securitymanager.java

这个也是关于图书管理系统的代码

package com.xmspk.ebp.comm;

import com.xmspk.ebp.comm.UserBean;
import com.xmspk.ebp.database.ExceptionMessage;
import com.xmspk.ebp.database.ConnectionManager;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import java.sql.Statement;
import java.sql.Connection;
import java.sql.ResultSet;

/**
 * Created by Phyomh.Sam.
 * User: Phyomh
 * Date: Apr 2, 2003
 * Time: 9:47:44 AM
 */
public class SecurityManager {
    //权限控制,暂时采取直接访问数据库的方式
    public static boolean checkAccess(String connd, HttpServletRequest request) throws Exception {
        HttpSession session= request.getSession(false);
        if(session==null)return false;
        String username = (String) session.getAttribute("username");
        if(username==null)return false;
        Object o=  session.getAttribute(username);
        if(!(o instanceof UserBean)) return false;
        UserBean userb =(UserBean)o;
        String grpid = userb.grpID;

        Connection conn = null;
        Statement stmt = null;
        ResultSet rst=null;
        try {
            conn = ConnectionManager.getConnection();
            if (conn == null) throw ExceptionMessage.dataBaseBusy;
            stmt = conn.createStatement();
            String s = "select * from grp_conn where grp_id='"+grpid+"' and conn_id='"+connd+"'";
            rst = stmt.executeQuery(s);
            if(rst.next()) return true;
            else return false;
        } catch (Exception e) {
            throw e;
        } finally {
            if (stmt != null) stmt.close();
            if (conn != null) conn.close();
        }
    }
}