                    ","+ lsmain[0].HKeeperID.ToString() + ",'"+ lsmain[0].HKeeper.ToString() + "',"+ lsmain[0].HSecManagerID.ToString() + ",'"+ lsmain[0].HSecManager.ToString() + "'" +
                    "," + lsmain[0].HSellManID.ToString() + ",'" + lsmain[0].HSellMan.ToString() + "'," + lsmain[0].HDeptID.ToString() + ",'" + lsmain[0].HDept.ToString() + "'" +
                    "," + lsmain[0].HWhID.ToString() + ",'" + lsmain[0].HWHName.ToString() + "'," + lsmain[0].HSupID.ToString() + ",'" + lsmain[0].HSupName.ToString() + "'" +
                    "," + lsmain[0].HSCWHID.ToString() + ",'" + lsmain[0].HSCWHName.ToString() + "'" + 
                    ",'" + lsmain[0].HCloudUserName.ToString() + "','" + lsmain[0].HCloudUserPsd.ToString() + "',"+ lsmain[0].HOrgID.ToString() + "," + lsmain[0].HProcID.ToString() + "" +
                    ","+ lsmain[0].HGroupID.ToString() + ","+ lsmain[0].HSourceID.ToString() + "," + lsmain[0].HCheckEmpID.ToString() + "," + lsmain[0].HWorkCenterID.ToString() + ",'" + lsmain[0].HICNumber + "'" + ")");
                    ","+ lsmain[0].HGroupID.ToString() + ","+ lsmain[0].HSourceID.ToString() + "," + lsmain[0].HCheckEmpID.ToString() + "," + lsmain[0].HWorkCenterID.ToString() + ",'" + lsmain[0].HICNumber + "','" + lsmain[0].HDingDingUserID + "','" + lsmain[0].HCusID + "'" + ")");

                    //新增后查询  确保数据添加成功
                    ds = oCN.RunProcReturn("Select * from  Gy_Czygl where Czybm='" + lsmain[0].Czybm.ToString() + "'", "Gy_Czygl");
@@ -239,6 +274,17 @@
                }
                else //修改
                {
                    //判断用户数是否大于客户账号数
                    ds = oCN.RunProcReturn("Exec h_p_Xt_BaseInfo ", "h_p_Xt_BaseInfo");
                    if (DBUtility.ClsPub.isStrNull(ds.Tables[0].Rows[0]["HBack"]) != "0")
                    {
                        objJsonResult.code = "0";
                        objJsonResult.count = 0;
                        objJsonResult.Message = ds.Tables[0].Rows[0]["HBackRemark"].ToString();
                        objJsonResult.data = null;
                        return objJsonResult;
                    }

                    ds = oCN.RunProcReturn("select * from  Gy_Czygl where Czybm='" + lsmain[0].Czybm.ToString() + "'", "Gy_Czygl");
                    if (ds.Tables[0].Rows[0]["Czmm"].ToString() !=  lsmain[0].Czmm)  //修改密码
                    {
@@ -270,6 +316,8 @@
                        ",HCloudUserPsd='" + lsmain[0].HCloudUserPsd.ToString() + "'" +
                        ",HUSEORGID=" + lsmain[0].HOrgID.ToString() +
                        ",HICNumber='" + lsmain[0].HICNumber + "'" +
                        ",HDingDingUserID='" + lsmain[0].HDingDingUserID + "'" +
                        ",HCusID='" + lsmain[0].HCusID + "'" +
                        "  where  Czybm='" + lsmain[0].Czybm.ToString() + "'");
                    }
                    else
@@ -300,7 +348,9 @@
                           ",HCloudUserName='" + lsmain[0].HCloudUserName.ToString() + "'" +
                           ",HCloudUserPsd='" + lsmain[0].HCloudUserPsd.ToString() + "'" +
                           ",HUSEORGID=" + lsmain[0].HOrgID.ToString() +
                            ",HICNumber='" + lsmain[0].HICNumber + "'" +
                           ",HICNumber='" + lsmain[0].HICNumber + "'" +
                           ",HDingDingUserID='" + lsmain[0].HDingDingUserID + "'" +
                           ",HCusID='" + lsmain[0].HCusID + "'" +
                           "  where  Czybm='" + lsmain[0].Czybm.ToString() + "'");
                    }

