using Newtonsoft.Json.Linq;
using Pub_Class;
using System;
using System.Collections;
using System.Collections.Generic;
using System.Data;
using System.Data.SqlClient;
using System.Web.Http;
using WebAPI.Models;
namespace WebAPI.Controllers
{
//采购订单Controller
public class Cg_POOrderBillController : ApiController
{
public DBUtility.ClsPub.Enum_BillStatus BillStatus;
private json objJsonResult = new json();
SQLHelper.ClsCN oCN = new SQLHelper.ClsCN();
DataSet ds;
///
/// 返回采购订单列表
///参数:string sql。
///返回值:object。
///
[Route("Cg_POOrderBill/list")]
[HttpGet]
public object list(string sWhere, string user)
{
try
{
//判断是否有采购经理权限
bool isCgjl = Security_Log("Cg_POOrderBill_PurchasManager", 1, true, user);
if (!isCgjl)
{
sWhere += " and HEmpID in (select HEmpID from Gy_Czygl where Czymc='Admin' )";
}
string sql = "select * from h_v_IF_POOrderBillList where 1 = 1 " + sWhere;
ds = oCN.RunProcReturn(sql, "h_v_IF_POOrderBillList");
objJsonResult.code = "1";
objJsonResult.count = 1;
objJsonResult.Message = "Sucess!";
objJsonResult.data = ds.Tables[0];
return objJsonResult;
}
catch (Exception e)
{
objJsonResult.code = "0";
objJsonResult.count = 0;
objJsonResult.Message = "Exception!" + e.ToString();
objJsonResult.data = null;
return objJsonResult;
}
}
///
/// 采购订单 分配
///参数:string sql。
///返回值:object。
///
[Route("Cg_POOrderBill/distribut")]
[HttpGet]
public object distribut(string Hmainid, string HSupplierId)
{
try
{
string sql = $"update Cg_POOrderBillMain set HBusinessStatus = 2 ,HEmpID ={HSupplierId} where HInterID in ({Hmainid})";
oCN.RunProc(sql);
objJsonResult.code = "1";
objJsonResult.count = 1;
objJsonResult.Message = "操作成功!";
return objJsonResult;
}
catch (Exception e)
{
objJsonResult.code = "0";
objJsonResult.count = 0;
objJsonResult.Message = "Exception!" + e.ToString();
objJsonResult.data = null;
return objJsonResult;
}
}
///
/// 采购订单 发布
///参数:string sql。
///返回值:object。
///
[Route("Cg_POOrderBill/release")]
[HttpGet]
public object release(string Hmainid)
{
try
{
string sql = $"update Cg_POOrderBillMain set HBusinessStatus = 3 where HInterID in ({Hmainid})";
oCN.RunProc(sql);
objJsonResult.code = "1";
objJsonResult.count = 1;
objJsonResult.Message = "操作成功!";
return objJsonResult;
}
catch (Exception e)
{
objJsonResult.code = "0";
objJsonResult.count = 0;
objJsonResult.Message = "Exception!" + e.ToString();
objJsonResult.data = null;
return objJsonResult;
}
}
///
/// 采购订单 优先级
///参数:string sql。
///返回值:object。
///
[Route("Cg_POOrderBill/yxj")]
[HttpGet]
public object yxj(string Hmainid, string HyxjId)
{
try
{
string sql = $"update Cg_POOrderBillMain set HPriority ={HyxjId} where HInterID in ({Hmainid})";
oCN.RunProc(sql);
objJsonResult.code = "1";
objJsonResult.count = 1;
objJsonResult.Message = "操作成功!";
return objJsonResult;
}
catch (Exception e)
{
objJsonResult.code = "0";
objJsonResult.count = 0;
objJsonResult.Message = "Exception!" + e.ToString();
objJsonResult.data = null;
return objJsonResult;
}
}
[Route("POOrderBack")]
