topicservicesecurityadvice.java

Italk吧简易论坛 基于struts+extjs+hibernate+spring+mysql开发。 /catch目录为系统截图 安装步骤： 1：安装MYSQL

package com.italk.service.security;

import org.aopalliance.intercept.MethodInterceptor;
import org.aopalliance.intercept.MethodInvocation;
import org.apache.log4j.Logger;

import com.italk.vo.Group;
import com.italk.vo.User;

public class TopicServiceSecurityAdvice implements MethodInterceptor {

	public Logger log = Logger.getLogger("italk");

	public Object invoke(MethodInvocation arg0) throws Throwable {
		String methodName = arg0.getMethod().getName();
		Object[] args = arg0.getArguments();
		if (methodName.equals("publishNewMainTopic")) {
			User u = (User) args[2];
			Group g = u.getGroup();
			if (!g.getCanPublish().booleanValue()) {
				log.debug("user can't publish main");
				throw new ItalkSecurityException();
			}
		} else if (methodName.equals("publishNewReplyTopic")) {
			User u = (User) args[0];
			Group g = u.getGroup();
			if (!g.getCanReply().booleanValue()) {
				log.debug("user can't publish reply");
				throw new ItalkSecurityException();
			}
		} else if (methodName.equals("changeTopic")) {
			User u = (User) args[2];
			String type = (String) args[1];
			Group g = (Group) u.getGroup();

			if ((type.equals("top") && !g.getCanTop().booleanValue())
					|| (type.equals("lock") && !g.getCanLock().booleanValue())
					|| (type.equals("prime") && !g.getCanPrime().booleanValue())) {
				log.debug("user can't change topic to"+type);
				throw new ItalkSecurityException();
			}
		} else if(methodName.equals("deleteTopic")) {
			User u=(User)args[1];
			Group g=(Group)u.getGroup();
			if(!g.getCanDelete().booleanValue()) {
				throw new ItalkSecurityException();
			}
		}
		return arg0.proceed();
	}
}