基础建模每个模块的权限

zzr99

2022-02-10 dac1d793ad118eebf9048588a356ae0ea8a3aa95

 WebAPI/Controllers/XSGL/Xs_SeOutStockBillController.cs

@@ -66,18 +66,28 @@
        /// </summary>
        [Route("Xs_SeOutStockBill/list")]
        [HttpGet]
        public object list(string sWhere)
        public object list(string sWhere,string user)
        {
            try
            {
                //判断是否有查询权限
                if (!DBUtility.ClsPub.Security_Log("Xs_SeOutStockBillQuery", 1, false, user))
                {
                    objJsonResult.code = "0";
                    objJsonResult.count = 0;
                    objJsonResult.Message = "无权限查询!";
                    objJsonResult.data = null;
                    return objJsonResult;
                }

                if (sWhere == null || sWhere.Equals(""))
                {
                    ds = oCN.RunProcReturn("select * from h_v_IF_SeOutStockBillList " + sWhere, "h_v_IF_SeOutStockBillList");
                    ds = oCN.RunProcReturn("select * from h_v_IF_SeOutStockBillList order by hmainid desc", "h_v_IF_SeOutStockBillList");
                }
                else
                {
                    string sql1 = "select * from h_v_IF_SeOutStockBillList where 1 = 1 ";
                    string sql = sql1 + sWhere;
                    string sql = sql1 + sWhere+ " order by hmainid desc";
                    ds = oCN.RunProcReturn(sql, "h_v_IF_SeOutStockBillList");
                }
                if (ds == null || ds.Tables[0].Rows.Count == 0)
@@ -112,10 +122,20 @@
        /// <returns></returns>
        [Route("Xs_SeOutStockBill/DeltetSeOutStockBill")]
        [HttpGet]
        public object DeltetSeOutStockBill(string HInterID)
        public object DeltetSeOutStockBill(string HInterID,string user)
        {
            try
            {
                //判断是否有删除权限
                if (!DBUtility.ClsPub.Security_Log("Xs_SeOutStockBill_Drop", 1, false, user))
                {
                    objJsonResult.code = "0";
                    objJsonResult.count = 0;
                    objJsonResult.Message = "无权限删除!";
                    objJsonResult.data = null;
                    return objJsonResult;
                }

                oCN.BeginTran();
                oCN.RunProc("Delete From Xs_SeOutStockBillMain where HInterID = " + HInterID);
                oCN.RunProc("Delete From Xs_SeOutStockBillSub where HInterID = " + HInterID);