com.didiglobal.logi.security.service.impl.RoleServiceImpl Maven / Gradle / Ivy
The newest version!
package com.didiglobal.logi.security.service.impl;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.didiglobal.logi.security.common.PagingData;
import com.didiglobal.logi.security.common.constant.OplogConstant;
import com.didiglobal.logi.security.common.entity.role.Role;
import com.didiglobal.logi.security.common.entity.role.RoleBrief;
import com.didiglobal.logi.security.common.vo.role.AssignInfoVO;
import com.didiglobal.logi.security.common.dto.role.RoleAssignDTO;
import com.didiglobal.logi.security.common.dto.role.RoleQueryDTO;
import com.didiglobal.logi.security.common.dto.role.RoleSaveDTO;
import com.didiglobal.logi.security.common.vo.role.RoleBriefVO;
import com.didiglobal.logi.security.common.vo.role.RoleDeleteCheckVO;
import com.didiglobal.logi.security.common.vo.role.RoleVO;
import com.didiglobal.logi.security.common.dto.message.MessageDTO;
import com.didiglobal.logi.security.common.dto.oplog.OplogDTO;
import com.didiglobal.logi.security.common.enums.message.MessageCode;
import com.didiglobal.logi.security.common.vo.permission.PermissionTreeVO;
import com.didiglobal.logi.security.common.enums.ResultCode;
import com.didiglobal.logi.security.common.vo.user.UserBriefVO;
import com.didiglobal.logi.security.dao.RoleDao;
import com.didiglobal.logi.security.exception.LogiSecurityException;
import com.didiglobal.logi.security.service.*;
import java.text.SimpleDateFormat;
import java.util.*;
import java.util.stream.Collectors;
import com.didiglobal.logi.security.util.CopyBeanUtil;
import com.didiglobal.logi.security.util.HttpRequestUtil;
import com.didiglobal.logi.security.util.MathUtil;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;
import org.springframework.util.CollectionUtils;
import org.springframework.util.StringUtils;
import javax.servlet.http.HttpServletRequest;
/**
* @author cjm
*/
@Service("logiSecurityRoleServiceImpl")
public class RoleServiceImpl implements RoleService {
@Autowired
private RoleDao roleDao;
@Autowired
private PermissionService permissionService;
@Autowired
private MessageService messageService;
@Autowired
private OplogService oplogService;
@Autowired
private UserService userService;
@Autowired
private RolePermissionService rolePermissionService;
@Autowired
private UserRoleService userRoleService;
@Override
public RoleVO getRoleDetailByRoleId(Integer roleId) {
Role role = roleDao.selectByRoleId(roleId);
if(role == null) {
return null;
}
// 根据角色id去查权限树
PermissionTreeVO permissionTreeVO = permissionService.buildPermissionTreeByRoleId(role.getId());
RoleVO roleVo = CopyBeanUtil.copy(role, RoleVO.class);
roleVo.setPermissionTreeVO(permissionTreeVO);
roleVo.setCreateTime(role.getCreateTime().getTime());
// 获取授予用户数
List userIdList = userRoleService.getUserIdListByRoleId(roleId);
roleVo.setAuthedUserCnt(userIdList.size());
return roleVo;
}
@Override
public PagingData getRolePage(RoleQueryDTO queryDTO) {
IPage pageInfo = roleDao.selectPage(queryDTO);
List roleVOList = new ArrayList<>();
for(Role role : pageInfo.getRecords()) {
RoleVO roleVO = CopyBeanUtil.copy(role, RoleVO.class);
// 获取该角色已分配给的用户数
roleVO.setAuthedUserCnt(userRoleService.getUserRoleCountByRoleId(role.getId()));
