privilege.java

来自「cwbbs 云网论坛源码」· Java 代码 · 共 101 行

package cn.js.fan.module.cms.ext;

import com.redmoon.forum.person.UserGroupDb;
import com.redmoon.forum.person.UserDb;
import javax.servlet.http.HttpServletRequest;


public class Privilege extends com.redmoon.forum.Privilege {
    public Privilege() {
    }

    
    public boolean canUserDo(HttpServletRequest request, String dirCode,
                             String doWhat) {
        
        if (isMasterLogin(request))
            return true;
        return CheckPolicy(request, dirCode, doWhat);
    }

    
    public boolean CheckPolicy(HttpServletRequest request, String dirCode,
                                  String doWhat) {
        
        

        String groupCode = "";
        UserGroupPrivDb ugpd = new UserGroupPrivDb();
        boolean groupPriv = false;

        UserGroupDb ug = new UserGroupDb();
        
        ugpd = ugpd.getUserGroupPrivDb(UserGroupDb.ALL, dirCode);
        
        if (ugpd.getBoolean(doWhat)) {
            
            
            groupCode = ug.getGuestGroupCodeByIP(request.getRemoteAddr());
            
            
            if (!groupCode.equals(UserGroupDb.GUEST)) {
                
                ugpd = ugpd.getUserGroupPrivDb(groupCode, dirCode);
                groupPriv = ugpd.getBoolean(doWhat);
                if (!groupPriv)
                    return false; 
            }

            
            if (isUserLogin(request)) {
                String userName = getUser(request);
                UserDb ud = new UserDb();
                ud = ud.getUser(userName);
                if (!ud.isLoaded())
                    return false;

                
                groupCode = ud.getUserGroupDb().getCode();
            }

            ugpd = ugpd.getUserGroupPrivDb(groupCode, dirCode);
            groupPriv = ugpd.getBoolean(doWhat);
            return groupPriv;
        } else {
            
            groupCode = ug.getGuestGroupCodeByIP(request.getRemoteAddr());
            
            if (!groupCode.equals(UserGroupDb.GUEST)) {
                
                ugpd = ugpd.getUserGroupPrivDb(groupCode, dirCode);
                groupPriv = ugpd.getBoolean(doWhat);
                if (!groupPriv)
                    return false; 
            } else {
                
                return false;
            }

            
            if (isUserLogin(request)) {
                String userName = getUser(request);
                UserDb ud = new UserDb();
                ud = ud.getUser(userName);
                if (!ud.isLoaded())
                    return false;

                
                groupCode = ud.getUserGroupDb().getCode();
            }

            ugpd = ugpd.getUserGroupPrivDb(groupCode, dirCode);
            groupPriv = ugpd.getBoolean(doWhat);
            return groupPriv;
        }

        
        
    }

}