purview.asp

诚信商店系统源代码

<%@LANGUAGE="VBScript"%>
<!--#include file="../public/wxl_conn.asp"-->
<!--#include file="../public/PublicFunction.asp"-->
<%

response.expires = 0
Const PageSize=10
Page=CInt(request("Page"))
if Page<=0 then Page=1
wxl=request("wxl")
SystemId=request("SystemId")

'显示指定系统的菜单
if wxl="" then
 HtmlHead("选择用户或用户组-[权限设置]")
 OutHead()
 HtmlEnd

elseif wxl="ShowOper" then
  if SystemId="" then response.end
  ShowOper(SystemId)

'显示操作权限
elseif wxl="ShowMenu" then
  dim tmpPurview(4),tmpGroup(4),tmpPurview0(4)
  IsGroup=request("IsGroup")
  PurviewMenuId=request("PurviewMenuId")
  If IsGroup="" then Back("请选择增加类型!")
  if IsGroup=1 then
     PurviewId=request("PurviewGId")
     Query="Select int_sOperGrpID,str_sOperGrpName from web_SysOperGroup where int_sOperGrpID="&PurviewId
	 TypeName1="用户组"
  else
     PurviewId=request("PurviewOId")
     Query="Select int_sOperID,str_sOperName,int_sOperGrpID from web_SysOperators where int_sOperID="&PurviewId
	 TypeName1="用户"
  end if
  if PurviewId="" then Back("请选择用户组或者操作员!")
  set sql=conn.Execute(Query)
  TitleName=sql(1)
  if IsGroup=0 then OperGroup=sql(2)
  HtmlHead("类型："&TypeName1&"&nbsp;&nbsp;名称："&TitleName&"&nbsp;&nbsp;---[设置操作权限]")
  ShowMenu(PurviewMenuId)
  HtmlEnd

elseif wxl="AddPurivew" then
  IsGroup=request("IsGroup")
  If IsGroup="" then Back("请选择增加类型!")
  PurviewId=request("PurviewId")
  if PurviewId="" then Back("请选择用户组或者操作员!")
  if IsGroup=0 then
    strTitle=GetOperName(PurviewId)
  else
    strTitle=GetName("select str_sOperGrpName from web_SysOperGroup where int_sOperGrpID="&PurviewId)
  end if
  num=request("AddMenuId").count
  for i=1 to num
    SelectPurview=request("SelectPurview")(i)
    if SelectPurview="1" or  SelectPurview="0" then
      Query="select int_sPvwID from web_SysPurview where int_sOperID ="&PurviewId&" and Int_sPvwMenuID="&request("AddMenuId")(i)&" and int_sPvwType="&IsGroup
      set tmpSql=Conn.Execute(Query)
      if tmpSql.eof then
        Query="Insert into web_SysPurview (int_sOperID,Int_sPvwMenuID,int_sPvwState,int_sPvwType) values('"
        Query=Query&PurviewId&"',"&request("AddMenuId")(i)&","&SelectPurview&","&IsGroup&")"
		 'response.write Query&"<br>"
		 conn.Execute(Query)

      else
         Query="Update web_SysPurview set int_sPvwState="&SelectPurview&" where int_sPvwID="&tmpSql("int_sPvwID")
         'response.write Query&"<br>"
		 conn.Execute(Query)
      end if
	 else
   '   if IsGroup=1 then
	     Query="delete from web_SysPurview where int_sOperID ="&PurviewId&" and  Int_sPvwMenuID="&request("AddMenuId")(i)&" and int_sPvwType="&IsGroup
		' response.write Query&"<br>"
		conn.Execute(Query)
   '   end if
	 end if
  next

%>
<script language='javascript'>
  alert('指定权限分配成功!');
  window.location.href = "<%=request.servervariables("SCRIPT_NAME")&"?SystemId="&SystemId%>";
</script>
<%
end if

