// -------------------------------------------------------
// 执行方法
// -------------------------------------------------------
#region 属性:Invoke(string methodName, XmlDocument doc)
/// <summary>执行方法</summary>
/// <param name="methodName">方法名称</param>
/// <param name="doc">Xml 文档元素</param>
/// <param name="logger">日志对象</param>
public static string Invoke(string methodName, XmlDocument doc, ILog logger)
{
IMethod method = null;
// 应用方法信息
ApplicationMethodInfo param = AppsContext.Instance.ApplicationMethodService.FindOneByName(methodName);
if (param == null)
{
logger.Warn(string.Format(I18n.Exceptions["text_web_api_method_not_exists"], methodName));
throw new GenericException(I18n.Exceptions["code_web_api_method_not_exists"],
string.Format(I18n.Exceptions["text_web_api_method_not_exists"], methodName));
}
// 应用方法所属的应用信息
ApplicationInfo application = param.Application;
if (param.Status == 0)
{
throw new GenericException(I18n.Exceptions["code_web_api_method_is_disabled"],
string.Format(I18n.Exceptions["text_web_api_method_is_disabled"], methodName));
}
if (param.EffectScope == 1)
{
// 允许所有人可以访问
}
else
{
// 当前用户信息
IAccountInfo account = KernelContext.Current == null ? null : KernelContext.Current.User;
if (param.EffectScope == 2 && account == null)
{
// 需要【登录用户】以上级别权限才能调用此方法
throw new GenericException(I18n.Exceptions["code_web_api_method_need_elevated_privileges"],
string.Format(I18n.Exceptions["text_web_api_method_need_elevated_privileges"], methodName, "登录用户"));
}
else if (param.EffectScope == 4 && !(AppsSecurity.IsMember(account, application.ApplicationName) || AppsSecurity.IsReviewer(account, application.ApplicationName) || AppsSecurity.IsAdministrator(account, application.ApplicationName)))
{
// 需要【应用可访问成员】以上级别权限才能调用此方法
throw new GenericException(I18n.Exceptions["code_web_api_method_need_elevated_privileges"],
string.Format(I18n.Exceptions["text_web_api_method_need_elevated_privileges"], methodName, "应用可访问成员"));
}
else if (param.EffectScope == 8 && !(AppsSecurity.IsReviewer(account, application.ApplicationName) || AppsSecurity.IsAdministrator(account, application.ApplicationName)))
{
// 需要【应用审查员】以上级别权限才能调用此方法
throw new GenericException(I18n.Exceptions["code_web_api_method_need_elevated_privileges"],
string.Format(I18n.Exceptions["text_web_api_method_need_elevated_privileges"], methodName, "应用审查员"));
}
else if (param.EffectScope == 16 && !AppsSecurity.IsAdministrator(account, application.ApplicationName))
{
// 需要【应用管理员】以上级别权限才能调用此方法
throw new GenericException(I18n.Exceptions["code_web_api_method_need_elevated_privileges"],
string.Format(I18n.Exceptions["text_web_api_method_need_elevated_privileges"], methodName, "应用管理员"));
}
}
Dictionary <string, string> options = new Dictionary <string, string>();
JsonObject optionObjects = null;
try
{
optionObjects = JsonObjectConverter.Deserialize(param.Options);
}
catch (Exception ex)
{
logger.Error("methodName:" + methodName + ",options:" + param.Options);
logger.Error(ex);
throw;
}
foreach (string key in optionObjects.Keys)
{
if (optionObjects[key] is JsonPrimary)
{
options.Add(key, ((JsonPrimary)optionObjects[key]).Value.ToString());
}
else if (optionObjects[key] is JsonObject)
{
StringBuilder outString = new StringBuilder();
JsonObject obj = (JsonObject)optionObjects[key];
outString.Append("{");
foreach (string objkey in obj.Keys)
{
outString.AppendFormat("\"{0}\":\"{1}\",", objkey, ((JsonPrimary)obj[objkey]).Value.ToString());
}
outString = StringHelper.TrimEnd(outString, ",");
outString.Append("}");
options.Add(key, outString.ToString());
}
else if (optionObjects[key] is JsonArray)
{
StringBuilder outString = new StringBuilder();
JsonArray list = (JsonArray)optionObjects[key];
outString.Append("[");
for (int i = 0; i < list.Count; i++)
{
if (list[i] is String || list[i] is DateTime)
{
outString.AppendFormat("\"{0}\",", list[i].ToString());
}
else
{
outString.AppendFormat("{0},", list[i].ToString());
}
}
outString = StringHelper.TrimEnd(outString, ",");
outString.Append("]");
options.Add(key, outString.ToString());
}
}
IDictionary <string, string> types = APIsConfigurationView.Instance.Configuration.APIMethodTypes;
if (param.Type == "generic")
{
method = new GenericMethod(options, doc);
}
else if (types.ContainsKey(param.Type))
{
method = (IMethod)KernelContext.CreateObject(types[param.Type], options, doc);;
}
;
if (method != null)
{
object result = method.Execute();
return(result == null ? string.Empty : result.ToString());
}
return(string.Empty);
}
/// <summary>查询所有相关记录</summary>
/// <param name="query">数据查询参数</param>
/// <returns>返回所有实例<see cref="ApplicationMenuInfo"/>的详细信息</returns>
public IList <ApplicationMenuQueryInfo> FindAllQueryObject(DataQuery query)
{
Dictionary <string, object> args = new Dictionary <string, object>();
StringBuilder whereClause = new StringBuilder();
if (query.Variables["scence"] == "Search")
{
// query.Where.Add("AppKey", appKey);
// query.Where.Add("Code", bankCodes);
whereClause.Append(" Status = 5 ");
if (query.Where.ContainsKey("AppKey") && query.Where.ContainsKey("Code"))
{
if (query.Where["Code"].ToString() == "0")
{
DataQueryBuilder.Equal(query.Where, "AppKey", whereClause);
}
else
{
query.Where["Code"] = "'" + query.Where["Code"].ToString().Replace(",", "','") + "'";
DataQueryBuilder.Equal(query.Where, "AppKey", whereClause);
DataQueryBuilder.In(query.Where, "Code", whereClause);
}
}
else if (query.Where.ContainsKey("Id"))
{
if (query.Where["Id"].ToString() == "0")
{
// =0 返回全库
}
else
{
DataQueryBuilder.In(query.Where, "Id", whereClause);
}
}
args.Add("WhereClause", whereClause);
}
else
{
args.Add("WhereClause", query.GetWhereSql(new Dictionary <string, string>()
{
{ "Name", "LIKE" }
}));
}
args.Add("OrderBy", query.GetOrderBySql(" Id DESC "));
args.Add("Length", query.Length);
// 普通用户只能看到授权范围内的内容
if (!AppsSecurity.IsAdministrator(KernelContext.Current.User, AppsConfiguration.ApplicationName) && !AppsSecurity.IsReviewer(KernelContext.Current.User, AppsConfiguration.ApplicationName))
{
args["WhereClause"] = this.BindAuthorizationScopeSQL((string)args["WhereClause"]);
}
return(this.ibatisMapper.QueryForList <ApplicationMenuQueryInfo>(StringHelper.ToProcedurePrefix(string.Format("{0}_FindAllQueryObject", tableName)), args));
}