powerutil.java

Struts_Spring_Hibernate实现的基于RBAC的权限管理系统

package com.xaccp.util;

import java.util.Map;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import com.xaccp.biz.po.User;
import com.xaccp.biz.service.power.PowerStrategy;
import com.xaccp.biz.service.power.PowerStrategyFactory;

public class PowerUtil {
	
	private static User user;
	private static Map powerMap;
	
	private static void getUserAndPower(HttpServletRequest request) {
		HttpSession session = request.getSession();
		user = (User)session.getAttribute(PowerConstants.USER_KEY);
		powerMap = (Map)session.getAttribute(PowerConstants.USER_POWER_KEY);
	}
	
	public static boolean isUserInPower(HttpServletRequest request, String powerShortName) {
		
		getUserAndPower(request);
		if (user==null || powerMap==null) return false;
		//获取策略
		PowerStrategy strategy = PowerStrategyFactory.create(user.getStrategy());

		return strategy.isHavePower(powerShortName, powerMap);
	}
	
	public static void assertUserInPower(HttpServletRequest request, String powerShortName) throws NoSuchPowerException {
		boolean flag = isUserInPower(request, powerShortName);
		if (!flag) throw new NoSuchPowerException();
	}
	
	
}