/// <summary>
/// 获取会员权益数量
/// </summary>
/// <param name="search"></param>
/// <returns></returns>
public static int QueryPageCount(UserPermissionModel search)
{
var strCount = new StringBuilder();
var strCondition = new StringBuilder();
var sqlParamerts = new List <SqlParameter>();
#region 获取数量
strCondition.Append(@"
SELECT ISNULL(COUNT(*),0) AS totalCount
FROM Gungnir.dbo.tbl_UserPermission WITH ( NOLOCK )
WHERE IsDeleted = 0
");
#endregion
if (search != null)
{
if (!string.IsNullOrWhiteSpace(search.Name))
{
strCondition.AppendFormat(" And Name like @Name");
sqlParamerts.Add(new SqlParameter("@Name", "%" + search.Name + "%"));
}
if (search.MembershipsGradeId > 0)
{
strCondition.AppendFormat(" And MembershipsGradeId=@MembershipsGradeId");
sqlParamerts.Add(new SqlParameter("@MembershipsGradeId", search.MembershipsGradeId));
}
}
using (var countCmd = new SqlCommand(strCondition.ToString()))
{
countCmd.Parameters.AddRange(sqlParamerts.ToArray());
var count = DbHelper.ExecuteScalar(countCmd);
return(Convert.ToInt32(count));
}
}
private UserPermissionModel PrepareUserPermissionModel(UserPermission userPermission)
{
UserPermissionModel userPermissionTemp = new UserPermissionModel();
userPermissionTemp.Id = userPermission.Id;
userPermissionTemp.UpazilaId = userPermission.UpazilaId;
if (userPermissionTemp.UpazilaId > 0)
{
userPermissionTemp.UpazilaName = upazilaService.GetUpazila(userPermissionTemp.UpazilaId).Name;
}
userPermissionTemp.DistrictId = userPermission.DistrictId;
if (userPermissionTemp.DistrictId > 0)
{
userPermissionTemp.DistrictName = districtService.GetDistrict(userPermissionTemp.DistrictId).Name;
}
userPermissionTemp.DivisionId = userPermission.DivisionId;
if (userPermissionTemp.DivisionId > 0)
{
userPermissionTemp.DivisionName = divisionService.GetDivision(userPermissionTemp.DivisionId).Name;
}
userPermissionTemp.UserId = userPermission.UserId;
userPermissionTemp.SchoolId = userPermission.SchoolId;
if (userPermissionTemp.SchoolId > 0)
{
userPermissionTemp.SchoolName = schoolService.GetSchool(userPermissionTemp.SchoolId).Name;
}
return(userPermissionTemp);
}
public static int UpdateUserPermission(UserPermissionModel model)
{
string sql = @"update Gungnir..tbl_UserPermission set Name=@Name,LightImage=@LightImage,DarkImage=@DarkImage,
TopImage=@TopImage,Position=@Position,IsTopImage=@IsTopImage,UseUserLevel=@UseUserLevel,Description=@Description,IsEnable=@IsEnable,IsLight=@IsLight,FootTile=@FootTile,[Version]=@Version
where ID=@ID";
var conn = ConfigurationManager.ConnectionStrings["Gungnir"].ConnectionString;
if (SecurityHelp.IsBase64Formatted(conn))
{
conn = SecurityHelp.DecryptAES(conn);
}
var dbhelper = new SqlDbHelper(conn);
using (var cmd = new SqlCommand(sql))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@Name", model.Name);
cmd.Parameters.AddWithValue("@LightImage", model.LightImage);
cmd.Parameters.AddWithValue("@DarkImage", model.DarkImage);
cmd.Parameters.AddWithValue("@TopImage", model.TopImage);
cmd.Parameters.AddWithValue("@Position", model.Position);
cmd.Parameters.AddWithValue("@IsTopImage", model.IsTopImage);
cmd.Parameters.AddWithValue("@UseUserLevel", model.UseUserLevel);
cmd.Parameters.AddWithValue("@Description", model.Description);
cmd.Parameters.AddWithValue("@IsEnable", model.IsEnable);
cmd.Parameters.AddWithValue("@IsLight", model.IsLight);
cmd.Parameters.AddWithValue("@FootTile", model.FootTile);
cmd.Parameters.AddWithValue("@ID", model.Id);
cmd.Parameters.AddWithValue("@Version", model.Version);
return(dbhelper.ExecuteNonQuery(cmd));
}
}
public ActionResult Edit(int id, int membershipsGradeId, string memberGradeName)
{
if (membershipsGradeId > 0)
{
var queryModel = new UserPermissionModel()
{
MembershipsGradeId = membershipsGradeId
};
//获取对应的生活权益(当前可观的时间范围内，相同等级下的会员权益不会超过100条)
var userPermissionList = DALUserPermission.QueryPageList(queryModel, 1, 100);
ViewBag.UserPermissionList = userPermissionList;
}
if (ViewBag.UserPermissionList == null)
{
ViewBag.UserPermissionList = new List <UserPermissionModel>();
}
ViewBag.MembershipsGradeId = membershipsGradeId;
ViewBag.MemberGradeName = memberGradeName;
if (id <= 0)
{
ViewBag.Title = "添加权益奖励信息";
return(View(new UserPromotionCodeModel()));
}
else
{
ViewBag.Title = "编辑权益奖励信息";
var model = DALUserPromotionCode.GetModelById(id);
if (model == null)
{
model = new UserPromotionCodeModel();
}
return(View(model));
}
}
public ActionResult Edit(int id, int memberGradeId = 0)