@@ -319,7 +369,6 @@
                objJsonResult.code = "1";
                objJsonResult.count = 1;
                objJsonResult.Message = "保存成功！";
                //WebAPIController.Add_Log("送货单下推", UserName, "生成送货单");
                objJsonResult.data = 1;
                return objJsonResult;

@@ -335,8 +384,6 @@
            }
        }
        #endregion



        #region  根据用户编码查找已分配供应商列表
        [Route("Xt_User/SupperPlaylist")]
@@ -796,6 +843,7 @@
            }
        }
        #endregion

        #region 用户关联组织维护 删除
        /// <summary>
        ///参数：string HInterID。
@@ -830,7 +878,7 @@

                oCN.BeginTran();

                string sql = "delete from Gy_UserORGRelation where HItemID = " + HInterID;
                string sql = "delete from Gy_UserByOrgRelation where HItemID = " + HInterID;
                oCN.RunProc(sql);

                oCN.Commit();
@@ -851,6 +899,7 @@
            }
        }
        #endregion

        #region 用户关联组织维护 编辑初始化
        /// <summary>
        ///参数：string sql。
@@ -893,6 +942,7 @@
            }
        }
        #endregion

        #region 用户关联组织维护 保存
        [Route("Xt_User/UserRelationOrganizationList_Save")]
        [HttpPost]
@@ -944,11 +994,11 @@
                        string HOrgName = item["HOrgName"].ToString();      //组织名称


                        sql = "select * from Gy_UserORGRelation where HUserID = '" + HUserID + "' and HOrgID = " + HOrgID;
                        ds = oCN.RunProcReturn(sql, "Gy_UserORGRelation");
                        sql = "select * from Gy_UserByOrgRelation where HUserID = '" + HUserID + "' and HOrgID = " + HOrgID;
                        ds = oCN.RunProcReturn(sql, "Gy_UserByOrgRelation");
                        if (ds.Tables[0].Rows.Count == 0)
                        {
                            sql = "insert into Gy_UserORGRelation(HUserID,HOrgID)" +
                            sql = "insert into Gy_UserByOrgRelation(HUserID,HOrgID)" +
                                "values(" +
                                "'" + HUserID + "'" +
                                "," + HOrgID + "" +
@@ -987,15 +1037,15 @@
                        string HOrgNumber = item["HOrgNumber"].ToString();  //组织代码
                        string HOrgName = item["HOrgName"].ToString();      //组织名称

