/// <summary> /// 获取角色可(查看、编辑、删除)模块中哪些组织下的数据,返回可(查看、编辑、删除) /// 的组织Id集合字典, /// 第一个参数为组织Id,第二个参数为是否来自父角色的权限,非当前 /// 角色的权限 /// </summary> /// <param name="roleId">角色Id</param> /// <param name="moduleId">模块Id</param> /// <param name="dataPermissionType">数据权限类型,0-查看,1-编辑,2-删除</param> /// <param name="read">是否为应用读取</param> /// <returns>返回组织Id集合字典</returns> public Dictionary <string, bool> GetRoleDataPermissions(Guid roleId, Guid moduleId, int dataPermissionType, bool read = false) { string errMsg = string.Empty; Dictionary <string, bool> dic = new Dictionary <string, bool>(); //取当前角色的数据权限 Sys_PermissionData permissionData = this.GetEntity(out errMsg, x => x.Sys_RoleId == roleId && x.Sys_ModuleId == moduleId && !x.IsDeleted); string orgIdsStr = string.Empty; if (permissionData != null) { orgIdsStr = dataPermissionType == 0 ? permissionData.CanViewOrgIds : (dataPermissionType == 1 ? permissionData.CanEditOrgIds : permissionData.CanDelOrgIds); } if (!string.IsNullOrWhiteSpace(orgIdsStr)) { string[] token = orgIdsStr.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries); if (read && token.Contains("-1")) { dic.Add("-1", false); return(dic); } foreach (string orgId in token) { dic.Add(orgId, false); } } //取父角色的数据权限 List <Guid> parentsRoleIds = ObjectReferenceClass.GetParentsRoleId(roleId); //获取所有父角色 foreach (Guid tempRoleId in parentsRoleIds) { Sys_PermissionData tempPermission = this.GetEntity(out errMsg, x => x.Sys_RoleId == tempRoleId && x.Sys_ModuleId == moduleId && !x.IsDeleted); string tempOrgIdsStr = string.Empty; if (tempPermission != null) { tempOrgIdsStr = dataPermissionType == 0 ? tempPermission.CanViewOrgIds : (dataPermissionType == 1 ? tempPermission.CanEditOrgIds : tempPermission.CanDelOrgIds); } if (!string.IsNullOrWhiteSpace(tempOrgIdsStr)) { string[] token = tempOrgIdsStr.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries); if (read && token.Contains("-1")) { dic.Add("-1", false); return(dic); } foreach (string orgId in token) { if (dic.ContainsKey(orgId)) { continue; } dic.Add(orgId, true); } } } return(dic); }
/// <summary> /// 获取角色(查看、新增、编辑)字段权限,返回允许(查看、新增、编辑)的字段名字典, /// 第一个参数为字段名,第二个参数为是否来自父角色的权限, /// 非当前角色权限 /// </summary> /// <param name="roleId">角色Id</param> /// <param name="moduleId">模块Id</param> /// <param name="fieldPermissionType">字段权限类型,0-查看,1-新增,2-编辑</param> /// <param name="read">是否为应用读取,应用读取快速返回</param> /// <returns>返回允许(查看、新增、编辑)的字段名字典</returns> public Dictionary <string, bool> GetRoleFieldPermissions(Guid roleId, Guid moduleId, int fieldPermissionType, bool read = false) { string errMsg = string.Empty; Dictionary <string, bool> dic = new Dictionary <string, bool>(); //取当前角色的字段权限 Sys_PermissionField permissionField = this.GetEntity(out errMsg, x => x.Sys_RoleId == roleId && x.Sys_ModuleId == moduleId && !x.IsDeleted); string fields = string.Empty; if (permissionField != null) { fields = fieldPermissionType == 0 ? permissionField.CanViewFields : (fieldPermissionType == 1 ? permissionField.CanAddFields : permissionField.CanEditFields); } if (!string.IsNullOrWhiteSpace(fields)) { string[] token = fields.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries); if (read && token.Contains("-1")) //应用读取 { dic.Add("-1", false); return(dic); } foreach (string field in token) { dic.Add(field, false); } } //取父角色的字段权限 List <Guid> parentsRoleIds = ObjectReferenceClass.GetParentsRoleId(roleId); //获取所有父角色 foreach (Guid tempRoleId in parentsRoleIds) { Sys_PermissionField tempPermission = this.GetEntity(out errMsg, x => x.Sys_RoleId == tempRoleId && x.Sys_ModuleId == moduleId && !x.IsDeleted); string tempFields = string.Empty; if (tempPermission != null) { tempFields = fieldPermissionType == 0 ? tempPermission.CanViewFields : (fieldPermissionType == 1 ? tempPermission.CanAddFields : tempPermission.CanEditFields); } if (!string.IsNullOrWhiteSpace(tempFields)) { string[] token = tempFields.Split(",".ToCharArray(), StringSplitOptions.RemoveEmptyEntries); foreach (string field in token) { if (dic.ContainsKey(field)) { continue; } dic.Add(field, true); } } } return(dic); }
/// <summary> /// 获取角色功能权限,子角色默认继承父角色的所有权限,当前返回字典, /// 字典第一个参数为功能Id(菜单或按钮Id),第二个参数为是否该功能Id继承父角色, /// 非当前角色所有 /// </summary> /// <param name="roleId">角色Id</param> /// <param name="functionType">功能类型,菜单或网格按钮,0-菜单,1-按钮</param> /// <param name="moduleId">模块ID,针对按钮需要</param> /// <returns>返回功能Id、是否来自父角色的权限字典</returns> public Dictionary <Guid, bool> GetRoleFunPermissions(Guid roleId, int functionType, Guid?moduleId) { string errMsg = string.Empty; //取当前角色的功能权限 Expression <Func <Sys_PermissionFun, bool> > exp = x => x.Sys_RoleId == roleId && x.FunType == functionType && x.IsDeleted == false; if (functionType == 1 && moduleId.HasValue) { string mId = moduleId.Value.ToString().ToUpper(); Expression <Func <Sys_PermissionFun, bool> > tempExp = x => x.Des == mId; exp = ExpressionExtension.And <Sys_PermissionFun>(exp, tempExp); } List <Sys_PermissionFun> permissionFuns = this.GetEntities(out errMsg, exp, null, false); Dictionary <Guid, bool> dic = new Dictionary <Guid, bool>(); if (permissionFuns != null && permissionFuns.Count > 0) { List <Guid> funIds = permissionFuns.Select(x => x.FunId).Distinct().ToList(); dic = funIds.ToDictionary(x => x, y => false); } //取所有父角色的功能权限 List <Guid> parentsRoleIds = ObjectReferenceClass.GetParentsRoleId(roleId); //获取所有父角色 foreach (Guid tempRoleId in parentsRoleIds) { List <Sys_PermissionFun> tempFuns = this.GetEntities(out errMsg, x => x.Sys_RoleId == tempRoleId && x.FunType == functionType && !x.IsDeleted, null, false); if (tempFuns != null && tempFuns.Count > 0) { List <Guid> funIds = tempFuns.Select(x => x.FunId).ToList(); foreach (Guid funId in funIds) { if (dic.Keys.Contains(funId)) { continue; } dic.Add(funId, true); } } } return(dic); }