{
var memberBll = new MemberService();
var memberGradeList = memberBll.GetMembershipsGradeList();
ViewBag.MemberGrade = memberGradeList;
ViewBag.CheckCycle = CheckCycleDllList();
ViewBag.PermissionType = PermissionTypeDllList();
if (id <= 0)
{
ViewBag.Title = "添加用户权益信息";
return(View(new UserPermissionModel()
{
MembershipsGradeId = memberGradeId
}));
}
else
{
ViewBag.Title = "编辑用户权益信息";
var model = DALUserPermission.GetModelById(id);
if (model == null)
{
model = new UserPermissionModel();
}
return(View(model));
}
}
public HttpResponseMessage GetFormPermissionMenuRole([FromBody] Models.role role)
{
try
{
var controlList = controlRepository.GetAllControlForPermission();
var userPermissionList = userPermissionRepository.GetAllUserPermissionByRoleId(role.role_id);
List <UserPermissionModel> models = new List <UserPermissionModel>();
if (role.role_id == null)
{
foreach (control con in controlList)
{
UserPermissionModel tempUserPermission = new UserPermissionModel();
tempUserPermission.control_id = con.control_id;
tempUserPermission.control_name = con.control_name;
tempUserPermission.control_type_id = con.control_type_id;
tempUserPermission.control_parent_id = con.control_parent_id;
tempUserPermission.control_controller = con.control_controller;
tempUserPermission.control_action = con.control_action;
tempUserPermission.control_status = false;
tempUserPermission.icon = con.icon;
tempUserPermission.control_alias = con.control_alias;
models.Add(tempUserPermission);
}
}
else
{
foreach (control con in controlList)
{
UserPermissionModel tempUserPermission = new UserPermissionModel();
tempUserPermission.control_id = con.control_id;
tempUserPermission.control_name = con.control_name;
tempUserPermission.control_type_id = con.control_type_id;
tempUserPermission.control_parent_id = con.control_parent_id;
tempUserPermission.control_controller = con.control_controller;
tempUserPermission.control_action = con.control_action;
tempUserPermission.icon = con.icon;
tempUserPermission.control_alias = con.control_alias;
foreach (user_permission usp in userPermissionList)
{
if (usp.user_control_id == con.control_id)
{
tempUserPermission.control_status = true;
}
}
models.Add(tempUserPermission);
}
}
var format_type = RequestFormat.JsonFormaterString();
return(Request.CreateResponse(HttpStatusCode.OK, models, format_type));
}
catch (Exception ex)
{
var formatter = RequestFormat.JsonFormaterString();
return(Request.CreateResponse(HttpStatusCode.OK, new Confirmation {
output = "error", msg = ex.ToString()
}, formatter));
}
}
public JsonResult Edit(UserPermissionModel model)
{
if (model == null)
{
return(Json(new { result = 0, msg = "无法获取数据对象" }));
}
var result = 0;
if (string.IsNullOrWhiteSpace(model.EndVersion))
{
model.EndVersion = "9.9.9";
}
model.LastUpdateBy = HttpContext.User.Identity.Name;
if (model.Id <= 0)
{
model.CreateBy = model.LastUpdateBy;
result = DALUserPermission.Add(model);
}
else
{
model.LastUpdateDateTime = DateTime.Now;
result = DALUserPermission.Update(model);
}
var oprLog = new Tuhu.Provisioning.DataAccess.Entity.OprLog
{
ObjectID = model.Id,
ObjectType = "UserPermission",
Author = HttpContext.User.Identity.Name,
Operation = model.Id > 0 ? "更新" : "新增" + "UserLivingRights配置"
};
var operLogManager = new Business.OprLogManagement.OprLogManager();
return(Json(new { result = result, msg = "操作成功" }));
}
public void AddUserPermission(UserPermissionModel userPermissionModel)
{
_userMemoryCache.UserPermission.Get(userPermissionModel.UserID, out var lstUserPermission);
lstUserPermission = lstUserPermission ?? new List <UserPermissionModel>();
lstUserPermission.Add(userPermissionModel);
_userMemoryCache.UserPermission.AddOrUpdate(userPermissionModel.ID, id => lstUserPermission);
}
public ActionResult LookupPagePermissions(FindPageModel model)
{
// Check if this is a Url or NodeId request
var url = model.IsUrlRequest ? model.Url : model.NodeId.ToString();
try
{
// Get a list of Web Authors that have permission to manage this page
// Convert to a list so that we can add the other Web Authors
PageUsersModel perms = _permissionsControlService.CheckPagePermissions(url);
if (perms != null)
{
List <UserPermissionModel> authorList = perms.Users.ToList();
// Get a list of all other Web Authors
var excludeUsers = authorList.Select(x => x.UserId).ToArray();
var ex = string.Join(",", excludeUsers);
var otherAuthors = _umbracoService.GetWebAuthors(ex);