                        sql = "select * from Gy_UserORGRelation where HItemID = " + HItemID;
                        ds = oCN.RunProcReturn(sql, "Gy_UserORGRelation");
                        sql = "select * from Gy_UserByOrgRelation where HItemID = " + HItemID;
                        ds = oCN.RunProcReturn(sql, "Gy_UserByOrgRelation");
                        if (ds.Tables[0].Rows.Count > 0)
                        {
                            sql = "select * from Gy_UserORGRelation where HUserID = '" + HUserID + "' and HOrgID = " + HOrgID + " and HItemID <> " + HItemID;
                            ds = oCN.RunProcReturn(sql, "Gy_UserORGRelation");
                            sql = "select * from Gy_UserByOrgRelation where HUserID = '" + HUserID + "' and HOrgID = " + HOrgID + " and HItemID <> " + HItemID;
                            ds = oCN.RunProcReturn(sql, "Gy_UserByOrgRelation");
                            if (ds.Tables[0].Rows.Count == 0)
                            {
                                sql = "update Gy_UserORGRelation set " +
                                sql = "update Gy_UserByOrgRelation set " +
                                      "HUserID = '" + HUserID + "' " +
                                      ",HOrgID = " + HOrgID + " " +
                                      "where HItemID = " + HItemID;
@@ -1084,6 +1134,7 @@
        #region  用户关联仓库列表查询
        [Route("Xt_User/Gy_UserStockRelationList")]
        [HttpGet]
        [Permission(HModName = "Gy_UserStockRelation_Query")]
        public object Gy_UserStockRelationList(string sWhere, string user)
        {
            try
@@ -1137,6 +1188,7 @@
        /// </summary>
        [Route("Xt_User/Gy_UserStockRelationDrop")]
        [HttpGet]
        [Permission(HModName = "Gy_UserStockRelation_Drop")]
        public object Gy_UserStockRelationDrop(string HItemID, string user)
        {
            try
@@ -1233,6 +1285,7 @@
        #region  用户关联用户列表查询
        [Route("Xt_User/Gy_UserByUserList")]
        [HttpGet]
        [Permission(HModName = "Gy_UserByUser_Query")]
        public object Gy_UserByUserList(string sWhere, string user)
        {
            try
@@ -1840,6 +1893,7 @@
        /// </summary>
        [Route("Xt_User/UserByWorkStationRelationList")]
        [HttpGet]
        [Permission(HModName = "Gy_UserWorkStationList_Query")]
        public object UserByWorkStationRelationList(string sWhere, string user)
        {
            try
@@ -1899,6 +1953,7 @@
        #region 用户关联工位保存
        [Route("Xt_User/SaveUserByWorkStation")]
        [HttpPost]
        [Permission(HModName = "Gy_UserWorkStationList_Edit")]
        public object SaveUserByWorkStation([FromBody] JObject msg)
        {
            var _value = msg["msg"].ToString();
@@ -1991,6 +2046,7 @@
        /// </summary>
        [Route("Xt_User/UserByWorkStationRelationList_Drop")]
        [HttpGet]
        [Permission(HModName = "Gy_UserWorkStationList_Drop")]
        public object UserByWorkStationRelationList_Drop(string HInterID, string user)
        {
            try
@@ -2421,6 +2477,7 @@
            }
        }
        #endregion

        #region 用户关联职员维护 删除
        /// <summary>
        ///参数：string HInterID。
@@ -2476,6 +2533,7 @@
            }
        }
        #endregion

        #region 用户关联职员维护 编辑初始化
        /// <summary>
        ///参数：string sql。
@@ -2518,6 +2576,7 @@
            }
        }
        #endregion

        #region 用户关联职员维护 保存
        [Route("Xt_User/UserRelationEmployeelist_Save")]
        [HttpPost]
@@ -2709,6 +2768,7 @@
        #region 用户关联用户保存
        [Route("Xt_User/SaveUserUser")]
        [HttpPost]
        [Permission(HModName = "Gy_UserByUser_Edit")]
        public object SaveUserUser([FromBody] JObject msg)
        {
            var _value = msg["msg"].ToString();
@@ -2792,6 +2852,7 @@
        #region  用户关联物料列表查询
        [Route("Xt_User/Gy_UserMaterList")]
        [HttpGet]
        [Permission(HModName = "Gy_UserMaterList_Query")]
        public object Gy_UserMaterList(string sWhere, string user)
        {
            try
@@ -2845,6 +2906,7 @@
        /// </summary>
        [Route("Xt_User/Gy_UserMaterRelationDrop")]
        [HttpGet]
        [Permission(HModName = "Gy_UserMaterList_Drop")]
        public object Gy_UserMaterRelationDrop(string HItemID, string user)
        {
            try
@@ -2941,6 +3003,7 @@
        #region  根据用户编码查找已分配客户列表
        [Route("Xt_User/CustomerPlaylist")]
        [HttpGet]
        [Permission(HModName = "Gy_UserRelationCustomer", Operate = "_Query")]
        public object CustomerPlaylist(string HUserID, string CurUserName)
        {
            try
@@ -2982,9 +3045,11 @@
            }
        }
        #endregion

