模块添加自定义标签鉴权 在Token启用的情况下。通过自定义标签定义的modname和Operate 判断用户是否有访问模块的权限

chenhaozhe

5 天以前 a985e6ba578b4ec28a25932f871c4df76ce092f2

 WebAPI/Controllers/XSGL/Xs_ExceptiveCheckRequestBillController.cs

@@ -8,10 +8,12 @@
using System.Data.SqlClient;
using System.Web.Http;
using WebAPI.Models;
using WebAPI.Utility;

namespace WebAPI.Controllers
{
    //特批申请单Controller
    [Permission(HModName = "Xs_ExceptiveCheckRequestBill")]
    public class Xs_ExceptiveCheckRequestBillController : ApiController
    {
        //获取系统参数
@@ -31,6 +33,7 @@
        /// </summary>
        [Route("Xs_ExceptiveCheckRequestBill/list")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Query")]
        public object getXs_ExceptiveCheckRequestBill(string sWhere, string user)
        {
            try
@@ -86,6 +89,7 @@
        #region 特批申请单保存 新增/编辑
        [Route("Xs_ExceptiveCheckRequestBill/SaveXs_ExceptiveCheckRequestBill")]
        [HttpPost]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Edit")]
        public object SaveXs_ExceptiveCheckRequestBill([FromBody] JObject msg)
        {
            var _value = msg["msg"].ToString();
@@ -217,7 +221,15 @@

                }


                //进行 会计期间 结账 的判断和控制
                int sYear = 0;
                int sPeriod = 0;
                DateTime HDate = DateTime.Now;
                if (DBUtility.Xt_BaseBillFun.Fun_AllowYearPeriod(HDate, ref sYear, ref sPeriod, ref s) == false)
                {
                    objJsonResult.Message = s;
                    return objJsonResult;
                }

                //保存
                //保存完毕后处理
@@ -307,6 +319,7 @@
        /// </summary>
        [Route("Xs_ExceptiveCheckRequestBill/delete")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Drop")]
        public object deleteXs_ExceptiveCheckRequestBill(string HInterID, string user)
        {
            try
@@ -350,6 +363,16 @@
                    return objJsonResult;
                }

                //进行 会计期间 结账 的判断和控制
                int sYear = 0;
                int sPeriod = 0;
                DateTime HDate = DateTime.Now;
                if (DBUtility.Xt_BaseBillFun.Fun_AllowYearPeriod(HDate, ref sYear, ref sPeriod, ref s) == false)
                {
                    objJsonResult.Message = s;
                    return objJsonResult;
                }

                oCN.BeginTran();

                oCN.RunProc("delete from Xs_ExceptiveCheckRequestBillMain where HInterID = " + HInterID);
@@ -383,6 +406,7 @@
        /// <returns></returns>
        [Route("Xs_ExceptiveCheckRequestBill/AuditXs_ExceptiveCheckRequestBill")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Check")]
        public object AuditXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
        {
            string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Check";
@@ -468,6 +492,17 @@
                //进行需要进行的审核/反审核操作
                if (IsAudit == 0) //审核提交
                {
                    //进行 会计期间 结账 的判断和控制
                    string s = "";
                    int sYear = 0;
                    int sPeriod = 0;
                    DateTime HDate = DateTime.Now;
                    if (DBUtility.Xt_BaseBillFun.Fun_AllowYearPeriod(HDate, ref sYear, ref sPeriod, ref s) == false)
                    {
                        objJsonResult.Message = s;
                        return objJsonResult;
                    }

                    oCN.BeginTran();

                    //检验源单是否存在
@@ -566,6 +601,18 @@
                }
                if (IsAudit == 1) //反审核提交
                {

                    //进行 会计期间 结账 的判断和控制
                    string s = "";
                    int sYear = 0;
                    int sPeriod = 0;
                    DateTime HDate = DateTime.Now;
                    if (DBUtility.Xt_BaseBillFun.Fun_AllowYearPeriod(HDate, ref sYear, ref sPeriod, ref s) == false)
                    {
                        objJsonResult.Message = s;
                        return objJsonResult;
                    }

                    //反审核提交AbandonCheck
                    if (oBill.AbandonCheck(lngBillKey, ref DBUtility.ClsPub.sExeReturnInfo) == true)
                    {
@@ -717,6 +764,7 @@
        /// <returns></returns>
        [Route("Xs_ExceptiveCheckRequestBill/CloseXs_ExceptiveCheckRequestBill")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Close")]
        public object CloseXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
        {
            string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Close";
@@ -862,6 +910,7 @@
        /// <returns></returns>
        [Route("Xs_ExceptiveCheckRequestBill/DeleteXs_ExceptiveCheckRequestBill")]
        [HttpGet]
        [Permission(HModName = "Xs_ExceptiveCheckRequestBill", Operate = "_Delete")]
        public object DeleteXs_ExceptiveCheckRequestBill(int HInterID, int IsAudit, string CurUserName)
        {
            string ModRightNameCheck = "Xs_ExceptiveCheckRequestBill_Delete";