// Combine the two lists. These have PermissionId = 0 to indicate they do not have access
foreach (var otherAuthor in otherAuthors)
{
var p = new UserPermissionModel
{
UserId = otherAuthor.UserId,
FullName = otherAuthor.FullName,
EmailAddress = otherAuthor.EmailAddress,
UserLocked = otherAuthor.UserLocked,
UserName = otherAuthor.UserName,
PagePermissions = new string[] { }
};
authorList.Add(p);
}
perms.Users = authorList;
if (!authorList.IsNullOrEmpty())
{
return(PartialView("PagePermissions/LookupPagePermissions", perms));
}
}
TempData["MsgKey"] = "PageNotFound";
return(PartialView("ToolsError"));
}
catch (Exception ex)
{
ex.ToExceptionless().Submit();
TempData["MsgKey"] = string.Format("ErrorOccurred");
return(PartialView("ToolsError"));
}
}
/// <summary>
/// Get assigned permissions for a specific page
/// </summary>
/// <param name="page">page to check</param>
/// <returns>Permissions set</returns>
public PageUsersModel CheckPagePermissions(IContent page)
{
var permList = new PageUsersModel();
var permPage = new PageModel
{
PageId = page.Id,
PageName = page.Name
};
permList.Page = permPage;
var perms = _contentService.GetPermissionsForEntity(page);
IList <UserPermissionModel> userPerms = new List <UserPermissionModel>();
foreach (var perm in perms)
{
// Assume:
// if no permissions at all, then there will be only one element which will contain a "-"
// If only the default permission then there will only be one element which will contain "F" (Browse Node)
if (perm.AssignedPermissions.Count() <= 1 &&
(perm.AssignedPermissions[0] == "-" || perm.AssignedPermissions[0] == "F"))
{
continue;
}
var pUser = _userService.GetUserById(perm.UserId);
// Only interested in Web Authors
if (pUser.UserType.Alias != _webAuthorUserType)
{
continue;
}
// Create a permission object - set PermissionId = 1 to indicate user has permission to edit this page
var userPerm = new UserPermissionModel
{
UserId = perm.UserId,
UserName = pUser.Username,
FullName = pUser.Name,
EmailAddress = pUser.Email,
UserLocked = !pUser.IsApproved,
PagePermissions = perm.AssignedPermissions
};
userPerms.Add(userPerm);
}
permList.Users = userPerms.OrderBy(o => o.FullName).ToList();
return(permList);
}
public ActionResult AddUserPermission(UserPermissionModel userPermissionModel)
{
int count = userMapping.DeleteAndInsertMany(userPermissionModel.User, userPermissionModel.Names);
if (count > 0)
{
return(new ResponseModel <string>(ErrorCode.success, "", count));
}
else
{
return(new ResponseModel <string>(ErrorCode.server_exception, "", count));
}
}
public async Task <IActionResult> Update([FromRoute] Guid id, [FromBody] UserPermissionModel model)
{
try
{
var response = await _service.Update(model);
if (!response.IsSuccessful)
{
return(BadRequest(response));
}
return(Ok(response));
}
catch (Exception x)
{
_log.LogError(ExceptionLogger.ExceptionDetails(x));
return(StatusCode(500, "Internal Server Error."));
}
}
public async Task <JsonResult> GetUserPermissionByPage(UserPermissionRequest request)
{
var returnValue = new List <UserPermissionViewModel>();
if (request == null)
{
return(Json(new { code = -1, msg = "无参数信息", count = 0, data = returnValue }, JsonRequestBehavior.AllowGet));
}
if (request.Page <= 0)
{
request.Page = 1;
}
if (request.Limit <= 0)
{
request.Limit = 50;
}
var memberBll = new MemberService();
var requestModel = new UserPermissionModel {
Name = request.PermissionName,
MembershipsGradeId = request.MembershipsGradeId
};
var count = DALUserPermission.QueryPageCount(requestModel);
var dataResult = DALUserPermission.QueryPageList(requestModel, request.Page, request.Limit);
var memberGradeList = await memberBll.GetMembershipsGradeListAsync();
if (memberGradeList != null && memberGradeList.Count > 0 && dataResult != null && dataResult.Count > 0)
{
foreach (var userPermission in dataResult)
{
var viewModel = ObjectMapper.ConvertTo <UserPermissionModel, UserPermissionViewModel>(userPermission);
var gradeModel = memberGradeList.Find(t => t.PKID == userPermission.MembershipsGradeId);
viewModel.LastUpdateDateTime = userPermission.LastUpdateDateTime.ToString("yyyy-MM-dd HH:mm:ss");
viewModel.CreateDatetime = userPermission.CreateDatetime.ToString("yyyy-MM-dd HH:mm:ss");
if (gradeModel != null)
{
viewModel.MembershipsGradeName = gradeModel.GradeName;
}
returnValue.Add(viewModel);
}
}
return(Json(new { code = 0, msg = "加载成功", count = count, data = returnValue.OrderByDescending(t => t.Id) }, JsonRequestBehavior.AllowGet));
