useroperate.java

完整的合同管理信息系统

package com.ICT.AFC.user.beans;

import java.sql.ResultSet;
import com.ICT.AFC.DB.DB;
import java.util.Vector;

public class UserOperate
    extends User {
  public UserOperate() {
  }

  public static User checkUser(DB db, String useraccount, String password) throws
      Exception {
    ResultSet rs;
    ResultSet rs2;
    String rightStr = "";
    String strSql = "select * from sys_user where Useraccount='" + useraccount +
        "'and Userpassword='"
        + password + "'";
    rs = db.OpenSql(strSql);
    User user = new User();
    if (rs.next()) {
      int roleid = Integer.parseInt(rs.getString("USERROLEID"));

      String strSql2 = "select * from M_ROLE_RIGHT where ROLEID=" + roleid;
      rs2 = db.OpenSql(strSql2);
      while (rs2.next()) {
        if (rightStr==""){
          rightStr = rightStr + rs2.getString("RIGHTID");
        }
        else{
           rightStr = rightStr +"-"+ rs2.getString("RIGHTID");
        }
      }
      user.setUserAccount(rs.getString("USERACCOUNT"));
      user.setUserPassword(rs.getString("USERPASSWORD"));
      user.setUserName(rs.getString("USERNAME"));
      user.setUserDepID(rs.getString("USERDEPID"));
      user.setUserRole(rs.getString("USERROLEID"));
      user.setUserRightStr(rightStr);
    }
    return user;
  }

  //判断此用户是否已存在
  public static boolean checkUser(DB db, String useraccount) throws
      Exception {
    ResultSet rs;
    String strSql = "select * from sys_user where useraccount='" + useraccount +
        "'";

    rs = db.OpenSql(strSql);

    if (rs.next()) {
      return false;
    }
    return true;
  }

  //添加用户基本信息
  public static void addUser(DB db, User user) throws Exception {

    String conditions = "select seq_user.nextval from dual";
    ResultSet rs = db.OpenSql(conditions);
    rs.next();
    int userId = rs.getInt(1); //提取id

    String strSql = "insert into sys_user(USERID,USERNAME,USERACCOUNT,USERPASSWORD,USERDEPID,USERREMARK,USERROLEID) values(?,?,?,?,?,?,?)";
    db.prepareStatement(strSql);
    db.setInt(1, userId);
    db.setString(2, user.getUserName());
    db.setString(3, user.getUserAccount());
    db.setString(4, user.getUserPassword());
    db.setString(5, user.getUserDep());
    db.setString(6, user.getUserRemark());
    db.setString(7, user.getUserRole());
    db.executeUpdate();

  }

  //删除用户基本信息
  public static boolean delUser(DB db, String userAccount) throws Exception {

    String strSql = "delete from sys_user where useraccount ='" + userAccount +
        "'";

    if (db.ExecSql(strSql) == 0) {
      System.out.println("order false");
      return false;

    }
    else {
      System.out.println("order true");
      return true;
    }
  }

  //系统管理员修改用户基本信息
  public static void modifyUser(DB db, String userAccount, User user) throws
      Exception {
    String strSql = "update sys_user set USERNAME='" + user.getUserName() +
        "',USERPASSWORD='" + user.getUserPassword() + "',USERDEPID='" +
        user.getUserDep() + "',USERROLEID='" + user.getUserRole() +
        "',USERREMARK='" + user.getUserRemark() + "' WHERE USERACCOUNT = '" +
        userAccount + "'";
    db.ExecSql(strSql);

  }

  //用户修改用户基本信息
  public static void userModifyUser(DB db, String userAccount, User user) throws
      Exception {
    String strSql = "update sys_user set USERNAME='" + user.getUserName() +
        "',USERPASSWORD='" + user.getUserPassword() + "',USERREMARK='" +
        user.getUserRemark() + "' WHERE USERACCOUNT = '" + userAccount + "'";
    db.ExecSql(strSql);

  }

  //查询所用用户
  public static Vector queryUser(DB db) throws Exception {
    ResultSet rs;
    String strSql = "select * from sys_user";
    Vector vector = new Vector();
    User user = null;

    for (rs = db.OpenSql(strSql); rs.next(); vector.add(user)) {
      user = new User();
      user.setUserAccount(rs.getString("USERACCOUNT"));
      user.setUserDepID(rs.getString("USERDEPID")); //用户所属部门
      user.setUserRole(rs.getString("USERROLEID")); //用户角色ID
      user.setUserRemark(rs.getString("USERREMARK"));
    }
    return vector;
  }
  public static boolean SearchRoleID(DB db, String roleid) throws Exception {

      ResultSet rs;
      String strSql = null;

      strSql = "select USERROLEID from SYS_USER where USERROLEID='" + roleid + "'";
      rs = db.OpenSql(strSql);
      if (rs.next()) {

        return true;
      }
      else {
        return false;
      }

    }

}