userrole.cs

动易SiteFactory&#8482 网上商店系统1.0源代码

namespace PowerEasy.SqlServerDal.UserManage
{
    using Microsoft.Practices.EnterpriseLibrary.Data;
    using PowerEasy.Enumerations;
    using PowerEasy.IDal.UserManage;
    using PowerEasy.Model.AccessManage;
    using PowerEasy.Model.UserManage;
    using PowerEasy.SqlServerDal;
    using System;
    using System.Collections.Generic;
    using System.Data;
    using System.Data.Common;
    using System.Text;

    public class UserRole : IUserRole
    {
        private int m_TotalOfRoles;

        public bool AccessCheckNodePermissions(string nodeId, OperateCode operateCode)
        {
            string strSql = "Select nodeId PE_Role_Node_Permissions where NodeId in (" + nodeId + ") And OperateCode = @OperateCode";
            Parameters cmdParams = new Parameters();
            cmdParams.AddInParameter("@OperateCode", DbType.Int32, operateCode);
            return DBHelper.ExistsSql(strSql, cmdParams);
        }

        public bool Add(RoleInfo roleInfo)
        {
            string strSql = "INSERT INTO PE_Roles(RoleId,RoleName,Description)VALUES(@RoleId,@RoleName,@Description)";
            roleInfo.RoleId = GetNewId();
            Parameters cmdParams = GetParameters(roleInfo);
            return DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public bool AddFieldPermissionToRoles(int roleId, int modelId, string fieldName, OperateCode operateCode)
        {
            string strSql = "INSERT INTO PE_Role_Field_Permissions(RoleId,ModelId,FieldName,OperateCode)VALUES(@RoleId,@ModelId,@FieldName,@OperateCode)";
            Parameters cmdParams = new Parameters();
            cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            cmdParams.AddInParameter("@ModelId", DbType.Int32, modelId);
            cmdParams.AddInParameter("@FieldName", DbType.String, fieldName);
            cmdParams.AddInParameter("@OperateCode", DbType.Int32, operateCode);
            return DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void AddNodePermissionToRoles(int roleId, int nodeId, OperateCode operateCode)
        {
            string strSql = "INSERT INTO PE_Role_Node_Permissions(RoleId,NodeId,OperateCode)VALUES(@RoleId,@NodeId,@OperateCode)";
            Parameters cmdParams = new Parameters();
            cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            cmdParams.AddInParameter("@NodeId", DbType.Int32, nodeId);
            cmdParams.AddInParameter("@OperateCode", DbType.Int32, operateCode);
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void AddPermissionToRoles(int roleId, OperateCode operateCode)
        {
            string strSql = "INSERT INTO PE_Roles_Permissions(RoleId,OperateCode)VALUES(@RoleId,@OperateCode)";
            Parameters cmdParams = new Parameters();
            cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            cmdParams.AddInParameter("@OperateCode", DbType.Int32, operateCode);
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void AddPermissionToRoles(int roleId, int operateCode)
        {
            string strSql = "INSERT INTO PE_Roles_Permissions(RoleId,OperateCode)VALUES(@RoleId,@OperateCode)";
            Parameters cmdParams = new Parameters();
            cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            cmdParams.AddInParameter("@OperateCode", DbType.Int32, operateCode);
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void AddSepcialPermissionToRoles(int roleId, int specialId, OperateCode operateCode)
        {
            string strSql = "INSERT INTO PE_Role_Special_Permissions(RoleId,SpecialId,OperateCode)VALUES(@RoleId,@SpecialId,@OperateCode)";
            Parameters cmdParams = new Parameters();
            cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            cmdParams.AddInParameter("@SpecialId", DbType.Int32, specialId);
            cmdParams.AddInParameter("@OperateCode", DbType.Int32, operateCode);
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        private static IList<string> CreateRoleList(Parameters parms, string strSqlText)
        {
            IList<string> list = new List<string>();
            using (NullableDataReader reader = DBHelper.ExecuteReaderSql(strSqlText, parms))
            {
                while (reader.Read())
                {
                    list.Add(reader.GetInt32("RoleId").ToString());
                }
            }
            return list;
        }

