|
|
@@ -20,13 +20,13 @@ public class userright : IHttpHandler, IReadOnlySessionState
|
|
|
|
|
|
string jsonStr = "";
|
|
|
string userId = context.Request["id"].ToString();
|
|
|
-
|
|
|
- using(IDataAccess conn = DataAccess.Create())
|
|
|
+ string userIds = context.Request["userIds"].ToString();
|
|
|
+ using (IDataAccess conn = DataAccess.Create())
|
|
|
{
|
|
|
conn.BeginTransaction();
|
|
|
|
|
|
//读取权限
|
|
|
- if(context.Request["m"].ToString() == "t")
|
|
|
+ if (context.Request["m"].ToString() == "t")
|
|
|
{
|
|
|
//取用户权限
|
|
|
string rightStr = conn.ExecuteScalar(@"
|
|
|
@@ -38,7 +38,7 @@ public class userright : IHttpHandler, IReadOnlySessionState
|
|
|
USERID = @USERID@
|
|
|
AND FUNCTIONCODE IN (SELECT FUNCTIONCODE FROM TP_SYS_FUNCTION WHERE IS_WEB = '1')
|
|
|
",
|
|
|
- new CDAParameter("USERID",userId)
|
|
|
+ new CDAParameter("USERID", userId)
|
|
|
).ToString();
|
|
|
|
|
|
//取操作仓库范围权限
|
|
|
@@ -51,88 +51,91 @@ public class userright : IHttpHandler, IReadOnlySessionState
|
|
|
PURVIEWTYPE = 14
|
|
|
AND USERID = @USERID@
|
|
|
",
|
|
|
- new CDAParameter("USERID",userId)
|
|
|
+ new CDAParameter("USERID", userId)
|
|
|
).ToString();
|
|
|
|
|
|
//输出权限
|
|
|
JArray array = new JArray();
|
|
|
JObject json = new JObject(
|
|
|
- new JProperty("right",rightStr),
|
|
|
- new JProperty("purviewWareHouse",purviewWareHouseStr)
|
|
|
+ new JProperty("right", (string.IsNullOrEmpty(userIds) || !userIds.Contains(",")) ? rightStr : ""),
|
|
|
+ new JProperty("purviewWareHouse", purviewWareHouseStr)
|
|
|
);
|
|
|
array.Add(json);
|
|
|
jsonStr = new JsonResult(array).ToJson();
|
|
|
}
|
|
|
|
|
|
//修改权限 仅限WEB权限处理
|
|
|
- if(context.Request["m"].ToString() == "u")
|
|
|
+ if (context.Request["m"].ToString() == "u")
|
|
|
{
|
|
|
- //删除功能权限 TP_MST_USERRIGHT
|
|
|
- conn.ExecuteNonQuery(@"
|
|
|
+ string[] uidArray = userIds.Split(',');
|
|
|
+ for (int m = 0; m < uidArray.Length; m++)
|
|
|
+ {
|
|
|
+ //删除功能权限 TP_MST_USERRIGHT
|
|
|
+ conn.ExecuteNonQuery(@"
|
|
|
DELETE TP_MST_USERRIGHT
|
|
|
WHERE
|
|
|
FUNCTIONCODE IN ( SELECT FUNCTIONCODE FROM TP_SYS_FUNCTION WHERE FUNCTIONCODE LIKE '80%' )
|
|
|
AND USERID = @USERID@
|
|
|
",
|
|
|
- new CDAParameter("USERID",userId)
|
|
|
- );
|
|
|
- //写入功能权限
|
|
|
- if(context.Request["right"] is object)
|
|
|
- {
|
|
|
- string right = context.Request["right"].ToString();
|
|
|
- string[] rightArray = right.Split(',');
|
|
|
- for(int i=0;i<rightArray.Length;i++)
|
|
|
+ new CDAParameter("USERID", uidArray[m])
|
|
|
+ );
|
|
|
+ //写入功能权限
|
|
|
+ if (context.Request["right"] is object)
|
|
|
{
|
|
|
- if (rightArray[i] != "")
|
|
|
+ string right = context.Request["right"].ToString();