[HttpGet]
///
/// 订单反馈状态
///
///
///
public object POOrderBack(string HmainidList, string OrderBackId)
{
try
{
string sql = "";
for (int i = 0; i < HmainidList.Split(',').Length; i++)
{
var Hmainid = HmainidList.Split(',')[i];
sql = string.Format(@"
update Cg_POOrderBillSub set
HFeedback ='{0}'
where HInterID = '{1}' and HEntryID = '{2}' ", OrderBackId, Hmainid.Split('-')[0], Hmainid.Split('-')[1]);
oCN.RunProc(sql);
}
objJsonResult.code = "0";
objJsonResult.count = 1;
objJsonResult.Message = "操作成功!";
//objJsonResult.Message = string.Join(",", HmainidList.ToArray());
objJsonResult.data = 1;
return objJsonResult;
}
catch (Exception e)
{
objJsonResult.code = "0";
objJsonResult.count = 0;
objJsonResult.Message = "失败!" + e.ToString();
objJsonResult.data = null;
return objJsonResult;
}
}
//判断是否存在权限,并写入日志
public static bool Security_Log(string gnsy, int LogTF, bool Msg, string CurUserName)
{
//gnsy 功能索引,模块
//usercode 当前用户代码
//LogTF 1判断权限并写日志,2只写日志,3只判断权限
//Msg 没有权限时 是否提示框
string UserID = CurUserName;
try
{
ClsSqlHelper oCn = new ClsSqlHelper();
DataSet Ds = new DataSet();
DataSet DsUser = new DataSet();
DataSet DsJS = new DataSet();//角色
long ModID = 0;
bool HavRight = false;
//找到模块权限
Ds = oCn.RunProcReturn("select * from xt_xtgnb where gnsy='" + gnsy.Trim() + "'", "xt_xtgnb");
if (Ds.Tables[0].Rows.Count == 0)
{
if (Msg == true)
{
//MessageBox.Show("没有找到该功能模块!", "提示");
}
return false;
}
else
{
ModID = ClsPub.isLong(Ds.Tables[0].Rows[0]["ID"].ToString()); //返回模块
}
if (LogTF == 1 || LogTF == 3)//需要判断权限
{
//根据用户名称判断权限
DsUser = oCn.RunProcReturn("select * from gy_czygl where czymc='" + UserID.Trim() + "'", "gy_czygl");
if (DsUser.Tables[0].Rows.Count == 0)
{
if (Msg == true)
{
//MessageBox.Show("没有找到当前操作员!", "提示");
}
return false;
}
//根据用户名称判断权限
if ((bool)DsUser.Tables[0].Rows[0]["ManagerFlag"]) //是否管理员
{
HavRight = true;
}
else
{
if (DsUser.Tables[0].Rows[0]["AuthorityID"].ToString().Trim().Substring((int)ModID - 1, 1) == "1")
{
HavRight = true;
}
else
{
//获取用户组 并循环判断权限
//判断角色是否有权限
DsJS = oCn.RunProcReturn("select isnull(AuthorityID,'') AuthorityID from System_UserGroupinfo a inner join System_UserGroup b on a.GroupID=b.GroupID " +
" Where a.USERID='" + UserID.Trim() + "'", "gy_czygl");
if (DsJS == null)
{
HavRight = false;
}
else
{
HavRight = false;
for (int i = 0; i < DsJS.Tables[0].Rows.Count; i++)
{
if (ClsPub.isStrNull(DsJS.Tables[0].Rows[i]["AuthorityID"]).Length > ModID)
{
if (DsJS.Tables[0].Rows[i]["AuthorityID"].ToString().Trim().Substring((int)ModID - 1, 1) == "1")
{
HavRight = true;
break;
}
}
}
}
}
}
if (HavRight == false)
{
if (Msg == true)
{
//MessageBox.Show("您没有权限,请与管理员联系!", "提示");
}
}
}
//需要写入日志
if ((LogTF == 1 && HavRight) || LogTF == 2)
{
//Add_Log(Ds.Tables[0].Rows[0]["id"].ToString().Trim(), gnsy + "," + Ds.Tables[0].Rows[0]["gnmc"].ToString().Trim(), CurUserName);
}
return HavRight;
}
catch (Exception e)
{
if (Msg == true)
{
//MessageBox.Show("判断权限时发现错误,请与管理员联系!", "提示");
}
return false;
}
}
//
}
}