}
public static UserPermissionModel ToEntity(this UserPermissionViewModel model)
{
if (model == null)
{
return(null);
}
var entity = new UserPermissionModel
{
PermissionID = model.PermissionID,
PermissionLevelID = model.PermissionLevelID,
PermissionLevelName = model.PermissionLevelName,
PermissionName = model.PermissionName,
Description = model.Description,
Code = model.Code,
ModifiedBy = 1,
ModifiedOn = model.ModifiedOn
};
return(entity);
}
public HttpResponseMessage UpdateSystemAccount(UserPermissionModel model)
{
string Result = string.Empty;
try
{
//请求中包含的固定参数
model.SOURCE = ParametersFilter.FilterSqlHtml(model.SOURCE, 24);
model.CREDENTIALS = ParametersFilter.FilterSqlHtml(model.CREDENTIALS, 24);
model.ADDRESS = HttpHelper.IPAddress();
model.TERMINAL = ParametersFilter.FilterSqlHtml(model.TERMINAL, 1);
model.INDEX = ParametersFilter.FilterSqlHtml(model.INDEX, 24);
model.METHOD = ParametersFilter.FilterSqlHtml(model.METHOD, 24);
////去除参数中的特殊字符
model.DATA = ParametersFilter.StripSQLInjection(model.DATA);
model.DATA1 = ParametersFilter.StripSQLInjection(model.DATA1);
//http请求
Result = ApiHelper.HttpRequest(username, password, Url, model);
///写日志
string RequestAction = "api/" + username + "/" + HttpContext.Current.Request.RequestContext.RouteData.Values["action"].ToString() + "：";
LogHelper.LogResopnse(RequestAction + Result);
}
catch (Exception ex)
{
LogHelper.LogError(ex.ToString());
}
//返回请求结果
HttpResponseMessage Respend = new HttpResponseMessage {
Content = new StringContent(Result, Encoding.GetEncoding("UTF-8"), "application/json")
};
return(Respend);
}
public static int AddUserPermission(UserPermissionModel model)
{
string sql = @"insert into Gungnir..tbl_UserPermission([Name]
,[LightImage]
,[DarkImage]
,[TopImage]
,[Position]
,[IsTopImage]
,[UseUserLevel]
,[Description],[IsEnable],[IsLight],[FootTile],[Version])
values (@Name,@LightImage,@DarkImage,@TopImage,@Position,@IsTopImage,@UseUserLevel,@Description,@IsEnable,@IsLight,@FootTile,@Version) ";
var conn = ConfigurationManager.ConnectionStrings["Gungnir"].ConnectionString;
if (SecurityHelp.IsBase64Formatted(conn))
{
conn = SecurityHelp.DecryptAES(conn);
}
var dbhelper = new SqlDbHelper(conn);
using (var cmd = new SqlCommand(sql))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@Name", model.Name);
cmd.Parameters.AddWithValue("@LightImage", model.LightImage);
cmd.Parameters.AddWithValue("@DarkImage", model.DarkImage);
cmd.Parameters.AddWithValue("@TopImage", model.TopImage);
cmd.Parameters.AddWithValue("@Position", model.Position);
cmd.Parameters.AddWithValue("@IsTopImage", model.IsTopImage);
cmd.Parameters.AddWithValue("@UseUserLevel", model.UseUserLevel);
cmd.Parameters.AddWithValue("@Description", model.Description);
cmd.Parameters.AddWithValue("@IsEnable", model.IsEnable);
cmd.Parameters.AddWithValue("@IsLight", model.IsLight);
cmd.Parameters.AddWithValue("@FootTile", model.FootTile);
cmd.Parameters.AddWithValue("@Version", model.Version);
return(dbhelper.ExecuteNonQuery(cmd));
}
}
public static UserPermissionViewModel ToModel(this UserPermissionModel entity)
{
if (entity == null)
{
return(null);
}
var model = new UserPermissionViewModel
{
RoleModuleComponentID = entity.RoleModuleComponentID,
RoleModuleID = entity.RoleModuleID,
PermissionID = entity.PermissionID,
PermissionLevelID = entity.PermissionLevelID,
PermissionLevelName = entity.PermissionLevelName,
PermissionName = entity.PermissionName,
Description = entity.Description,
Code = entity.Code,
ModifiedBy = 1,
ModifiedOn = entity.ModifiedOn
};
return(model);
}
public List <UserPermissionModel> Get(string userId, Guid officeId)
{
List <UserPermissionModel> results = new List <UserPermissionModel>();
var userPermissionId = userPermissionRepository.Get(x => x.UserId == userId && x.OfficeId == officeId)?.FirstOrDefault()?.Id;
if (userPermissionId != null)
{
var generalPermissions = permissionGeneralRepository.Get(x => x.UserPermissionId == userPermissionId);
if (generalPermissions != null)
{
foreach (var item in generalPermissions)
{
var general = new UserPermissionModel
{
MenuId = item.MenuId,
Access = item.Access,
Detail = item.Detail,
Write = item.Write,
Delete = item.Delete,
List = item.List,
Import = item.Import,
Export = item.Export,
AllowAdd = item.Write == "None"?false: true,
SpecialActions = permissionSpecialRepository.Get(x => x.UserPermissionId == userPermissionId && x.MenuId == item.MenuId)?
