entityaccessutility.java

开源项目CRM之OpenCustomer

package org.opencustomer.db;

import java.util.Iterator;

import org.apache.log4j.Logger;
import org.opencustomer.application.db.vo.system.UserVO;
import org.opencustomer.application.db.vo.system.UsergroupVO;
import org.opencustomer.db.vo.EntityAccess;

public class EntityAccessUtility
{
    private final static Logger log = Logger.getLogger(EntityAccessUtility.class);

    public static boolean isAccessGranted(UserVO user, EntityAccess entity, EntityAccess.Access access)
    {
        boolean accessGranted = false;

        if (log.isDebugEnabled())
            log.debug("check access (" + access + ") for user: " + user);

        if (access != null)
        {
            if (EntityAccess.Access.READ.equals(access))
            {
                if (!entity.getGlobalAccess().equals(EntityAccess.Access.NONE))
                    accessGranted = true;
                if (!entity.getGroupAccess().equals(EntityAccess.Access.NONE) && isUserInUsergroup(user, entity.getGroupOwner()))
                    accessGranted = true;
                if (!entity.getUserAccess().equals(EntityAccess.Access.NONE) && entity.getUserOwner().equals(user.getId()))
                    accessGranted = true;
            }
            else if (EntityAccess.Access.WRITE.equals(access))
            {
                if (entity.getGlobalAccess().equals(EntityAccess.Access.WRITE))
                    accessGranted = true;
                if (entity.getGroupAccess().equals(EntityAccess.Access.WRITE) && isUserInUsergroup(user, entity.getGroupOwner()))
                    accessGranted = true;

                if (entity.getUserAccess().equals(EntityAccess.Access.WRITE) && entity.getUserOwner().equals(user.getId()))
                    accessGranted = true;
            }
        }
        if (log.isDebugEnabled())
            log.debug("access (" + access + ") granted " + accessGranted + "  for entity: " + entity);

        return accessGranted;
    }

    private static boolean isUserInUsergroup(UserVO user, int usergroupId)
    {
        boolean found = false;

        Iterator<UsergroupVO> usergroups = user.getUsergroups().iterator();
        while (usergroups.hasNext())
        {
            if (usergroups.next().getId() == usergroupId)
            {
                found = true;
                break;
            }
        }

        return found;
    }

}