'显示指定系统的菜单
sub ShowMenu(PurviewMenuId)
   Query="select * from web_SysMenu where int_sMenuPID=0  Order by int_sMenuID"
   set sql=server.createobject("ADODB.recordset")
   sql.open Query,conn,1,1
%>
<table border="1" width="650" cellpadding="3" cellspacing="0" bgcolor="#D6D3CE" bordercolordark="#FFFFFF" bordercolorlight="#808080" align="center" >
<form name=form1 action="<%=UrlFile%>" method="POST" >
    <tr bgcolor=#DDDDDD class=pt2>
      <td <%if IsGroup=0 then response.write "rowspan=2"%>>操作功能</td>
      <td <%if IsGroup=0 then response.write "colspan=2"%>>操作权限</td>
   </tr>
<%if IsGroup=0 then%>
  <tr bgcolor=#DDDDDD class=pt2> 
    <td>个人</td>
    <td>所属组</td>
  </tr>
<%
  end if
    while not sql.eof
	 GetPurview(sql("int_sMenuID"))
	 GetPurview1 sql("int_sMenuID"),OperGroup
%>
    <tr bgcolor=#DDDDDD>
      <td>
        <img src='images/<%if sql("int_sMenuPID")<>0 then %>sxicon4.gif<%else%>sxicon3.gif<%end if%>'><font size="2" color=blue><%=sql("str_sMenuName")%></font>
      </td>
      <td>&nbsp;<%=tmpGroup(0)%>
	 </td>
   </tr>
<%
   TmpString="&nbsp;&nbsp;"
   TypeString="├"
   NextMenu sql(0),TmpString,TypeString,1
   sql.movenext
 wend%>
<%if IsGroup=0 then%>
  <tr bgcolor=#DDDDDD class=pt2> 
    <td <%if IsGroup=0 then response.write "rowspan=2"%>>操作功能</td>
	<td>个人</td>
    <td>所属组</td>
  </tr>
<%
  end if
%>
	<tr bgcolor=#DDDDDD class=pt2>
      <%if IsGroup=1 then%><td>操作功能</td><%end if%>
      <td <%if IsGroup=0 then response.write "colspan=2"%>>操作权限</td>
   </tr>
	<tr  align=left bgcolor=#ffffff> 
      <td colspan=9>
	   说明：<UL>
	<LI>用户权限高于用户组的操作权限：如果同时设置了用户组和用户对同一功能的操作权限，则只认用户权限。
	<LI>上级功能的权限高于所包含的子功能的权限：如果某功能不能使用，则本功能的所以子功能都不能使用。
</UL>
	  </td>
	</tr>
	</table>
          <table border="0" width="100%" cellspacing="0" cellpadding="0" bgcolor=#DDDDDD>
            <tr>
              <td height="6"></td>
            </tr>
            <tr >
              <td height="2" align="center">
			  <input type="submit" value="  确 认" name="B1" class="submit" style="width:60; height:25;">&nbsp;&nbsp;  
                &nbsp; <input type="reset" value="  返 回" name="B2" class="submit" style="width:60; height:25;" onClick="history.back();"></td> 
            </tr>
            <tr>
              <td height="6"></td>
            </tr>
          </table>
          <input type=hidden name="Issuer" value=<%=Issuer%>>
          <input type=hidden name="SystemId" value=<%=SystemId%>>
		  <input type=hidden name="IsGroup" value=<%=IsGroup%>>
		  <input type=hidden name="PurviewId" value=<%=PurviewId%>>
          <input type=hidden name="wxl" value="AddPurivew">
</form>
<%
end sub

sub NextMenu(RootMenuId,TmpString,TypeString,i)
 i=i+1
 TmpString1=TmpString&"&nbsp;&nbsp;"
 Query="select web_SysMenu.int_sMenuID,web_SysMenu.str_sMenuName from web_SysMenu where  int_sMenuPID="&RootMenuId&" Order by Len(web_SysMenu.str_sMenuName)"
 set sql1=server.createobject("ADODB.recordset")
 sql1.open Query,conn,1,1
 while not sql1.eof
   RootMenuId=sql1(0)
   GetPurview(sql1("int_sMenuID"))
   GetPurview1 sql1("int_sMenuID"),OperGroup
%>
    <tr bgcolor="#FFFFFF">
      <td>
        <% = TmpString1&"<img src=images/menu7.gif><img src=images/sxicon3.gif>"%>
        <font size="2"><%="<input type=hidden name=AddMenuId value="&sql1("int_sMenuID")&">"&sql1("str_sMenuName")%></font>
      </td>
      <td>
	    <select name=SelectPurview>
          <%if IsGroup=0 then response.write "<option value='3'>由组决定</option>"%>
		  <option value=0 <%=tmpPurview0(0)%>>否</option>
		  <option value=1 <%=tmpPurview(0)%>>是</option>
		</select><%=tmpGroup(0)%>
	  </td>
    </tr>

<%
 sql1.movenext
 wend
end sub

'输出网页头
sub OutHead()
'显示所有组
 Query="Select int_sOperGrpID,str_sOperGrpName from web_SysOperGroup order by int_sOperGropTime"
 set sql=Conn.Execute(Query)
 SelectGroup=""
 while not sql.eof
   SelectGroup=SelectGroup&"<option value='"&sql("int_sOperGrpID")&"'>"&sql("str_sOperGrpName")&"</option>"
   sql.movenext
 wend
'显示所有操作员 
 Query="Select int_sOperID,str_sOperName from web_SysOperators where bln_sOperIsDeleted=0 order by str_sOperName"
 set sql=Conn.Execute(Query)
 SelectOper=""
 while not sql.eof
   SelectOper=SelectOper&"<option value='"&sql(0)&"'>"&sql(1)&"</option>"
   sql.movenext
 wend 
%>
  <form name='form1' method='post' action=<%=request.servervariables("SCRIPT_NAME")%>>
    <table width="670" border="0" cellspacing="1" cellpadding="3" align="center" bgcolor="#666666">
     <tr bgcolor=#DDDDDD>
      <td colspan=2>增加类型：</td>
	  <td rowspan="6" width=450>
         <IFRAME width=450 frameBorder=0 height="300" id=HtmlEditer name=HtmlGroup scrolling=auto src="purview.asp?wxl=ShowOper"></IFRAME>	  
	  </td>
	 </tr>
	 <tr bgcolor=#FFFFFF>
	  <td class=pt1 width=60><input type='radio' name='IsGroup' value='1' onClick="form1.PurviewGId.disabled=0;form1.PurviewOId.disabled=1;">用户组</td>
      <td>
<script language=javascript>
   function changepage(selObj) 
   { 
    eval("HtmlGroup.location='purview.asp?wxl=ShowOper&SystemId="+selObj.options[selObj.selectedIndex].value+"'");
   }
</script>