.Select(x => new SpecialAction
{
Action = x.ActionName,
IsAllow = x.IsAllow
}).ToList()
};
results.Add(general);
}
}
}
return(results);
}
private IEnumerable<dynamic> dbGetUserTaskPermissionList(ref int totalRecordCount)
{
bool initGrid = Request.Query["type"].ToString() == "initGrid" ? true : false;
string remoteIP = this.HttpContext.Connection.RemoteIpAddress.ToString();
string localIP = this.HttpContext.Connection.LocalIpAddress.ToString();
string page = Request.Query["page"].ToString();
string start = Request.Query["start"].ToString();
string limit = Request.Query["limit"].ToString();
string taskId = Request.Query["TaskId"];
List<dynamic> rows = new List<dynamic>();
try
{
using (SqlConnection sqlConnection = new SqlConnection(
GIxUtils.DecodeConnectionString(
_configuration,
ref _loginRequest,
Request.Headers["X-WebGI-Authentication"],
Request.Headers["X-WebGI-Version"])))
{
sqlConnection.Open();
using (SqlCommand sqlCommand = sqlConnection.CreateCommand())
{
sqlCommand.Connection = sqlConnection;
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "dbo.[usp_WebGI_GetTaskPermisionList]";
//sqlCommand.Parameters.AddWithValue("@APIKey", apiKey);
sqlCommand.Parameters.AddWithValue("@IP_Local", localIP);
sqlCommand.Parameters.AddWithValue("@IP_Remote", remoteIP);
sqlCommand.Parameters.AddWithValue("@InitGrid", initGrid);
sqlCommand.Parameters.AddWithValue("@Salt", _loginRequest.salt);
sqlCommand.Parameters.AddWithValue("@Version", _loginRequest.version);
sqlCommand.Parameters.AddWithValue("@TaskId", taskId);
SqlParameter outputValue = sqlCommand.Parameters.Add("@totalCount", SqlDbType.Int);
outputValue.Direction = ParameterDirection.Output;
SqlDataReader recordSet = sqlCommand.ExecuteReader();
using (recordSet)
{
object value;
while (recordSet.Read())
{
UserPermissionModel model = new UserPermissionModel();
//if ((value = recordSet[recordSet.GetOrdinal("rootId")]) != System.DBNull.Value) model.rootId = (int)value;
//if ((value = recordSet[recordSet.GetOrdinal("id")]) != System.DBNull.Value) model.id = (int)value;
//if ((value = recordSet[recordSet.GetOrdinal("pid")]) != System.DBNull.Value) model.pid = (int)value;
//if ((value = recordSet[recordSet.GetOrdinal("leaf")]) != System.DBNull.Value) model.leaf = (bool)value;
//if ((value = recordSet[recordSet.GetOrdinal("hasAccess")]) != System.DBNull.Value) model.hasAccess = (bool)value;
//if ((value = recordSet[recordSet.GetOrdinal("expanded")]) != System.DBNull.Value) model.expanded = (bool)value;
//if ((value = recordSet[recordSet.GetOrdinal("loaded")]) != System.DBNull.Value) model.loaded = (bool)value;
//if ((value = recordSet[recordSet.GetOrdinal("text")]) != System.DBNull.Value) model.text = (string)value;
//if ((value = recordSet[recordSet.GetOrdinal("cls")]) != System.DBNull.Value) model.cls = (string)value;
//if ((value = recordSet[recordSet.GetOrdinal("iconCls")]) != System.DBNull.Value) model.iconCls = (string)value;
//if ((value = recordSet[recordSet.GetOrdinal("reference")]) != System.DBNull.Value) model.reference = (string)value;
//if ((value = recordSet[recordSet.GetOrdinal("url")]) != System.DBNull.Value) model.url = (string)value;
//rows.Add(model);
var properties = model.GetType().GetProperties();
foreach (var el in properties)
{
string name = el.Name;
value = recordSet[recordSet.GetOrdinal(name)];
if (value != System.DBNull.Value)
{
switch (el.PropertyType.Name)
{
case "Int32":
el.SetValue(model, (int)value);
break;
case "String":
el.SetValue(model, (string)value);
break;
case "Boolean":
el.SetValue(model, (bool)value);
break;
}
}
}
rows.Add(model);
}
recordSet.Close();
recordSet.Dispose();
if (outputValue.Value != null)
totalRecordCount = (int)outputValue.Value;
}
}
sqlConnection.Close();
sqlConnection.Dispose();
}
}
catch (Exception ex)
{
GIxUtils.Log(ex);
throw new Exception(ex.Message);
}
return rows;
}
public static int Add(UserPermissionModel model)
{
int i = DALUserPermission.AddUserPermission(model);
return(i);
}
public IActionResult AddPermissionToUser([FromBody] UserPermissionModel model)
{
_user.GivePermissonToUser(model.UserId, model.PermissionId);
return(Ok());
}
public static UserModel PrepareUserModel(IRoleService roleService, User aUser, IDistrictService districtService = null, IUpazilaService upazilaService = null, ISchoolService schoolService = null)