        #region  查询指定用户所关联客户中的客户
        [Route("Xt_User/CustomerPlaylistFromUserCustomerList")]
        [HttpGet]
        [Permission(HModName = "Gy_UserRelationCustomer", Operate = "_Query")]
        public object CustomerPlaylistFromUserCustomerList(string HUserID, string HCusNumber, string HCusName, string CurUserName)
        {
            try
@@ -3035,9 +3100,11 @@
            }
        }
        #endregion

        #region 用户关联客户保存
        [Route("Xt_User/SaveUserCustomer")]
        [HttpPost]
        [Permission(HModName = "Gy_UserRelationCustomer", Operate = "_Edit")]
        public object SaveUserCustomer([FromBody] JObject msg)
        {
            var _value = msg["msg"].ToString();
@@ -3091,6 +3158,7 @@
            }
        }
        #endregion


        #region 用户关联客户 文件上传
        [Route("Xt_User/Gy_UserCustomer_ImportByExcel")]
@@ -3252,6 +3320,7 @@
            }
        }
        #endregion

        #region 用户关联客户 导入(数据验证)
        [Route("Xt_User/Gy_UserCustomer_ImportByExcel_Confirm")]
        [HttpPost]
@@ -3432,6 +3501,7 @@
            }
        }
        #endregion

        #region 用户关联客户 导入(保存)
        [Route("Xt_User/Gy_UserCustomer_ImportByExcel_Save")]
        [HttpPost]
@@ -3722,6 +3792,7 @@
            }
        }
        #endregion

        #region 用户关联客户维护 编辑初始化
        /// <summary>
        ///参数：string sql。
@@ -3764,6 +3835,7 @@
            }
        }
        #endregion

        #region 用户关联客户维护 保存
        [Route("Xt_User/UserRelationCustomerlist_Save")]
        [HttpPost]
@@ -3922,6 +3994,7 @@
            }
        }
        #endregion


        #region  根据用户编码查找已分配工序列表
        [Route("Xt_User/ProcessPlaylist")]
@@ -4246,6 +4319,7 @@
        #region  用户关联工序列表查询
        [Route("Xt_User/UserProcesslist")]
        [HttpGet]
        [Permission(HModName = "Gy_UserMaterList_Query")]
        public object UserProcesslist(string sWhere, string user)
        {
            try
@@ -4299,6 +4373,7 @@
        /// </summary>
        [Route("Xt_User/Gy_UserProcessDrop")]
        [HttpGet]
        [Permission(HModName = "Gy_UserProcessList_Drop")]
        public object Gy_UserProcessDrop(string HItemID, string user)
        {
            try
@@ -4417,6 +4492,7 @@
        /// </summary>
        [Route("Xt_User/UserSupplierRelationList_Drop")]
        [HttpGet]
        [Permission(HModName = "Gy_UserSupplierRelation_Delete")]
        public object UserSupplierRelationList_Drop(string HInterID, string user)
        {
            try
@@ -4465,5 +4541,33 @@
            }
        }
        #endregion

        #region 根据用户关联组织 过滤条件
        [Route("Xt_User/getOrgIDListByUser")]
        [HttpGet]
        public object getOrgIDListByUser(string UserID, string UserName,string HOrgID)
        {            
            try
            {
              
                //根据用户ID 查询用户关联组织表
                ds = oCN.RunProcReturn("exec h_p_GetHorgIDByUser_Query '"+ UserID + "','"+ UserName + "','"+ HOrgID + "'", "h_p_GetHorgIDByUser_Query");

                objJsonResult.code = "1";
                objJsonResult.count = 1;
                objJsonResult.Message = "Sucess！";
                objJsonResult.data = ds.Tables[0];
                return objJsonResult;
            }
            catch (Exception e)
            {               
                objJsonResult.code = "0";
                objJsonResult.count = 0;
                objJsonResult.Message = "Exception！" + e.ToString();
                objJsonResult.data = null;
                return objJsonResult;
            }
        }
        #endregion
    }
}