|
|
|
+ string[] rightArray = right.Split(',');
|
|
|
+ for (int i = 0; i < rightArray.Length; i++)
|
|
|
{
|
|
|
- conn.ExecuteNonQuery(@"
|
|
|
+ if (rightArray[i] != "")
|
|
|
+ {
|
|
|
+ conn.ExecuteNonQuery(@"
|
|
|
INSERT INTO TP_MST_USERRIGHT
|
|
|
( USERID, FUNCTIONCODE, CREATETIME, CREATEUSERID )
|
|
|
VALUES
|
|
|
( @USERID@, @FUNCTIONCODE@, SYSDATE, @CREATEUSERID@ )
|
|
|
",
|
|
|
- new CDAParameter("USERID", userId),
|
|
|
- new CDAParameter("FUNCTIONCODE", rightArray[i]),
|
|
|
- new CDAParameter("CREATEUSERID", context.Session["userId"])
|
|
|
- );
|
|
|
+ new CDAParameter("USERID", uidArray[m]),
|
|
|
+ new CDAParameter("FUNCTIONCODE", rightArray[i]),
|
|
|
+ new CDAParameter("CREATEUSERID", context.Session["userId"])
|
|
|
+ );
|
|
|
+ }
|
|
|
}
|
|
|
}
|
|
|
- }
|
|
|
|
|
|
|
|
|
- //删除范围权限 TP_MST_USERPURVIEW
|
|
|
- conn.ExecuteNonQuery(@"
|
|
|
+ //删除范围权限 TP_MST_USERPURVIEW
|
|
|
+ conn.ExecuteNonQuery(@"
|
|
|
DELETE TP_MST_USERPURVIEW
|
|
|
WHERE
|
|
|
PURVIEWTYPE = 14
|
|
|
AND USERID = @USERID@
|
|
|
",
|
|
|
- new CDAParameter("USERID",userId)
|
|
|
- );
|
|
|
- //写入范围权限
|
|
|
- if(context.Request["purviewWareHouse"] is object)
|
|
|
- {
|
|
|
- string purviewWareHouse = context.Request["purviewWareHouse"].ToString();
|
|
|
- string[] purviewWareHouseArray = purviewWareHouse.Split(',');
|
|
|
- for(int i=0;i<purviewWareHouseArray.Length;i++)
|
|
|
+ new CDAParameter("USERID", uidArray[m])
|
|
|
+ );
|
|
|
+ //写入范围权限
|
|
|
+ if (context.Request["purviewWareHouse"] is object)
|
|
|
{
|
|
|
- if (purviewWareHouseArray[i] != "")
|
|
|
+ string purviewWareHouse = context.Request["purviewWareHouse"].ToString();
|
|
|
+ string[] purviewWareHouseArray = purviewWareHouse.Split(',');
|
|
|
+ for (int i = 0; i < purviewWareHouseArray.Length; i++)
|
|
|
{
|
|
|
- conn.ExecuteNonQuery(@"
|
|
|
+ if (purviewWareHouseArray[i] != "")
|
|
|
+ {
|
|
|
+ conn.ExecuteNonQuery(@"
|
|
|
INSERT INTO TP_MST_USERPURVIEW
|
|
|
( USERID, PURVIEWID, PURVIEWTYPE, CREATETIME, CREATEUSERID )
|
|
|
VALUES
|
|
|
( @USERID@, @PURVIEWID@,14, SYSDATE, @CREATEUSERID@ )
|
|
|
",
|
|
|
- new CDAParameter("USERID", userId),
|
|
|
- new CDAParameter("PURVIEWID", purviewWareHouseArray[i]),
|
|
|
- new CDAParameter("CREATEUSERID", context.Session["userId"])
|
|
|
- );
|
|
|
+ new CDAParameter("USERID", uidArray[m]),
|
|
|
+ new CDAParameter("PURVIEWID", purviewWareHouseArray[i]),
|
|
|
+ new CDAParameter("CREATEUSERID", context.Session["userId"])
|
|
|
+ );
|
|
|
+ }
|
|
|
}
|
|
|
}
|
|
|
- }
|
|
|
-
|
|
|
|
|
|
+ }
|
|
|
|
|
|
jsonStr = new JsonResult(JsonStatus.success).ToJson();
|
|
|
conn.Commit();
|