{
UserModel um = new UserModel();
um.Id = aUser.Id;
um.LoginName = aUser.LoginName;
um.Password = aUser.Password;
um.Email = aUser.Email;
um.Name = aUser.Employee.FullName;
um.Email = aUser.Employee.Email;
um.RoleId = aUser.RoleId;
if (aUser.EmployeeId > 0)
{
um.EmployeeId = aUser.EmployeeId;
}
if (aUser.RoleId > 0)
{
var role = roleService.GetRole(Convert.ToInt32(aUser.RoleId));
um.RoleName = role.Name;
um.Level = role.Level;
}
var lastEmpHistory = aUser.Employee.EmploymentHistories
.FirstOrDefault(x => x.DateTo == null);
var lastAdminEmpHistory = aUser.Employee.AdminEmploymentHistories
.FirstOrDefault(x => x.DateTo == null);
if (lastEmpHistory != null)
{
um.SchoolId = lastEmpHistory.SchoolId;
}
if (lastAdminEmpHistory != null)
{
if (lastAdminEmpHistory.DivisionId != null)
{
um.DivisionId = (int)lastAdminEmpHistory.DivisionId;
}
if (lastAdminEmpHistory.DistrictlId != null)
{
um.DistrictId = (int)lastAdminEmpHistory.DistrictlId;
}
}
um.IsActive = aUser.IsActive;
if (districtService != null && upazilaService != null && schoolService != null)
{
if (aUser.UserPermissions != null)
{
List <UserPermissionModel> userPermissionVMList = new List <UserPermissionModel>();
foreach (var userPermission in aUser.UserPermissions.OrderBy(a => a.UserId))
{
UserPermissionModel userTemp = new UserPermissionModel();
userTemp.Id = userPermission.Id;
userTemp.UserId = userPermission.UserId;
userTemp.DivisionId = userPermission.DivisionId;
var districtListObj = districtService.GetAllDistrict().Where(x => x.IsActive == true && x.DivisionId == userTemp.DivisionId || x.Id == 0);
foreach (var district in districtListObj)
{
DistrictModel districtTemp = new DistrictModel();
districtTemp.Id = district.Id;
districtTemp.Name = district.Name;
userTemp.DistrictList.Add(districtTemp);
}
userTemp.DistrictId = userPermission.DistrictId;
var upazilaListObj = upazilaService.GetAllUpazila().Where(x => x.DistrictId == userTemp.DistrictId && x.IsActive == true || x.Id == 0);
foreach (var upazila in upazilaListObj)
{
UpazilaModel upazilaTemp = new UpazilaModel();
upazilaTemp.Id = upazila.Id;
upazilaTemp.Name = upazila.Name;
userTemp.UpazilaList.Add(upazilaTemp);
}
userTemp.UpazilaId = userPermission.UpazilaId;
var schoolListObj = schoolService.GetAllSchool().Where(x => x.UpazilaId == userTemp.UpazilaId || x.Id == 0);
foreach (var school in schoolListObj)
{
SchoolModel schoolTemp = new SchoolModel();
schoolTemp.Id = school.Id;
schoolTemp.Name = school.Name;
userTemp.SchoolList.Add(schoolTemp);
}
userTemp.SchoolId = userPermission.SchoolId;
userPermissionVMList.Add(userTemp);
}
um.UserPermissions = userPermissionVMList;
}
}
return(um);
}
/// <summary>
/// 添加会员权益
/// </summary>
/// <param name="model"></param>
/// <returns></returns>
public static int Add(UserPermissionModel model)
{
var sqlParamerts = new List <SqlParameter>();
#region sql脚本
var strSql = @"
INSERT INTO Gungnir..tbl_UserPermission ( [Name] ,
[LightImage] ,
[DarkImage] ,
[Position] ,
[Description] ,
[IsEnable] ,
[IsLight] ,
[FootTile] ,
[DescriptionTitle] ,
[LightText] ,
[DarkText] ,
[MembershipsGradeId] ,
[PermissionType] ,
[EnabledVersion] ,
[EndVersion] ,
[CreateDatetime] ,
[CreateBy] ,
[LastUpdateDateTime] ,
[LastUpdateBy] ,
[IsDeleted] ,
[CheckCycle] ,
[IsLinkUrl] ,
[LightUrl] ,
[LightButtonUrl] ,
[CardImage] ,
[AndroidUrl] ,
[IOSUrl] ,
[DescriptionDetail] ,
[IsClickReceive] ,
[PromptTag]
)
VALUES ( @Name ,
@LightImage ,
@DarkImage ,
@Position ,
@Description ,
@IsEnable ,
@IsLight ,
@FootTile ,
@DescriptionTitle ,
@LightText ,
@DarkText ,
@MembershipsGradeId ,
@PermissionType ,
@EnabledVersion ,
@EndVersion ,
GETDATE(),
@CreateBy ,
GETDATE(),
@LastUpdateBy ,
0 ,
@CheckCycle ,
@IsLinkUrl ,
@LightUrl ,
@LightButtonUrl ,
@CardImage ,
@AndroidUrl ,
@IOSUrl ,
@DescriptionDetail ,
@IsClickReceive ,
@PromptTag
);
";
#endregion
#region 参数化赋值
sqlParamerts.Add(new SqlParameter("@Name", model.Name));
sqlParamerts.Add(new SqlParameter("@LightImage", model.LightImage));
sqlParamerts.Add(new SqlParameter("@DarkImage", model.DarkImage));
sqlParamerts.Add(new SqlParameter("@Position", model.Position));
sqlParamerts.Add(new SqlParameter("@Description", model.Description));