roleVO.setCreateTime(role.getCreateTime().getTime());
roleVOList.add(roleVO);
}
return new PagingData<>(roleVOList, pageInfo);
}
@Override
@Transactional(rollbackFor = Exception.class)
public void createRole(RoleSaveDTO roleSaveDTO, HttpServletRequest request) throws LogiSecurityException {
Integer userId = HttpRequestUtil.getOperatorId(request);
// 检查参数
checkParam(roleSaveDTO, false);
// 保存角色信息
Role role = CopyBeanUtil.copy(roleSaveDTO, Role.class);
// 设置修改人信息
UserBriefVO userBriefVO = userService.getUserBriefByUserId(userId);
if(userBriefVO != null) {
role.setLastReviser(userBriefVO.getUsername());
}
// 设置角色编号
role.setRoleCode("r" + MathUtil.getRandomNumber(7));
roleDao.insert(role);
// 保持角色与权限的关联信息
rolePermissionService.saveRolePermission(role.getId(), roleSaveDTO.getPermissionIdList());
// 保存操作日志
oplogService.saveOplogWithUserId(userId,
new OplogDTO(OplogConstant.RM, OplogConstant.RM_A, OplogConstant.RM_R, roleSaveDTO.getRoleName()));
}
@Override
@Transactional(rollbackFor = Exception.class)
public void deleteRoleByRoleId(Integer roleId, HttpServletRequest request) throws LogiSecurityException {
Role role = roleDao.selectByRoleId(roleId);
if(role == null) {
return;
}
// 检查该角色是否和用户绑定
List userIdList = userRoleService.getUserIdListByRoleId(roleId);
if(!userIdList.isEmpty()) {
throw new LogiSecurityException(ResultCode.ROLE_USER_AUTHED);
}
// 删除角色与权限的关联
rolePermissionService.deleteRolePermissionByRoleId(roleId);
// 逻辑删除（自动）
roleDao.deleteByRoleId(roleId);
// 保存操作日志
OplogDTO oplogDTO = new OplogDTO(OplogConstant.RM, OplogConstant.RM_D, OplogConstant.RM_R, role.getRoleName());
oplogService.saveOplogWithUserId(HttpRequestUtil.getOperatorId(request), oplogDTO);
}
@Override
@Transactional(rollbackFor = Exception.class)
public void updateRole(RoleSaveDTO saveDTO, HttpServletRequest request) throws LogiSecurityException {
Integer userId = HttpRequestUtil.getOperatorId(request);
if(roleDao.selectByRoleId(saveDTO.getId()) == null) {
throw new LogiSecurityException(ResultCode.ROLE_NOT_EXISTS);
}
checkParam(saveDTO, true);
// 更新角色基本信息
Role role = CopyBeanUtil.copy(saveDTO, Role.class);
// 设置修改人信息
UserBriefVO userBriefVO = userService.getUserBriefByUserId(userId);
if(userBriefVO != null) {
role.setLastReviser(userBriefVO.getUsername());
}
roleDao.update(role);
// 更新角色与权限关联信息
rolePermissionService.updateRolePermission(role.getId(), saveDTO.getPermissionIdList());
// 保存操作日志
oplogService.saveOplogWithUserId(userId,
new OplogDTO(OplogConstant.RM, OplogConstant.RM_E, OplogConstant.RM_R, saveDTO.getRoleName()));
}
@Override
@Transactional(rollbackFor = Exception.class)
public void assignRoles(RoleAssignDTO assignDTO, HttpServletRequest request) throws LogiSecurityException {
Integer operatorId = HttpRequestUtil.getOperatorId(request);
if(assignDTO.getFlag() == null) {
throw new LogiSecurityException(ResultCode.ROLE_ASSIGN_FLAG_IS_NULL);
}
if(Boolean.TRUE.equals(assignDTO.getFlag())) {
// N个角色分配给1个用户
Integer userId = assignDTO.getId();
// 获取old的用户与角色的关系
List oldRoleIdList = userRoleService.getRoleIdListByUserId(userId);
// 更新关联信息
userRoleService.updateUserRoleByUserId(userId, assignDTO.getIdList());
// 保存操作日志
UserBriefVO userBriefVO = userService.getUserBriefByUserId(assignDTO.getId());
