Examples with MethodFeature io.jpom.permission.MethodFeature used on opensource projects

Example 1 with MethodFeature

use of io.jpom.permission.MethodFeature in project Jpom by dromara.

the class UserBindWorkspaceService method updateUserWorkspace.

/**
 * 更新用户的工作空间信息
 *
 * @param userId    用户ID
 * @param workspace 工作空间信息
 */
public void updateUserWorkspace(String userId, List<String> workspace) {
    Assert.notEmpty(workspace, "没有任何工作空间信息");
    List<UserBindWorkspaceModel> list = new HashSet<>(workspace).stream().filter(s -> {
        s = StrUtil.removeSuffix(s, SYSTEM_USER);
        s = StrUtil.removeSuffix(s, SSH_COMMAND_NOT_LIMITED);
        MethodFeature[] values = MethodFeature.values();
        for (MethodFeature value : values) {
            s = StrUtil.removeSuffix(s, StrUtil.DASHED + value.name());
        }
        return workspaceService.exists(new WorkspaceModel(s));
    }).map(s -> {
        UserBindWorkspaceModel userBindWorkspaceModel = new UserBindWorkspaceModel();
        userBindWorkspaceModel.setWorkspaceId(s);
        userBindWorkspaceModel.setUserId(userId);
        userBindWorkspaceModel.setId(UserBindWorkspaceModel.getId(userId, s));
        return userBindWorkspaceModel;
    }).collect(Collectors.toList());
    // 删除之前的数据
    UserBindWorkspaceModel userBindWorkspaceModel = new UserBindWorkspaceModel();
    userBindWorkspaceModel.setUserId(userId);
    super.del(super.dataBeanToEntity(userBindWorkspaceModel));
    // 重新入库
    super.insert(list);
}

Example 2 with MethodFeature

use of io.jpom.permission.MethodFeature in project Jpom by dromara.

the class MonitorUserOptService method listByType.

/**
 * 查询 对应操作的监控信息
 *
 * @param workspaceId   工作空间ID
 * @param classFeature  功能
 * @param methodFeature 操作
 * @return list
 */
public List<MonitorUserOptModel> listByType(String workspaceId, ClassFeature classFeature, MethodFeature methodFeature, String userId) {
    MonitorUserOptModel where = new MonitorUserOptModel();
    if (StrUtil.isNotEmpty(workspaceId)) {
        // 没有工作空间查询全部
        where.setWorkspaceId(workspaceId);
    }
    where.setStatus(true);
    List<MonitorUserOptModel> list = super.listByBean(where);
    if (CollUtil.isEmpty(list)) {
        return null;
    }
    return list.stream().filter(monitorUserOptModel -> {
        List<ClassFeature> classFeatures = monitorUserOptModel.monitorFeature();
        List<MethodFeature> methodFeatures = monitorUserOptModel.monitorOpt();
        boolean b = CollUtil.contains(classFeatures, classFeature) && CollUtil.contains(methodFeatures, methodFeature);
        if (b) {
            List<String> monitorUser = monitorUserOptModel.monitorUser();
            return CollUtil.contains(monitorUser, userId);
        }
        return false;
    }).collect(Collectors.toList());
}

Example 3 with MethodFeature

use of io.jpom.permission.MethodFeature in project Jpom by dromara.

the class PermissionInterceptor method preHandle.

@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, HandlerMethod handlerMethod) throws Exception {
    this.init();
    this.addNode(request);
    UserModel userModel = BaseServerController.getUserModel();
    if (userModel == null || userModel.isSuperSystemUser()) {
        // 没有登录、或者超级管理直接放过
        return true;
    }
    // 
    boolean permission = this.checkSystemPermission(userModel, request, response, handlerMethod);
    if (!permission) {
        return false;
    }
    permission = this.checkNodeDataPermission(userModel, request, response, handlerMethod);
    if (!permission) {
        return false;
    }
    Feature feature = handlerMethod.getMethodAnnotation(Feature.class);
    if (feature == null) {
        return true;
    }
    MethodFeature method = feature.method();
    if (ArrayUtil.contains(DEMO, method) && userModel.isDemoUser()) {
        this.errorMsg(response, DEMO_TIP);
        return false;
    }
    ClassFeature classFeature = feature.cls();
    if (classFeature == ClassFeature.NULL) {
        Feature feature1 = handlerMethod.getBeanType().getAnnotation(Feature.class);
        if (feature1 != null && feature1.cls() != ClassFeature.NULL) {
            classFeature = feature1.cls();
        }
    }
    // 判断功能权限
    if (method != MethodFeature.LIST) {
        String workspaceId = ServletUtil.getHeader(request, Const.WORKSPACEID_REQ_HEADER, CharsetUtil.CHARSET_UTF_8);
        boolean exists = userBindWorkspaceService.exists(userModel.getId(), workspaceId + StrUtil.DASHED + method.name());
        if (!exists) {
            this.errorMsg(response, "您没有对应功能【" + classFeature.getName() + StrUtil.DASHED + method.getName() + "】管理权限");
            return false;
        }
    }
    return true;
}

Example 4 with MethodFeature

use of io.jpom.permission.MethodFeature in project Jpom by dromara.

the class MonitorUserOptListController method getOperateTypeList.

