group_editaction.java

J2EE架构的权限系统

//Created by MyEclipse Struts
// XSL source (default): platform:/plugin/com.genuitec.eclipse.cross.easystruts.eclipse_3.8.4/xslt/JavaClass.xsl

package com.infosys.struts.action;

import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import net.sf.hibernate.HibernateException;
import net.sf.hibernate.Session;
import net.sf.hibernate.Transaction;

import org.apache.struts.action.Action;
import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.infosys.common.Constants;
import org.infosys.logic.InfoTips;
import org.infosys.logic.RightsMenu;
import org.infosys.security.Check;
import org.infosys.security.UserData;
import org.infosys.util.GroupRights;
import org.infosys.util.RecordLog;

import com.infosys.Hibernate.PGroup;
import com.infosys.Hibernate.PGroupPrv;
import com.infosys.Hibernate.PGroupPrvKey;
import com.infosys.Hibernate.PPrivilege;
import com.infosys.Hibernate.SessionFactory;
import com.infosys.struts.form.Group_editForm;

/** 
 * MyEclipse Struts
 * Creation date: 08-25-2005
 * 
 * XDoclet definition:
 * @struts:action path="/admin/group_edit" name="group_editForm" input="/admin/group_edit.jsp" scope="request" validate="true"
 * @struts:action-forward name="admin/group_edit" path="/admin/group_edit.jsp"
 */
public class Group_editAction extends Action {

	// --------------------------------------------------------- Instance Variables

	// --------------------------------------------------------- Methods

	/** 
	 * Method execute
	 * @param mapping
	 * @param form
	 * @param request
	 * @param response
	 * @return ActionForward
	 */
	public ActionForward execute(
		ActionMapping mapping,
		ActionForm form,
		HttpServletRequest request,
		HttpServletResponse response) {
		Group_editForm group_editForm = (Group_editForm) form;
		//验证登录以及权限
		String isrights=Check.isRights(request,response,"group_man.do");
		if(!isrights.equals("OK")){
			org.infosys.security.Check.redirectErr(request,response,"err.do?errmsg="+isrights);
			return null;
		}else{
			//添加业务逻辑
			String status=null;
			Session session;
			try {
				String sessionUserGroupid=UserData.userInfo(request).get("groupid").toString();
				session = SessionFactory.currentSession();
				if(group_editForm.getAction()!=null && group_editForm.getAction().equalsIgnoreCase("save")){
					if(group_editForm.getId().equals(sessionUserGroupid)){
						status=Constants.TIPS_GROUP_SELF_ERROR;
					}else{
						PGroup gObj = new PGroup(group_editForm.getId());
						gObj.setCode(group_editForm.getCode());
						gObj.setName(group_editForm.getName());
						gObj.setRemark(group_editForm.getRemark());
						gObj.setStatus(group_editForm.getStatus());
						Transaction tx=session.beginTransaction();
						session.update(gObj);  //修改权限组
						PGroupPrv pObj;
						PGroupPrvKey pkObj;
						String[] rightsArr=group_editForm.getRightpoint();
						int rightlen=rightsArr.length;
						//先删除权限组对应权限点
						session.delete("from PGroupPrv a where a.id.groupid='"+group_editForm.getId()+"'");
						//再添加权限组对应权限点
						for(int i=0;i<rightlen;i++){
							pObj=new PGroupPrv();
							pkObj=new PGroupPrvKey();
							pkObj.setGroupid(gObj);
							pkObj.setPrivilege(new PPrivilege(rightsArr[i]));
							pObj.setId(pkObj);
							session.save(pObj);
						}
						RecordLog.log(request,"Edit group:"+group_editForm.getName(),session);
						tx.commit();
						gObj=null;
						pkObj=null;
						pObj=null;
						status=Constants.PROCESS_DATABASE_EDIT_OK;
					}
					InfoTips infotips=new InfoTips();
					infotips.setTipsInfo(status);
					request.setAttribute("InfoTips",infotips);
				}
				//显示权限组数据
				List list=session.find("from PGroup p where p.groupid='"+group_editForm.getId()+"'");
				PGroup pgroup=(PGroup)list.get(0);
				group_editForm.setName(pgroup.getName());
				group_editForm.setCode(pgroup.getCode());
				group_editForm.setStatus(pgroup.getStatus());
				group_editForm.setRemark(pgroup.getRemark());
				list=null;
				pgroup=null;
			} catch (HibernateException e) {
				e.printStackTrace();
				status=Constants.PROCESS_DATABASE_ADD_ERR;
			} finally {
				try {
					SessionFactory.closeSession();
				} catch (HibernateException e1) {
					e1.printStackTrace();
				}
			}
		}
		//显示权限菜单
		RightsMenu menu=(new GroupRights()).getTree(group_editForm.getId());
		request.setAttribute("RightsMenu",menu); //返回设置
		menu=null;
		return mapping.findForward("admin/group_edit");
	}

}