login.java

Java实现权限管理

package cn.com.wap.role;

import java.util.Vector;
import cn.com.wap.role.DBManager;
import java.sql.*;
import cn.com.wap.rela.GroupAction;
import javax.servlet.http.HttpServletRequest;

public class Login {
	public Vector execSqlret(HttpServletRequest request) {

		String username = request.getParameter("userName");
		String password = request.getParameter("passWord");

		//System.out.println("username: " + username);
		//System.out.println("password: " + password);

		StringBuffer bf = new StringBuffer();

		bf.append("select fld_ActionName,fld_URL,T_GroupRelation.fld_GroupID,allyID from ");
		bf
				.append(" WAP_TEST.T_User2Group inner join WAP_TEST.T_User on T_User2Group.fld_UserID = T_User.userID ");
		bf
				.append(" inner join WAP_TEST.T_Group on T_User2Group.fld_GroupID = T_Group.fld_GroupID ");
		bf
				.append(" inner join WAP_TEST.T_GroupRelation on T_Group.fld_GroupID = T_GroupRelation.fld_GroupID ");
		bf
				.append(" inner join WAP_TEST.T_GroupAction on T_GroupAction.fld_ActionID = T_GroupRelation.fld_ActionID ");
		bf.append(" where T_User.userName = '" + username + "'");
		bf.append(" and T_User.passWord = '" + password + "'");
		bf.append(" order by T_GroupAction.fld_PRI,T_GroupAction.fld_ActionID ");

		//System.out.println("bf__Login__SQL: " + bf.toString());

		DBManager db = new DBManager();
		Connection conn = db.getConnection();
		//System.out.println("conn: " + conn);
		ResultSet rs = null;
		Statement stmt = null;
		Vector v = new Vector();
		try {
			stmt = conn.createStatement();
			rs = stmt.executeQuery(bf.toString());

			if (rs == null) {
				return null;
			} else {
				while (rs.next()) {

					GroupAction action = new GroupAction();

					action.setFld_ActionName(rs.getString(1));
					action.setFld_URL(rs.getString(2));
					action.setGroupID(rs.getInt(3));
					action.setUser2allyID(rs.getInt(4));
					
					v.add(action);
				}
				db.close();
				return v;
			}
		} catch (Exception ex) {
			ex.printStackTrace();
			//System.out.println("error...............");
		}
		//System.out.println("v___________________: " + v);
		return v;
	}
}