Пример #1
0
        public ApiReturns Post(ViewPersonInfo viewPerson)
        {
            var loginUser = LoginStatus.GetLoginUser();

            // 权限验证,非超级管理员不允许添加超级管理员账户,不允许添加不属于其所属单位的人员信息
            if (!LoginStatus.IsSuperAdminLogin() && (viewPerson.UserType == 0 || viewPerson.DepartmentId != loginUser.DepartmentId))
            {
                return(ApiReturns.Forbidden());
            }

            viewPerson.AddTime = DateTime.Now;

            var person = new PersonInfo
            {
                AddTime          = DateTime.Now,
                Name             = viewPerson.Name,
                DepartmentId     = viewPerson.DepartmentId,
                Gender           = viewPerson.Gender,
                HeadPortraitPath = viewPerson.HeadPortraitPath ?? string.Empty,
                WorkNo           = viewPerson.WorkNo
            };
            var user = new SystemUser
            {
                Username = viewPerson.Username,
                Password = EncryptHelper.EncryptPassword(viewPerson.Password),
                UserType = viewPerson.UserType ?? 0
            };

            var success = _personBll.AddPeronAndSystemUser(person, user);

            return(success ? ApiReturns.Created() : ApiReturns.BadRequest());
        }