jeesite多个角色，交叉对一条数据的读取解决权限

这里主要解决的是多个角色，交叉对一条数据的读取解决权限，jeesite如何设置多个权限参考官方文档

1、BaseService在原有的文档中添加以下红色内容

public static String dataScopeFilter(String permission,User user, String officeAlias, String userAlias) {

 

StringBuilder sqlString = new StringBuilder();

// 进行权限过滤，多个角色权限范围之间为或者关系。

List<String> dataScope = Lists.newArrayList();

 

// 超级管理员，跳过权限过滤

if (!user.isAdmin()){

boolean isDataScopeAll = false;

for (Role r : user.getRoleList()){

Set<String> permissions=new HashSet<String>();

for (Menu menu : r.getMenuList()) {

permissions.add(menu.getPermission());

}

for (String oa : StringUtils.split(officeAlias, ",")){

if (!dataScope.contains(r.getDataScope()) && StringUtils.isNotBlank(oa)&&permissions.contains(permission)){

if (Role.DATA_SCOPE_ALL.equals(r.getDataScope())){

isDataScopeAll = true;

}

 

 

2、RoleDao.xml添加红色内容

<select id="findList" resultMap="roleResult">

SELECT <!-- DISTINCT -->

<include refid="roleColumns"/>,

ro.office_id AS "officeList.id",

rm.menu_id AS "menuList.id",

rmd.permission AS "menuList.permission"

FROM sys_role a

LEFT JOIN sys_office o ON o.id = a.office_id

LEFT JOIN sys_user_role ur ON ur.role_id = a.id

LEFT JOIN sys_user u ON u.id = ur.user_id

LEFT JOIN sys_role_office ro ON ro.role_id = a.id

LEFT JOIN sys_role_menu rm ON rm.role_id = a.id 

LEFT JOIN sys_menu rmd ON rmd.id = rm.menu_id

 

 

3、Controller调用增加红色部分

 

assessrec.getSqlMap().put("dsf", BaseService.dataScopeFilter("edu:emp:assessrec:view",assessrec.getCurrentUser(),"o","u"));