userloginaction.java

J2EE架构的权限系统

package com.infosys.struts.action;

import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import net.sf.hibernate.HibernateException;
import net.sf.hibernate.Session;
import net.sf.hibernate.Transaction;

import org.apache.struts.action.Action;
import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;

import org.infosys.logic.LoginTips;
import org.infosys.util.RecordLog;
import org.infosys.util.GroupRights;
import org.infosys.common.Constants;

import com.infosys.Hibernate.SessionFactory;
import com.infosys.Hibernate.PUserExt;
import com.infosys.struts.form.UserLoginForm;

/** 
 * MyEclipse Struts
 * Creation date: 08-18-2005
 * 
 * XDoclet definition:
 * @struts:action path="/userLogin" name="userLoginForm" input="/admin/index.jsp" scope="request" validate="true"
 */
public class UserLoginAction extends Action {

	// --------------------------------------------------------- Instance Variables

	// --------------------------------------------------------- Methods

	/** 
	 * Method execute
	 * @param mapping
	 * @param form
	 * @param request
	 * @param response
	 * @return ActionForward
	 */
	public ActionForward execute(
		ActionMapping mapping,
		ActionForm form,
		HttpServletRequest request,
		HttpServletResponse response) {
		UserLoginForm userLoginForm = (UserLoginForm) form;
		Transaction tx;
		String ForwardPage=null;
		LoginTips mb=new LoginTips();
		try {
			Session session = SessionFactory.currentSession();
			tx=session.beginTransaction();
			List userlist=session.find("from PUserExt p where p.account='"+userLoginForm.getAccount()+"' and p.passwd='"+userLoginForm.getPasswd()+"' and p.status=1");
			tx.commit();
			if(userlist.size()==1){
				//下面写入session
				request.getSession().setAttribute(Constants.SESSION_USER_DATA,userlist.get(0));

				//用户权限点
				String LoginUserPoint=GroupRights.getString(((PUserExt)userlist.get(0)).getGroupid(),",");
				request.getSession().setAttribute(Constants.SESSION_USER_RIGHTSPOINT,LoginUserPoint);
				
				//用户登录日志
				RecordLog.log(request,"login in system");
				
				response.sendRedirect("main.do"); //登录成功
				return null;
			}else{
				mb.setTipsInfo(Constants.MSG_LOGIN_FAILED_CAUSE);
				request.setAttribute("LoginTips",mb);
				return mapping.findForward("admin/loginPage");  //登录失败(没找到用户)
			}
		} catch (Exception e) {
			e.printStackTrace();
			mb.setTipsInfo(Constants.MSG_LOGIN_FAILED);
			request.setAttribute("LoginTips",mb);
			return mapping.findForward("admin/loginPage");  //登录失败
		} finally {
			try {
				SessionFactory.closeSession();
			} catch (HibernateException e1) {
				e1.printStackTrace();
			}
		}
	}

}