itemuserrole.java

一个新闻发布系统的源代码

package com.easyjf.item.business;

import com.easyjf.bbs.business.ActiveUser;
import com.easyjf.bbs.business.UserInfo;

public class ItemUserRole {
private boolean administrator;//是否超级管理员
private boolean manager;//是否站长,即网站管理员
private boolean voteRights;//是否具胡投票权
private boolean teamLeader;//项目小组组成
private boolean validateUser;//是否EasyJF成员合法用户
private boolean member;//easyjf成员
public static  ItemUserRole getUserRole(Object obj,ActiveUser user)
{	
	ItemUserRole role=new ItemUserRole();	
	if(user==null ||(user.getUserName().equals(""))){		
		return role;	
	}
	UserInfo u=UserInfo.readByUserName(user.getUserName().trim());
	if(u.getStatus()==null || (u.getStatus().intValue()<0)){//用户已经被锁定
		return role;
	}
	if(obj!=null && (obj instanceof ItemGroup))
	{
		ItemGroup o=(ItemGroup)obj;
		if(o.getManager()!=null && o.getManager().trim().equals(u.getUserName()))role.setTeamLeader(true);
	}	
	if(u.getTypes()!=null){
   //这里逻辑上还存在安全漏洞
    if("member".equals(u.getTypes().trim())||"admin".equals(u.getTypes().trim())||"manager".equals(u.getTypes().trim())||"easyjf".equals(u.getTypes().trim()))
    	role.setMember(true);
	if("admin".equals(u.getTypes()))role.setManager(true);
	if("manager".equals(u.getTypes().trim()))role.setAdministrator(true);	
	}
	return role;
}
public boolean isAdministrator() {
	return administrator;
}
public void setAdministrator(boolean administrator) {
	this.administrator = administrator;
}
public boolean isManager() {
	return manager;
}
public void setManager(boolean manager) {
	this.manager = manager;
}
public boolean isTeamLeader() {
	return teamLeader;
}
public void setTeamLeader(boolean teamLeader) {
	this.teamLeader = teamLeader;
}
public boolean isValidateUser() {
	return validateUser;
}
public void setValidateUser(boolean validateUser) {
	this.validateUser = validateUser;
}
public boolean isVoteRights() {
	return voteRights;
}
public void setVoteRights(boolean voteRights) {
	this.voteRights = voteRights;
}

public boolean isMember() {
	return member;
}
public void setMember(boolean member) {
	this.member = member;
}
	/**
	 * @param args
	 */
	public static void main(String[] args) {
		// TODO Auto-generated method stub

	}
}