/**
 * 操作监控类型列表
 *
 * @return json
 */
@RequestMapping(value = "type_data", method = RequestMethod.POST, produces = MediaType.APPLICATION_JSON_VALUE)
@Feature(method = MethodFeature.LIST)
public String getOperateTypeList() {
    JSONObject jsonObject = new JSONObject();
    // 
    List<JSONObject> classFeatureList = Arrays.stream(ClassFeature.values()).filter(classFeature -> classFeature != ClassFeature.NULL).map(classFeature -> {
        JSONObject jsonObject1 = new JSONObject();
        jsonObject1.put("title", classFeature.getName());
        jsonObject1.put("value", classFeature.name());
        return jsonObject1;
    }).collect(Collectors.toList());
    jsonObject.put("classFeature", classFeatureList);
    // 
    List<JSONObject> methodFeatureList = Arrays.stream(MethodFeature.values()).filter(methodFeature -> methodFeature != MethodFeature.NULL && methodFeature != MethodFeature.LIST).map(classFeature -> {
        JSONObject jsonObject1 = new JSONObject();
        jsonObject1.put("title", classFeature.getName());
        jsonObject1.put("value", classFeature.name());
        return jsonObject1;
    }).collect(Collectors.toList());
    jsonObject.put("methodFeature", methodFeatureList);
    return JsonMessage.getString(200, "success", jsonObject);
}

Example 5 with MethodFeature

use of io.jpom.permission.MethodFeature in project Jpom by dromara.

the class MonitorUserOptListController method updateMonitor.

/**
 * 增加或修改监控
 *
 * @param id         id
 * @param name       name
 * @param notifyUser user
 * @return json
 */
@RequestMapping(value = "update", method = RequestMethod.POST, produces = MediaType.APPLICATION_JSON_VALUE)
@Feature(method = MethodFeature.EDIT)
public String updateMonitor(String id, @ValidatorItem(value = ValidatorRule.NOT_BLANK, msg = "监控名称不能为空") String name, String notifyUser, String monitorUser, String monitorOpt, String monitorFeature) {
    String status = getParameter("status");
    JSONArray jsonArray = JSONArray.parseArray(notifyUser);
    List<String> notifyUsers = jsonArray.toJavaList(String.class).stream().filter(Objects::nonNull).collect(Collectors.toList());
    Assert.notEmpty(notifyUsers, "请选择报警联系人");
    JSONArray monitorUserArray = JSONArray.parseArray(monitorUser);
    List<String> monitorUserArrays = monitorUserArray.toJavaList(String.class).stream().filter(Objects::nonNull).collect(Collectors.toList());
    Assert.notEmpty(monitorUserArrays, "请选择监控人员");
    JSONArray monitorOptArray = JSONArray.parseArray(monitorOpt);
    List<MethodFeature> monitorOptArrays = monitorOptArray.stream().map(o -> EnumUtil.fromString(MethodFeature.class, StrUtil.toString(o), null)).filter(Objects::nonNull).collect(Collectors.toList());
    Assert.notEmpty(monitorOptArrays, "请选择监控的操作");
    JSONArray monitorFeatureArray = JSONArray.parseArray(monitorFeature);
    List<ClassFeature> monitorFeatureArrays = monitorFeatureArray.stream().map(o -> EnumUtil.fromString(ClassFeature.class, StrUtil.toString(o), null)).filter(Objects::nonNull).collect(Collectors.toList());
    Assert.notEmpty(monitorFeatureArrays, "请选择监控的功能");
    boolean start = "on".equalsIgnoreCase(status);
    MonitorUserOptModel monitorModel = monitorUserOptService.getByKey(id);
    if (monitorModel == null) {
        monitorModel = new MonitorUserOptModel();
    }
    monitorModel.monitorUser(monitorUserArrays);
    monitorModel.setStatus(start);
    monitorModel.monitorOpt(monitorOptArrays);
    monitorModel.monitorFeature(monitorFeatureArrays);
    monitorModel.notifyUser(notifyUsers);
    monitorModel.setName(name);
    if (StrUtil.isEmpty(id)) {
        // 添加监控
        monitorUserOptService.insert(monitorModel);
        return JsonMessage.getString(200, "添加成功");
    }
    monitorUserOptService.update(monitorModel);
    return JsonMessage.getString(200, "修改成功");
}