userareamanager.java

应用系统的权限管理

package com.gmdq.user;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.http.HttpServletRequest;

import com.gmdq.connection.SybaseConn;
import com.gmdq.entitybeans.ADUserArea;
import com.gmdq.util.PageResultSet;

public class UserAreaManager {
	private HttpServletRequest request;
	private Connection conn;
	private List<ADUserArea> areaList;
	private String areaName;
	private String cur_page;
	
	
	public UserAreaManager(HttpServletRequest request)
	{
		SybaseConn sysbase=new SybaseConn();
		this.request=request;
		conn=sysbase.getConnection();
	}
	public PageResultSet queryUserArea()
	{
		areaList=new ArrayList<ADUserArea>();
		String areaId=request.getParameter("areaId");
		String userName=request.getParameter("userName");
		cur_page=request.getParameter("cur_page");
		if(cur_page==null)
		{
			cur_page="1";
		}
		String sql="select * from aduserarea where 1=1 ";
		if(areaId!=null)
		{
			if(!areaId.equals("-1"))
			{
				sql=sql+"and areid ="+areaId;
			}
		}
		if(userName!=null)
		{
			if(!userName.equals("-1"))
			{
				sql=sql+" and username ='"+userName+"'";
			}
		}
		
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		 while(myResultSet.next())
         {
			ADUserArea aduserarea= new ADUserArea();
			aduserarea.setId(myResultSet.getInt("id"));
			aduserarea.setAreaId(myResultSet.getInt("areid"));
			aduserarea.setUserName(myResultSet.getString("username"));
			aduserarea.setStatus(myResultSet.getInt("statu"));
			aduserarea.setX1id(myResultSet.getInt("x1id"));
			aduserarea.setX1name(myResultSet.getString("x1name"));
			aduserarea.setX2id(myResultSet.getShort("x2id"));
			aduserarea.setX2name(myResultSet.getString("x2name"));
			areaList.add(aduserarea);
			
         }
         }catch (SQLException e) {
 			// TODO Auto-generated catch block
 			e.printStackTrace();
 		}
         PageResultSet dataList = new PageResultSet(areaList, Integer.parseInt(cur_page), 10);
 		 return dataList;
	}
	public void delete(int Id)
	{
		System.out.println("******"+Id);
		PreparedStatement myPreparedStatement;
		String sql="delete from aduserarea where id=?";
		try {
			myPreparedStatement=conn.prepareStatement(sql);
			myPreparedStatement.setInt(1,Id);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	public void addUserArea(HttpServletRequest request)
	{
		String area=request.getParameter("area");
		System.out.println("area==="+area);
		String[] pid_batch=request.getParameterValues("pid_batch");
		
		for(int i=0;i<pid_batch.length;i++)
		{
			String sql="insert into aduserarea (areid,username,statu) values("+area+",'";
			sql=sql+pid_batch[i]+"',1)";
			System.out.println("$$$$$$$$"+sql);
			PreparedStatement myPreparedStatement;
			try {
				myPreparedStatement = conn.prepareStatement(sql);
				myPreparedStatement.executeUpdate();
				myPreparedStatement.close();
				
			} catch (SQLException e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
			}
			
		}
		
	}
	public ADUserArea getAreaByID(int areaId)
	{
		ADUserArea aduserarea=new ADUserArea();
		PreparedStatement myPreparedStatement;
		String sql="select * from aduserarea where areaid="+areaId;
		System.out.println("&&&&&&&"+sql);
		try {
			myPreparedStatement=conn.prepareStatement(sql);
			
			ResultSet myResultSet = myPreparedStatement.executeQuery();
			while(myResultSet.next())
	         {
	             
	            
				aduserarea.setAreaId(myResultSet.getInt("areid"));
				aduserarea.setUserName(myResultSet.getString("username"));
				aduserarea.setStatus(myResultSet.getInt("statu"));
				
				aduserarea.setX1id(myResultSet.getInt("x1id"));
				aduserarea.setX1name(myResultSet.getString("x1name"));
				aduserarea.setX2id(myResultSet.getInt("x2id"));
				aduserarea.setX2name(myResultSet.getString("x2name"));
	           
	             
	         }
			myPreparedStatement.close();
			
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		return aduserarea;
		
	}
	public void updateArea(HttpServletRequest request)
	{
          String areaname=request.getParameter("areaname").trim();
		
		String status=request.getParameter("status").trim();
		String areaId=request.getParameter("areaid").trim();
		
		String sql="update aduserarea set areaname='"+areaname+"',statu="+status+" where areaid="+areaId;
		System.out.println("$$$$$$$$"+sql);
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	public List<ADUserArea> getAllArea()
	{
		areaList=new ArrayList();
		String sql="select * from aduserarea where 1=1";
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		 while(myResultSet.next())
         {
             
            ADUserArea aduserarea=new ADUserArea();
            aduserarea.setAreaId(myResultSet.getInt("areid"));
            aduserarea.setUserName(myResultSet.getString("username"));
			aduserarea.setStatus(myResultSet.getInt("statu"));
            aduserarea.setX1id(myResultSet.getInt("x1id"));
            aduserarea.setX1name(myResultSet.getString("x1name"));
            aduserarea.setX2id(myResultSet.getInt("x2id"));
            aduserarea.setX2name(myResultSet.getString("x2name"));
            areaList.add(aduserarea); 
             
         }
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		return areaList;
	}
	public List<ADUserArea> getADUserArea(int areaId)
	{
		areaList=new ArrayList();
		String sql="select * from aduserarea where 1=1";
		if(areaId!=0)
		{
			sql=sql+" and areid="+areaId;
		}
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		 while(myResultSet.next())
         {
             
            ADUserArea aduserarea=new ADUserArea();
            aduserarea.setAreaId(myResultSet.getInt("areid"));
            aduserarea.setUserName(myResultSet.getString("username"));
			aduserarea.setStatus(myResultSet.getInt("statu"));
            aduserarea.setX1id(myResultSet.getInt("x1id"));
            aduserarea.setX1name(myResultSet.getString("x1name"));
            aduserarea.setX2id(myResultSet.getInt("x2id"));
            aduserarea.setX2name(myResultSet.getString("x2name"));
            areaList.add(aduserarea); 
             
         }
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		return areaList;
	}

}