usermanager.java

应用系统的权限管理

package com.gmdq.user;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.http.HttpServletRequest;

import com.gmdq.connection.SybaseConn;
import com.gmdq.entitybeans.ADUser;
import com.gmdq.util.PageResultSet;
public class UserManager {
	
	private Connection conn;
	private String userName;
	private String departName;
	private String cur_page;
	private List<ADUser> userList;
	private HttpServletRequest request;
	public UserManager()
	{
		SybaseConn sysbase=new SybaseConn();
		
		conn=sysbase.getConnection();
	}
	public UserManager(HttpServletRequest request)
	{
		SybaseConn sysbase=new SybaseConn();
		
		this.request=request;
		conn=sysbase.getConnection();
	}
	public List<ADUser> getAllUser()
	{
		userList=new ArrayList();
		String sql="select * from aduser where 1=1";
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		 while(myResultSet.next())
         {
             
            ADUser aduser=new ADUser();
            aduser.setUsername(myResultSet.getString("username"));
            aduser.setDeptid(myResultSet.getInt("deptid"));
            aduser.setDeptname(myResultSet.getString("deptname"));
            aduser.setDisplayname(myResultSet.getString("displayname"));
            aduser.setStatu(myResultSet.getInt("statu"));
            aduser.setX1id(myResultSet.getInt("x1id"));
            aduser.setX1name(myResultSet.getString("x1name"));
            aduser.setX2id(myResultSet.getInt("x2id"));
            aduser.setX2name(myResultSet.getString("x2name"));
            userList.add(aduser); 
             
         }
		} catch (SQLException e) {
			
			e.printStackTrace();
		}
		return userList;
	}
	public PageResultSet queryUser()
	{
		userList=new ArrayList<ADUser>();
		userName=request.getParameter("userName");
		departName=request.getParameter("departName");
		cur_page=request.getParameter("cur_page");
		if(cur_page==null)
		{
			cur_page="1";
		}
		String sql="select * from aduser where 1=1 and statu=1";
		if(userName!=null)
		{
			if(!userName.equals(""))
			{
				sql=sql+"and username like'%"+userName+"%'";
			}
		}
		if(departName!=null)
		{
			if(!departName.equals(""))
			{
				sql=sql+" and deptname like'%"+departName+"%'";
			}
		}
		System.out.println("sql======"+sql);
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		 while(myResultSet.next())
         {
             
            ADUser aduser=new ADUser();
            aduser.setUsername(myResultSet.getString("username"));
            aduser.setDeptid(myResultSet.getInt("deptid"));
            aduser.setDeptname(stringRevert(myResultSet.getString("deptname")));
            aduser.setDisplayname(myResultSet.getString("displayname"));
            aduser.setStatu(myResultSet.getInt("statu"));
            aduser.setX1id(myResultSet.getInt("x1id"));
            aduser.setX1name(myResultSet.getString("x1name"));
            aduser.setX2id(myResultSet.getInt("x2id"));
            aduser.setX2name(myResultSet.getString("x2name"));
            userList.add(aduser); 
             
         }
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		PageResultSet dataList = new PageResultSet(userList, Integer.parseInt(cur_page), 10);
		return dataList;
	}
	public void deleteUser(String userName)
	{
		
		PreparedStatement myPreparedStatement;
		String sql="delete from aduser where username=?";
		try {
			myPreparedStatement=conn.prepareStatement(sql);
			myPreparedStatement.setString(1,userName);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		
		
	}
	public ADUser getUserByName(String userName)
	{
		ADUser aduser=new ADUser();
		String sql="select * from aduser where username='"+userName+"'";
		
		
		PreparedStatement myPreparedStatement;
         try {
			myPreparedStatement = conn.prepareStatement(sql);
			ResultSet myResultSet = myPreparedStatement.executeQuery();
			while(myResultSet.next())
	         {
	             
	           
	            aduser.setUsername(myResultSet.getString("username"));
	            aduser.setDeptid(myResultSet.getInt("deptid"));
	            aduser.setDeptname(myResultSet.getString("deptname"));
	            aduser.setDisplayname(myResultSet.getString("displayname"));
	            aduser.setStatu(myResultSet.getInt("statu"));
	            aduser.setX1id(myResultSet.getInt("x1id"));
	            aduser.setX1name(myResultSet.getString("x1name"));
	            aduser.setX2id(myResultSet.getInt("x2id"));
	            aduser.setX2name(myResultSet.getString("x2name"));
	            
	             
	         }
			} catch (SQLException e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
			}
			return aduser;
		}
	public void addUser(HttpServletRequest request)
	{
		String username=request.getParameter("username").trim();
		String displayname=request.getParameter("displayname").trim();
		String deptname=request.getParameter("deptname").trim();
		String status=request.getParameter("status").trim();
		String sql="insert  into aduser (username,displayname,deptname,statu) values("+"'"+username+"','"+displayname+"','"+deptname+"',"+status+")";
		System.out.println("$$$$$$$$"+sql);
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	public void updateUser(HttpServletRequest request)
	{
		String username=request.getParameter("username").trim();
		String displayname=request.getParameter("displayname").trim();
		String deptname=request.getParameter("deptname").trim();
		String status=request.getParameter("status").trim();
		String sql="update  aduser set username='"+username+"',displayname='"+displayname+"',deptname='"+deptname+"',statu="+status+" where username='"+username+"'";
		
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		
	}
	public HttpServletRequest getRequest() {
		return request;
	}
	public void setRequest(HttpServletRequest request) {
		this.request = request;
	}
	public static void main(String[] str)
	{
		UserManager usermanager=new UserManager();
		usermanager.stringRevert("");
	}
		
public String stringRevert(String subStr)
{
	
	if(subStr==null||subStr.trim().equals(""))
	{
		return "";
	}
	String[] strArray=subStr.split("[,]");
	List lastList=new ArrayList();
	for(int i=0;i<strArray.length;i++)
	{
		String mystr=strArray[i];
		
		String[] strrArray=mystr.split("[=]");
		
		
		    if(!strrArray[0].equals("DC"))
		    {
		    	String strtwo=strrArray[1];
		    	lastList.add(strtwo);
				
		    }
			
		
		
	}
	String returnStr="";
	for(int i=lastList.size()-1;i>=0;i--)
	{
		String lastStr=(String)lastList.get(i);
		if(i==0)
		{
			returnStr=returnStr+""+lastStr;
		}else
		{
			returnStr=returnStr+""+lastStr+"/";
		}
		
		
	}
	System.out.println(returnStr);
	return returnStr;
	
	}

}