sqlParamerts.Add(new SqlParameter("@IsEnable", model.IsEnable));
sqlParamerts.Add(new SqlParameter("@IsLight", model.IsLight));
sqlParamerts.Add(new SqlParameter("@FootTile", model.FootTile));
sqlParamerts.Add(new SqlParameter("@DescriptionTitle", model.DescriptionTitle));
sqlParamerts.Add(new SqlParameter("@LightText", model.LightText));
sqlParamerts.Add(new SqlParameter("@DarkText", model.DarkText));
sqlParamerts.Add(new SqlParameter("@MembershipsGradeId", model.MembershipsGradeId));
sqlParamerts.Add(new SqlParameter("@PermissionType", model.PermissionType));
sqlParamerts.Add(new SqlParameter("@EnabledVersion", model.EnabledVersion));
sqlParamerts.Add(new SqlParameter("@EndVersion", model.EndVersion));
sqlParamerts.Add(new SqlParameter("@CreateBy", model.LastUpdateBy));
sqlParamerts.Add(new SqlParameter("@LastUpdateBy", model.LastUpdateBy));
sqlParamerts.Add(new SqlParameter("@CheckCycle", model.CheckCycle));
sqlParamerts.Add(new SqlParameter("@IsLinkUrl", model.IsLinkUrl));
sqlParamerts.Add(new SqlParameter("@LightUrl", model.LightUrl));
sqlParamerts.Add(new SqlParameter("@LightButtonUrl", model.LightButtonUrl));
sqlParamerts.Add(new SqlParameter("@CardImage", model.CardImage));
sqlParamerts.Add(new SqlParameter("@AndroidUrl", model.AndroidUrl));
sqlParamerts.Add(new SqlParameter("@IOSUrl", model.IOSUrl));
sqlParamerts.Add(new SqlParameter("@DescriptionDetail", model.DescriptionDetail));
sqlParamerts.Add(new SqlParameter("@IsClickReceive", model.IsClickReceive));
sqlParamerts.Add(new SqlParameter("@PromptTag", model.PromptTag));
#endregion
using (var cmd = new SqlCommand(strSql))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddRange(sqlParamerts.ToArray());
return(DbHelper.ExecuteNonQuery(cmd));
}
}
/// <summary>
/// 获取会员权益列表
/// </summary>
/// <param name="search"></param>
/// <param name="pageIndex"></param>
/// <param name="pageSize"></param>
/// <returns></returns>
public static List <UserPermissionModel> QueryPageList(UserPermissionModel search, int pageIndex, int pageSize)
{
var strSql = new StringBuilder();
var strCondition = new StringBuilder();
var sqlParamerts = new List <SqlParameter>();
#region 查询条件
if (search != null)
{
if (!string.IsNullOrWhiteSpace(search.Name))
{
strCondition.AppendFormat(" And Name like @Name");
sqlParamerts.Add(new SqlParameter("@Name", "%" + search.Name + "%"));
}
if (search.MembershipsGradeId > 0)
{
strCondition.AppendFormat(" And MembershipsGradeId=@MembershipsGradeId");
sqlParamerts.Add(new SqlParameter("@MembershipsGradeId", search.MembershipsGradeId));
}
}
#endregion
#region sql语句
strSql.AppendFormat(@"
SELECT *
FROM ( SELECT ROW_NUMBER() OVER ( ORDER BY Id desc ) AS rn ,
[Id] ,
[Name] ,
[LightImage] ,
[DarkImage] ,
[TopImage] ,
[Position] ,
[IsTopImage] ,
[UseUserLevel] ,
[Description] ,
[IsEnable] ,
[IsLight] ,
[FootTile] ,
[Version] ,
[DescriptionTitle] ,
[LightText] ,
[DarkText] ,
[MembershipsGradeId] ,
[PermissionType] ,
[EnabledVersion] ,
[EndVersion] ,
[CreateDatetime] ,
[CreateBy] ,
[LastUpdateDateTime] ,
[LastUpdateBy] ,
[IsDeleted] ,
[CheckCycle] ,
[IsLinkUrl] ,
[LightUrl] ,
[LightButtonUrl] ,
[CardImage] ,
[AndroidUrl] ,
[IOSUrl] ,
[DescriptionDetail] ,
[IsClickReceive] ,
[PromptTag]
FROM Gungnir.dbo.tbl_UserPermission WITH ( NOLOCK )
WHERE IsDeleted=0 {0}
) t WHERE t.rn > @StartRow AND t.rn <= @EndRow
ORDER BY Id DESC
", strCondition.ToString());
#endregion
sqlParamerts.Add(new SqlParameter("@StartRow", pageSize * (pageIndex - 1)));
sqlParamerts.Add(new SqlParameter("@EndRow", pageSize * pageIndex));
using (var dataCmd = new SqlCommand(strSql.ToString()))
{
dataCmd.Parameters.AddRange(sqlParamerts.ToArray());
return(DbHelper.ExecuteDataTable(dataCmd)?.ConvertTo <UserPermissionModel>().ToList());
}
}
/// <summary>
/// 更新会员权益
/// </summary>
/// <param name="model"></param>
/// <returns></returns>
public static int Update(UserPermissionModel model)
{
var sqlParamerts = new List <SqlParameter>();
#region sql脚本
var strSql = @"
UPDATE Gungnir..tbl_UserPermission WITH ( ROWLOCK )
SET [Name] = @Name ,
[LightImage] = @LightImage ,
[DarkImage] = @DarkImage ,
[Position] = @Position ,
[Description] = @Description ,
[IsEnable] = @IsEnable ,
[IsLight] = @IsLight ,
