authoritybean.java

一些数据库的java开发编程

package jdbcbook.msgboard;

import javax.servlet.http.*;
import javax.servlet.*;
import java.io.*;

import jdbcbook.pub.util.*;

public class AuthorityBean
{
	// 判断一个用户是否有权限操作该留言
	public static boolean hasAuthority( Article art, HttpServletRequest request )
	{
		if( art==null || request==null )
			return false;

		HttpSession session = request.getSession();
		UserInfo user = (UserInfo)session.getAttribute( "session_userinfo" );

		if( user==null ) 
			return false;
		
		return user.getUserID()==art.getUserID() || user.getType()==UserInfo.TYPE_ADMIN;

	}

	// 判断一个用户是否有权限操作该留言
	public static boolean hasAuthority( int nArticleID, HttpServletRequest request )
	{
		Article art = ArticleBean.getArticle( nArticleID );
		return hasAuthority( art, request );
	}

	public static boolean isAdmin( HttpServletRequest request, HttpServletResponse response )
			throws ServletException, IOException
	{
		HttpSession session = request.getSession();
		UserInfo user = (UserInfo)session.getAttribute( "session_userinfo" );

		if( user==null || !user.isAdmin() )
		{
			RequestUtil.setMsg( Article.class, request, "isnotadmin" );
			RequestDispatcher dispatcher = request.getRequestDispatcher( "logon.jsp" );
			dispatcher.forward( request, response );
			return false;
		}
		return true;
	}

}