Пример #1
0
        public ApiReturns Put(int id, ViewPersonInfo viewPerson)
        {
            var loginUser = LoginStatus.GetLoginUser();

            // 权限验证,非超级管理员不允许将账户修改为超级管理员账户,不允许添加不属于其所属单位的人员信息
            if (!LoginStatus.IsSuperAdminLogin() && (viewPerson.UserType == 0 || viewPerson.DepartmentId != loginUser.DepartmentId))
            {
                return(ApiReturns.Forbidden());
            }

            var person = _personBll.QuerySingle(id);
            var user   = _systemUserBll.QuerySingle(s => s.PersonInfoId == id);

            if (person == null || user == null)
            {
                return(ApiReturns.BadRequest());
            }

            person.Name             = viewPerson.Name;
            person.DepartmentId     = viewPerson.DepartmentId;
            person.Gender           = viewPerson.Gender;
            person.HeadPortraitPath = viewPerson.HeadPortraitPath;
            person.WorkNo           = viewPerson.WorkNo;

            user.Username = viewPerson.Username;
            user.UserType = viewPerson.UserType.Value;

            var success = _personBll.ExecuteTranscation(() => _personBll.Update(person), () => _systemUserBll.Update(user));

            return(success ? ApiReturns.Created() : ApiReturns.BadRequest());
        }