        public bool Delete(int roleId)
        {
            string strSql = "DELETE FROM PE_Roles WHERE RoleId=@RoleId";
            Parameters cmdParams = new Parameters("@RoleId", DbType.Int32, roleId);
            return DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void DeleteFieldPermissionFromRoles(int roleId, int modelId, string fieldName)
        {
            string strSql = "DELETE FROM PE_Role_Field_Permissions WHERE 1=1 ";
            Parameters cmdParams = new Parameters();
            if (roleId >= 0)
            {
                strSql = strSql + " AND RoleId=@RoleId ";
                cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            }
            if (modelId > 0)
            {
                strSql = strSql + " AND ModelId=@ModelId ";
                cmdParams.AddInParameter("@ModelId", DbType.Int32, modelId);
            }
            if (!string.IsNullOrEmpty(fieldName))
            {
                strSql = strSql + " AND FieldName=@FieldName ";
                cmdParams.AddInParameter("@FieldName", DbType.String, fieldName);
            }
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void DeleteNodePermissionFromRoles(int roleId, int nodeId)
        {
            string strSql = "DELETE FROM PE_Role_Node_Permissions WHERE 1=1 ";
            Parameters cmdParams = new Parameters();
            if (nodeId >= -1)
            {
                strSql = strSql + " AND NodeId=@NodeId ";
                cmdParams.AddInParameter("@NodeId", DbType.Int32, nodeId);
            }
            if (roleId >= 0)
            {
                strSql = strSql + " AND RoleId=@RoleId ";
                cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            }
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void DeleteNodePermissionFromRoles(int roleId, string nodeId)
        {
            string strSql = "DELETE FROM PE_Role_Node_Permissions WHERE RoleId=@RoleId AND NodeId in (" + nodeId + ")";
            Parameters cmdParams = new Parameters();
            cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void DeleteNodePermissionFromRoles(int roleId, int nodeId, OperateCode operateCode)
        {
            string strSql = "DELETE FROM PE_Role_Node_Permissions WHERE 1=1 ";
            Parameters cmdParams = new Parameters();
            if (nodeId >= -1)
            {
                strSql = strSql + " AND NodeId=@NodeId ";
                cmdParams.AddInParameter("@NodeId", DbType.Int32, nodeId);
            }
            if (roleId >= 0)
            {
                strSql = strSql + " AND RoleId=@RoleId ";
                cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            }
            strSql = strSql + " AND OperateCode=@OperateCode ";
            cmdParams.AddInParameter("@OperateCode", DbType.Int32, operateCode);
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void DeletePermissionFromRoles(int roleId)
        {
            string strSql = "DELETE FROM PE_Roles_Permissions WHERE RoleId=@RoleId";
            Parameters cmdParams = new Parameters("@RoleId", DbType.Int32, roleId);
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public void DeleteSpecialPermissionFromRoles(int roleId, int specialId)
        {
            string strSql = "DELETE FROM PE_Role_Special_Permissions WHERE 1=1";
            Parameters cmdParams = new Parameters();
            if (roleId > 0)
            {
                strSql = strSql + " AND RoleId=@RoleId ";
                cmdParams.AddInParameter("@RoleId", DbType.Int32, roleId);
            }
            if (specialId > 0)
            {
                strSql = strSql + " AND SpecialId=@SpecialId ";
                cmdParams.AddInParameter("@SpecialId", DbType.Int32, specialId);
            }
            DBHelper.ExecuteSql(strSql, cmdParams);
        }

        public IList<RoleNodePermissionsInfo> GetAllNodePermissionsById(int roleId, int nodeId)
        {
            IList<RoleNodePermissionsInfo> list = new List<RoleNodePermissionsInfo>();
            Parameters cmdParams = new Parameters();
            string strCommand = "SELECT * FROM PE_Role_Node_Permissions WHERE 1=1";
            if (roleId >= 0)
            {
                strCommand = strCommand + " AND RoleID =@RoleID ";
                cmdParams.AddInParameter("@RoleID", DbType.Int32, roleId);
            }
            if (nodeId >= 0)
            {
                strCommand = strCommand + " AND (NodeID=@NodeId OR NodeID=-1) ";
                cmdParams.AddInParameter("@NodeId", DbType.Int32, nodeId);
            }
            using (NullableDataReader reader = DBHelper.ExecuteReader(CommandType.Text, strCommand, cmdParams))
            {
                while (reader.Read())
                {
                    RoleNodePermissionsInfo item = new RoleNodePermissionsInfo();
                    item.GroupId = reader.GetInt32("RoleID");
                    item.OperateCode = (OperateCode) reader.GetInt32("OperateCode");
                    item.NodeId = reader.GetInt32("NodeID");
                    list.Add(item);
                }
            }