Integer oplogId = oplogService.saveOplogWithUserId(operatorId,
new OplogDTO(OplogConstant.UM, OplogConstant.UM_AR, OplogConstant.UM_U, userBriefVO.getUsername()));
// 打包和保存角色更新消息
packAndSaveMessage(oplogId, oldRoleIdList, assignDTO);
} else {
// 1个角色分配给N个用户
Integer roleId = assignDTO.getId();
// 获取old的用户与角色的关系
List oldUserIdList = userRoleService.getUserIdListByRoleId(roleId);
// 更新关联信息
userRoleService.updateUserRoleByRoleId(roleId, assignDTO.getIdList());
// 保存操作日志
Role role = roleDao.selectByRoleId(assignDTO.getId());
Integer oplogId = oplogService.saveOplogWithUserId(operatorId,
new OplogDTO(OplogConstant.RM, OplogConstant.RM_AU, OplogConstant.RM_R, role.getRoleName()));
// 打包和保存角色更新消息
packAndSaveMessage(oplogId, oldUserIdList, assignDTO);
}
}
@Override
public List getRoleBriefListByRoleName(String roleName) {
List roleBriefList = roleDao.selectBriefListByRoleNameAndDescOrderByCreateTime(roleName);
return CopyBeanUtil.copyList(roleBriefList, RoleBriefVO.class);
}
@Override
public RoleDeleteCheckVO checkBeforeDelete(Integer roleId) {
if(roleId == null) {
return null;
}
RoleDeleteCheckVO roleDeleteCheckVO = new RoleDeleteCheckVO();
roleDeleteCheckVO.setRoleId(roleId);
// 获取用户idList
List userIdList = userRoleService.getUserIdListByRoleId(roleId);
if(!CollectionUtils.isEmpty(userIdList)) {
// 获取用户简要信息List
List list = userService.getUserBriefListByUserIdList(userIdList);
List usernameList = list.stream().map(UserBriefVO::getUsername).collect(Collectors.toList());
roleDeleteCheckVO.setUsernameList(usernameList);
}
return roleDeleteCheckVO;
}
@Override
public List getAllRoleBriefList() {
List roleBriefList = roleDao.selectAllBrief();
return CopyBeanUtil.copyList(roleBriefList, RoleBriefVO.class);
}
@Override
public List getRoleBriefListByUserId(Integer userId) {
// 查询用户关联的角色
List roleIdList = userRoleService.getRoleIdListByUserId(userId);
if(CollectionUtils.isEmpty(roleIdList)) {
return new ArrayList<>();
}
List roleBriefList = roleDao.selectBriefListByRoleIdList(roleIdList);
return CopyBeanUtil.copyList(roleBriefList, RoleBriefVO.class);
}
@Override
public List getAssignInfoByRoleId(Integer roleId) {
if(roleId == null) {
return new ArrayList<>();
}
// 获取用户List
List userBriefVOList = userService.getAllUserBriefList();
// 先获取该角色已分配的用户，并转为set
List userIdList = userRoleService.getUserIdListByRoleId(roleId);
Set hasRoleUserIdSet = new HashSet<>(userIdList);
// 封装List
List result = new ArrayList<>();
for(UserBriefVO userBriefVO : userBriefVOList) {
AssignInfoVO assignInfoVO = new AssignInfoVO();
// 判断用户是否拥有该角色
assignInfoVO.setHas(hasRoleUserIdSet.contains(userBriefVO.getId()));
assignInfoVO.setName(userBriefVO.getUsername() + "/" + userBriefVO.getRealName());
assignInfoVO.setId(userBriefVO.getId());
result.add(assignInfoVO);
}
return result;
}
private void packAndSaveMessage(Integer oplogId, List oldIdList, RoleAssignDTO roleAssignDTO) {
List newIdList = roleAssignDTO.getIdList();
List removeIdList = new ArrayList<>();
List addIdList = new ArrayList<>();
// 取交集
Set set = MathUtil.getIntersection(oldIdList, newIdList);
for(Integer oldId : oldIdList) {
if(!set.contains(oldId)) {
removeIdList.add(oldId);
}
}
for(Integer newId : newIdList) {
if(!set.contains(newId)) {
addIdList.add(newId);
}
}
if (Boolean.TRUE.equals(roleAssignDTO.getFlag())) {
