rolemanager.java

应用系统的权限管理

package com.gmdq.user;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.http.HttpServletRequest;

import com.gmdq.connection.SybaseConn;
import com.gmdq.entitybeans.ADArea;
import com.gmdq.entitybeans.ADGroup;
import com.gmdq.entitybeans.ADRole;
import com.gmdq.entitybeans.ADUser;
import com.gmdq.entitybeans.ADUserArea;
import com.gmdq.util.PageResultSet;

public class RoleManager {
	private HttpServletRequest request;
	private List<ADRole> roleList;
	private String cur_page;
	private Connection conn;
	private UserAreaManager userareaManager;
	private UserManager userManager;
	private AreaManager areaManager;
	public RoleManager(HttpServletRequest request)
	{
		this.request=request;
		SybaseConn sysbase=new SybaseConn();
		conn=sysbase.getConnection();
		
	}
	
	public PageResultSet queryRole()
	{
		roleList=new ArrayList<ADRole>();
		String userName=request.getParameter("userName");
		String groupId=request.getParameter("groupId");
		cur_page=request.getParameter("cur_page");
		if(cur_page==null)
		{
			cur_page="1";
		}
		String sql="select * from adrole where 1=1";
		if(userName!=null)
		{
			if(!userName.equals(""))
			{
				sql=sql+"and username like'%"+userName+"%'";
			}
		}
		if(groupId!=null)
		{
			if(!groupId.equals(""))
			{
				sql=sql+" and groupid ="+groupId;
			}
		}
	    System.out.println("******"+sql);
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		while(myResultSet.next())
         {
             
            ADRole aduser=new ADRole();
            aduser.setRid(myResultSet.getInt("rid"));
            aduser.setUsername(myResultSet.getString("username"));
            
            aduser.setDisplayname(myResultSet.getString("displayname"));
            aduser.setGroupid(myResultSet.getInt("groupid"));
            aduser.setSecname(myResultSet.getString("secname"));
            aduser.setSecvalue(myResultSet.getString("secvalue"));
            aduser.setStatu(myResultSet.getInt("statu"));
            aduser.setX1id(myResultSet.getInt("x1id"));
            aduser.setX1name(myResultSet.getString("x1name"));
            aduser.setX2id(myResultSet.getInt("x2id"));
            aduser.setX2name(myResultSet.getString("x2name"));
            roleList.add(aduser); 
             
         }
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		PageResultSet dataList = new PageResultSet(roleList, Integer.parseInt(cur_page), 10);
		return dataList;
		
	}
	public void deleteRole(String roleId)
	{
		System.out.println("******"+roleId);
		PreparedStatement myPreparedStatement;
		String sql="delete from adrole where rid=?";
		try {
			myPreparedStatement=conn.prepareStatement(sql);
			myPreparedStatement.setInt(1,Integer.parseInt(roleId));
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	public void addRole(HttpServletRequest request)
	{  
		userManager=new UserManager(request);
		PreparedStatement myPreparedStatement;
		String area=request.getParameter("area");
		System.out.println("********tttttttt"+area);
		String username=request.getParameter("username");
		String displayname="";
		String sql="";
		if(area==null)
		{
		if(username!=null)
		{
			username=username.trim();
			displayname=userManager.getUserByName(username).getDisplayname();
		}
		
		if(displayname!=null)
		{
			displayname=displayname.trim();
		}
		String groupid=request.getParameter("groupId").trim();
		
		String status=request.getParameter("status").trim();
		
		String secname=request.getParameter("secname").trim();
		String secvalue=request.getParameter("secvalue").trim();
		
		if(username!=null&&displayname!=null)
		{
			sql="insert  into adrole (username,displayname,groupid,secname,secvalue,statu) values("+"'"+username+"','"+displayname+"',"+groupid+",'"+secname+"','"+secvalue+"',"+status+")";
			try {
				myPreparedStatement = conn.prepareStatement(sql);
				myPreparedStatement.executeUpdate();
				myPreparedStatement.close();
				
			} catch (SQLException e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
			}
		}
		}
		if(area!=null)
		{
			userareaManager=new UserAreaManager(request);
			userManager=new UserManager(request);
			areaManager=new AreaManager(request);
			String groupid=request.getParameter("groupId").trim();
			
			String status=request.getParameter("status").trim();
			String secname=request.getParameter("secname").trim();
			String secvalue=request.getParameter("secvalue").trim();
			List<ADUserArea> aduserarea=userareaManager.getADUserArea(Integer.parseInt(area));
			ADArea myarea=areaManager.getAreaByID(Integer.parseInt(area));
			for(int i=0;i<aduserarea.size();i++)
			{
				ADUserArea userarea=aduserarea.get(i);
				String myusername=userarea.getUserName();
				ADUser user=userManager.getUserByName(myusername);
				sql="insert into adrole (username,displayname,groupid,x1name,secname,secvalue,statu) values("+"'"+myusername.trim()+"','"+user.getDisplayname().trim()+"',"+groupid+",'"+myarea.getAreaName().trim()+"','"+secname+"','"+secvalue+"',"+status+")";
				try {
					myPreparedStatement = conn.prepareStatement(sql);
					myPreparedStatement.executeUpdate();
					myPreparedStatement.close();
					
				} catch (SQLException e) {
					// TODO Auto-generated catch block
					e.printStackTrace();
				}
			}
			
			
		}
		
		
		
		
	}
	public void updateRole(HttpServletRequest request)
	{
		String username=request.getParameter("username").trim();
		String displayname=request.getParameter("displayname").trim();
		String groupid=request.getParameter("groupId").trim();
		String rid=request.getParameter("rid").trim();
		String status=request.getParameter("status").trim();
		String secname=request.getParameter("secname").trim();
		String secvalue=request.getParameter("secvalue").trim();
		String sql="update adrole set username='"+username+"',displayname='"+displayname+"',groupid="+groupid+",secname='"+secname+"',secvalue='"+secvalue+"'"+",statu="+status+" where rid="+rid;
		System.out.println("$$$$$$$$"+sql);
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	public ADRole getRoleByID(String roleId)
	{
		ADRole aduser=new ADRole();
		PreparedStatement myPreparedStatement;
		String sql="select * from adrole where rid="+Integer.parseInt(roleId);
		System.out.println("&&&&&&&"+sql);
		try {
			myPreparedStatement=conn.prepareStatement(sql);
			
			ResultSet myResultSet = myPreparedStatement.executeQuery();
			while(myResultSet.next())
	         {
	             
	            
	            aduser.setUsername(myResultSet.getString("username"));
	            aduser.setSecname(myResultSet.getString("secname"));
	            aduser.setSecvalue(myResultSet.getString("secvalue"));
	            aduser.setDisplayname(myResultSet.getString("displayname"));
	            aduser.setGroupid(myResultSet.getInt("groupid"));
	            aduser.setStatu(myResultSet.getInt("statu"));
	            aduser.setX1id(myResultSet.getInt("x1id"));
	            aduser.setX1name(myResultSet.getString("x1name"));
	            aduser.setX2id(myResultSet.getInt("x2id"));
	            aduser.setX2name(myResultSet.getString("x2name"));
	           
	             
	         }
			myPreparedStatement.close();
			
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		return aduser;
	}
	

}