groupmanager.java

应用系统的权限管理

package com.gmdq.user;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.http.HttpServletRequest;

import com.gmdq.connection.SybaseConn;
import com.gmdq.entitybeans.ADGroup;
import com.gmdq.entitybeans.ADRole;
import com.gmdq.entitybeans.ADUser;


import com.gmdq.util.PageResultSet;

public class GroupManager {
	private HttpServletRequest request;
	private Connection conn;
	private List<ADGroup> groupList;
	private String groupName;
	private String cur_page;
	
	public GroupManager(HttpServletRequest request)
	{
		SybaseConn sysbase=new SybaseConn();
		this.request=request;
		conn=sysbase.getConnection();
	}
	public PageResultSet queryGroup()
	{
		groupList=new ArrayList<ADGroup>();
		groupName=request.getParameter("groupName");
		cur_page=request.getParameter("cur_page");
		if(cur_page==null)
		{
			cur_page="1";
		}
		String sql="select * from adgroup where 1=1 ";
		if(groupName!=null)
		{
			if(!groupName.equals(""))
			{
				sql=sql+"and groupname like'%"+groupName+"%'";
			}
		}
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		 while(myResultSet.next())
         {
			ADGroup adgroup= new ADGroup();
			adgroup.setGroupid(myResultSet.getInt("groupid"));
			adgroup.setGroupname(myResultSet.getString("groupname"));
			adgroup.setStatu(myResultSet.getInt("statu"));
			adgroup.setX1id(myResultSet.getInt("x1id"));
			adgroup.setX1name(myResultSet.getString("x1name"));
			adgroup.setX2id(myResultSet.getShort("x2id"));
			adgroup.setX2name(myResultSet.getString("x2name"));
			groupList.add(adgroup);
			
         }
         }catch (SQLException e) {
 			// TODO Auto-generated catch block
 			e.printStackTrace();
 		}
         PageResultSet dataList = new PageResultSet(groupList, Integer.parseInt(cur_page), 10);
 		 return dataList;
	}
	public void deleteGroup(int groupId)
	{
		System.out.println("******"+groupId);
		PreparedStatement myPreparedStatement;
		String sql="delete from adgroup where groupid=?";
		try {
			myPreparedStatement=conn.prepareStatement(sql);
			myPreparedStatement.setInt(1, groupId);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	public void addgroup(HttpServletRequest request)
	{
		
		String groupname=request.getParameter("groupname").trim();
		
		String status=request.getParameter("status").trim();
		String sql="insert  into adgroup (groupname,statu) values("+"'"+groupname+"',"+Integer.parseInt(status)+")";
		System.out.println("$$$$$$$$"+sql);
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		
	}
	public ADGroup getGroupByID(int groupId)
	{
		ADGroup aduser=new ADGroup();
		PreparedStatement myPreparedStatement;
		String sql="select * from adgroup where groupid="+groupId;
		System.out.println("&&&&&&&"+sql);
		try {
			myPreparedStatement=conn.prepareStatement(sql);
			
			ResultSet myResultSet = myPreparedStatement.executeQuery();
			while(myResultSet.next())
	         {
	             
	            
	            aduser.setGroupname(myResultSet.getString("groupname"));
	            aduser.setGroupid(myResultSet.getInt("groupid"));
	            aduser.setStatu(myResultSet.getInt("statu"));
	            aduser.setX1id(myResultSet.getInt("x1id"));
	            aduser.setX1name(myResultSet.getString("x1name"));
	            aduser.setX2id(myResultSet.getInt("x2id"));
	            aduser.setX2name(myResultSet.getString("x2name"));
	           
	             
	         }
			myPreparedStatement.close();
			
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		return aduser;
		
	}
	public void updateGroup(HttpServletRequest request)
	{
          String groupname=request.getParameter("groupname").trim();
		
		String status=request.getParameter("status").trim();
		String groupId=request.getParameter("groupid").trim();
		
		String sql="update adgroup set groupname='"+groupname+"',statu="+status+" where groupid="+groupId;
		System.out.println("$$$$$$$$"+sql);
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
			myPreparedStatement.executeUpdate();
			myPreparedStatement.close();
			
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
	}
	public List<ADGroup> getAllGroup()
	{
		groupList=new ArrayList();
		String sql="select * from adgroup where 1=1";
		PreparedStatement myPreparedStatement;
		try {
			myPreparedStatement = conn.prepareStatement(sql);
		
		ResultSet myResultSet = myPreparedStatement.executeQuery();
		 while(myResultSet.next())
         {
             
            ADGroup aduser=new ADGroup();
            aduser.setGroupid(myResultSet.getInt("groupid"));
            aduser.setGroupname(myResultSet.getString("groupname"));
            aduser.setStatu(myResultSet.getInt("statu"));
            aduser.setX1id(myResultSet.getInt("x1id"));
            aduser.setX1name(myResultSet.getString("x1name"));
            aduser.setX2id(myResultSet.getInt("x2id"));
            aduser.setX2name(myResultSet.getString("x2name"));
            groupList.add(aduser); 
             
         }
		} catch (SQLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		return groupList;
	}
	

}