// 如果是N个角色分配给1个用户，oldIdList和newIdList都为角色idList
List userIdList = new ArrayList<>();
userIdList.add(roleAssignDTO.getId());
// 保存移除角色消息 和 新增角色消息
saveRoleAssignMessage(oplogId, userIdList, removeIdList, userIdList, addIdList);
} else {
// 1个角色分配给N个用户，oldIdList和newIdList都为用户idList
List roleIdList = new ArrayList<>();
roleIdList.add(roleAssignDTO.getId());
// 保存移除角色消息 和 新增角色消息
saveRoleAssignMessage(oplogId, removeIdList, roleIdList, addIdList, roleIdList);
}
}
/**
* 保存用户角色变更消息
* @param oplogId 操作日志id
* @param removeUserIdList 被移除角色的用户idList
* @param removeRoleIdList 移除的角色idList
* @param addUserIdList 新增角色的用户idList
* @param addRoleIdList 新增的角色idList
*/
private void saveRoleAssignMessage(Integer oplogId,
List removeUserIdList, List removeRoleIdList,
List addUserIdList, List addRoleIdList) {
// 获取当前时间
SimpleDateFormat formatter= new SimpleDateFormat("MM-dd HH:mm");
Date date = new Date(System.currentTimeMillis());
String time = formatter.format(date);
// 拼接变更的角色信息
String addRoleInfo = spliceRoleNameByRoleIdList(addRoleIdList);
String removeRoleInfo = spliceRoleNameByRoleIdList(removeRoleIdList);
List messageDTOList = new ArrayList<>();
if(!StringUtils.isEmpty(addRoleInfo)) {
for(Integer userId : addUserIdList) {
MessageDTO messageDTO = new MessageDTO(userId, oplogId);
// 赋值占位符
String content = String.format(MessageCode.ROLE_ADD_MESSAGE.getContent(), time, addRoleInfo);
messageDTO.setContent(content);
messageDTO.setTitle(MessageCode.ROLE_ADD_MESSAGE.getTitle());
messageDTOList.add(messageDTO);
}
}
if(!StringUtils.isEmpty(removeRoleInfo)) {
for(Integer userId : removeUserIdList) {
MessageDTO messageDTO = new MessageDTO(userId, oplogId);
// 赋值占位符
String content = String.format(MessageCode.ROLE_REMOVE_MESSAGE.getContent(), time, removeRoleInfo);
messageDTO.setContent(content);
messageDTO.setTitle(MessageCode.ROLE_REMOVE_MESSAGE.getTitle());
messageDTOList.add(messageDTO);
}
}
messageService.saveMessages(messageDTOList);
}
private String spliceRoleNameByRoleIdList(List roleIdList) {
List roleBriefList = roleDao.selectBriefListByRoleIdList(roleIdList);
if(roleBriefList.isEmpty()) {
return null;
}
// 拼接角色信息
StringBuilder sb = new StringBuilder();
for(int i = 0; i < roleBriefList.size() - 1; i++) {
sb.append(roleBriefList.get(i).getRoleName()).append(",");
}
sb.append(roleBriefList.get(roleBriefList.size() - 1).getRoleName());
return sb.toString();
}
/**
* 添加或者修改时候检查参数
* @param saveDTO 角色信息
* @param isUpdate 是创建还是更新
* @throws LogiSecurityException 校验错误
*/
private void checkParam(RoleSaveDTO saveDTO, boolean isUpdate) throws LogiSecurityException {
if(StringUtils.isEmpty(saveDTO.getRoleName())) {
throw new LogiSecurityException(ResultCode.ROLE_NAME_CANNOT_BE_BLANK);
}
if(StringUtils.isEmpty(saveDTO.getDescription())) {
throw new LogiSecurityException(ResultCode.ROLE_DEPT_CANNOT_BE_BLANK);
}
if(CollectionUtils.isEmpty(saveDTO.getPermissionIdList())) {
throw new LogiSecurityException(ResultCode.ROLE_PERMISSION_CANNOT_BE_NULL);
}
// 如果是更新操作，则判断项目名重复的时候要排除old信息
Integer roleId = isUpdate ? saveDTO.getId() : null;
int count = roleDao.selectCountByRoleNameAndNotRoleId(saveDTO.getRoleName(), roleId);
if(count > 0) {
// 角色名不可重复
throw new LogiSecurityException(ResultCode.ROLE_NAME_ALREADY_EXISTS);
}
}
}