[FootTile] = @FootTile ,
[DescriptionTitle] = @DescriptionTitle ,
[LightText] = @LightText ,
[DarkText] = @DarkText ,
[MembershipsGradeId] = @MembershipsGradeId ,
[PermissionType] = @PermissionType ,
[EnabledVersion] = @EnabledVersion ,
[EndVersion] = @EndVersion ,
[LastUpdateDateTime] = @LastUpdateDateTime ,
[LastUpdateBy] = @LastUpdateBy ,
[CheckCycle] = @CheckCycle ,
[IsLinkUrl] = @IsLinkUrl ,
[LightUrl] = @LightUrl ,
[LightButtonUrl] = @LightButtonUrl ,
[AndroidUrl] = @AndroidUrl ,
[IOSUrl] = @IOSUrl ,
[DescriptionDetail] = @DescriptionDetail,
[CardImage]=@CardImage,
[IsClickReceive]=@IsClickReceive,
[PromptTag]=@PromptTag
WHERE Id = @Id
";
#endregion
#region 参数化赋值
sqlParamerts.Add(new SqlParameter("@Name", model.Name));
sqlParamerts.Add(new SqlParameter("@LightImage", model.LightImage));
sqlParamerts.Add(new SqlParameter("@DarkImage", model.DarkImage));
sqlParamerts.Add(new SqlParameter("@Position", model.Position));
sqlParamerts.Add(new SqlParameter("@Description", model.Description));
sqlParamerts.Add(new SqlParameter("@IsEnable", model.IsEnable));
sqlParamerts.Add(new SqlParameter("@IsLight", model.IsLight));
sqlParamerts.Add(new SqlParameter("@FootTile", model.FootTile));
sqlParamerts.Add(new SqlParameter("@DescriptionTitle", model.DescriptionTitle));
sqlParamerts.Add(new SqlParameter("@LightText", model.LightText));
sqlParamerts.Add(new SqlParameter("@DarkText", model.DarkText));
sqlParamerts.Add(new SqlParameter("@MembershipsGradeId", model.MembershipsGradeId));
sqlParamerts.Add(new SqlParameter("@PermissionType", model.PermissionType));
sqlParamerts.Add(new SqlParameter("@EnabledVersion", model.EnabledVersion));
sqlParamerts.Add(new SqlParameter("@EndVersion", model.EndVersion));
sqlParamerts.Add(new SqlParameter("@LastUpdateDateTime", model.LastUpdateDateTime));
sqlParamerts.Add(new SqlParameter("@LastUpdateBy", model.LastUpdateBy));
sqlParamerts.Add(new SqlParameter("@CheckCycle", model.CheckCycle));
sqlParamerts.Add(new SqlParameter("@IsLinkUrl", model.IsLinkUrl));
sqlParamerts.Add(new SqlParameter("@LightUrl", model.LightUrl));
sqlParamerts.Add(new SqlParameter("@LightButtonUrl", model.LightButtonUrl));
sqlParamerts.Add(new SqlParameter("@AndroidUrl", model.AndroidUrl));
sqlParamerts.Add(new SqlParameter("@IOSUrl", model.IOSUrl));
sqlParamerts.Add(new SqlParameter("@DescriptionDetail", model.DescriptionDetail));
sqlParamerts.Add(new SqlParameter("@CardImage", model.@CardImage));
sqlParamerts.Add(new SqlParameter("@IsClickReceive", model.@IsClickReceive));
sqlParamerts.Add(new SqlParameter("@PromptTag", model.PromptTag));
sqlParamerts.Add(new SqlParameter("@Id", model.Id));
#endregion
using (var cmd = new SqlCommand(strSql))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddRange(sqlParamerts.ToArray());
return(DbHelper.ExecuteNonQuery(cmd));
}
}
public ActionResult UserPermission()
{
var oModel = new UserPermissionModel();
var oResult = _db.UserTypes.Where(x => x.IsDeleted == false).ToList();
if (oResult.Count > 0)
{
oModel.LstUserTypes = User.UserTypeId == 1 ? oResult : oResult.Where(x => x.Id != 1).ToList();
}
var oUserTypePages = new UserTypePage();
oUserTypePages.UserTypeId = User.UserTypeId;
oModel.LstPages = _db.Pages.ToList();
var query = (
from userPage in _db.UserTypePages
join page in _db.Pages on userPage.PageId equals page.Id
select new
{
userPage.UserTypeId,
page.Id,
page.Name,
page.Link,
page.ParentId,
page.OrderId,
page.InMenu,
page.ForAdmin,
page.NeedLogin,
page.IsActive,
page.Icon,
page.TypeId
}).Where(x => x.UserTypeId == User.UserTypeId).ToList();
var lstPages = new List <Page>();
if (query.Count > 0)
{
for (int i = 0; i < query.Count; i++)
{
var page = new Page
{
Id = query[i].Id,
Name = query[i].Name,
Link = query[i].Link,
ParentId = query[i].ParentId,
OrderId = query[i].OrderId,
InMenu = query[i].InMenu,
ForAdmin = query[i].ForAdmin,
NeedLogin = query[i].NeedLogin,
IsActive = query[i].IsActive,
Icon = query[i].Icon,
TypeId = query[i].TypeId
};
lstPages.Add(page);
}
}
var oResulPages = lstPages;
if (oResulPages.Count > 0)
{
oModel.LstPages = oResulPages;
}
return(View(oModel));
}
public static int Update(UserPermissionModel model)
{
int i = DALUserPermission.UpdateUserPermission(model);
return(i);
}