		 <select name='PurviewGId' disabled onchange="changepage(this)">
		  <option value=''>--请选择用户组--</option>
		  <%=SelectGroup%>
	      <select>
      </td>
	</tr>
	<tr bgcolor=#FFFFFF>
      <td class=pt1><input type='radio' name='IsGroup' value='0' onClick="form1.PurviewGId.disabled=1;form1.PurviewOId.disabled=0;">操作员 </td>
      <td>
	    <select name='PurviewOId' disabled>
	    <option value=''>--请选择操作员--</option>
	    <%=SelectOper%>
	    </select>
      </td>
	</tr>
     <tr bgcolor=#DDDDDD>
      <td colspan=2>操作功能：</td>
	 </tr>
	 <tr bgcolor=#FFFFFF>
	  <td class=pt1 width=60></td>
      <td>
		 <select name='PurviewMenuId'>
		  <option value=''>--所有功能--</option>
<%
    Query="select * from web_SysMenu where int_sMenuPID=0 Order by int_sMenuID"
    set sql=conn.Execute(Query)
	while not sql.eof
	  response.write "<option value='"&sql(0)&"'>"&sql(1)&"</option>"
	 sql.movenext
	wend
%>

<select>
      </td>
	</tr>

    </table> 
          <table border="0" width="100%" cellspacing="0" cellpadding="0" bgcolor="#D6D3CE">
            <tr>
              <td height="6"></td>
            </tr>
            <tr>
              <td height="2" align="center">
			  <input type="submit" value="  下一步" name="B1" class="submit" style="width:60; height:25;">&nbsp;&nbsp;  
                &nbsp; <input type="reset" value="  返 回" name="B2" class="submit" style="width:60; height:25;" onClick="history.back();"></td> 
            </tr>
            <tr>
              <td height="6"></td>
            </tr>
          </table>
<input type=hidden name="wxl" value="ShowMenu">
</form>
<%
end sub

sub GetPurview(tmpMenuId)
  tmpPurview0(0)=""
  tmpPurview(0)=""
  Query="Select int_sPvwState from web_SysPurview where int_sOperID="&PurviewId&" and int_sPvwType="&IsGroup&" and Int_sPvwMenuID="&tmpMenuId
  set sqlPurview=server.createobject("ADODB.recordset")
  sqlPurview.open Query,conn,1,1
  if not sqlPurview.eof then
'   response.write sqlPurview(0)&sqlPurview(1)&sqlPurview(2)&sqlPurview(3)&"<br>"
   if sqlPurview(0)=1 then
     tmpPurview(0)=" selected"
   elseif sqlPurview(0)=0 then
     tmpPurview0(0)=" selected"
   end if 
  end if
end sub

sub GetPurview1(tmpMenuId1,int_sOperGrpID)
  if IsGroup=0 then
   if tmpMenuId1>10 then tmpGroup(0)="</td><td>&nbsp;否" else tmpGroup(0)="</td><td>&nbsp;" end if
   Query="Select int_sPvwState from web_SysPurview where int_sOperID='"&int_sOperGrpID&"' and int_sPvwType=1 and Int_sPvwMenuID='"&tmpMenuId1&"'"
   set sqlPurview1=server.createobject("ADODB.recordset")
   sqlPurview1.open Query,conn,1,1
   Query=""
   if not sqlPurview1.eof then
    if sqlPurview1(0) then tmpGroup(0)="</td><td>&nbsp;是"
   end if
  end if
end sub


sub ShowOper(SystemId)
 set sql3=server.createobject("ADODB.recordset")
 sql3.open "select str_sOperName from web_SysOperators where int_sOperGrpID="&SystemId ,conn,1,1

%>
<link rel="stylesheet" href="../js/style.css" type="text/css">
<body topmargin="0" leftmargin="0">
 <table width="450" border="0" cellspacing="1" cellpadding="2" align="center" bgcolor="#666666">
    <tr bgcolor=#ffffff>
      <td bgcolor=#ffffff>
<%
   while not sql3.eof
%>
        <span class="pt3"><%=sql3(0)%></span>
<%  sql3.movenext
   wend
 sql3.close
 set sql3=nothing

%>
	  </td>
	</tr>
<%
end sub



sub GetOper(tmpDept)
 set sql3=server.createobject("ADODB.recordset")
 sql3.open "select str_sOperName from web_SysOperators where int_sOperGrpID="&SystemId ,conn,1,1
   while not sql3.eof
%>
        <span class="pt3"><%=sql3(0)%></span>
<%  sql3.movenext
   wend
 sql3.close
 set sql3=nothing
end sub
%>