rights_editaction.java

J2EE架构的权限系统

//Created by MyEclipse Struts
// XSL source (default): platform:/plugin/com.genuitec.eclipse.cross.easystruts.eclipse_3.8.4/xslt/JavaClass.xsl

package com.infosys.struts.action;

import java.util.List;
import java.util.Vector;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import net.sf.hibernate.HibernateException;
import net.sf.hibernate.Session;
import net.sf.hibernate.Transaction;

import org.apache.struts.action.Action;
import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.apache.struts.util.LabelValueBean;
import org.infosys.common.Constants;
import org.infosys.entity.Db2Private;
import org.infosys.logic.InfoTips;
import org.infosys.security.Check;
import org.infosys.util.PrivilegeTree;
import org.infosys.util.RecordLog;

import com.infosys.Hibernate.PPrivilege;
import com.infosys.Hibernate.SessionFactory;
import com.infosys.struts.form.Rights_editForm;

/** 
 * MyEclipse Struts
 * Creation date: 08-24-2005
 * 
 * XDoclet definition:
 * @struts:action path="/admin/rights_edit" name="rights_editForm" input="/admin/rights_edit.jsp" scope="request" validate="true"
 * @struts:action-forward name="admin/rights_edit" path="/admin/rights_edit.jsp"
 */
public class Rights_editAction extends Action {

	// --------------------------------------------------------- Instance Variables

	// --------------------------------------------------------- Methods

	/** 
	 * Method execute
	 * @param mapping
	 * @param form
	 * @param request
	 * @param response
	 * @return ActionForward
	 */
	public ActionForward execute(
		ActionMapping mapping,
		ActionForm form,
		HttpServletRequest request,
		HttpServletResponse response) {
		Rights_editForm rights_editForm = (Rights_editForm) form;
		//验证登录以及权限
		String isrights=Check.isRights(request,response,"rights_man.do");
		if(!isrights.equals("OK")){
			org.infosys.security.Check.redirectErr(request,response,"err.do?errmsg="+isrights);
			return null;
		}else{
			//业务逻辑
			String status=null;
			Session session;
			try {
				session = SessionFactory.currentSession();
				//修改数据
				if(rights_editForm.getAction()!=null){
					//检验url地址是否重复，重复不可行(因：权限点管理是基于url判断的)
					List checkUrl=session.find("from PPrivilege p where p.url='"+rights_editForm.getUrl()+"' and p.prvid<>'"+rights_editForm.getId()+"'");
					
					if(!rights_editForm.getParentprvid().equals("0") && checkUrl!=null && checkUrl.size()>0){
						status="数据库中url地址不可重复";
					}else{
						//检测是否系统基础菜单
						List checkSys=session.find("from PPrivilege p where p.issys=1 and p.prvid='"+rights_editForm.getId()+"'");
						if(checkSys.size()>0){
							status=Constants.TIPS_SYS_PRIVE_ERROR;
						}else{
							PPrivilege privilege=new PPrivilege(rights_editForm.getId());
							privilege.setName(rights_editForm.getName());
							privilege.setParentprvid(rights_editForm.getParentprvid());
							privilege.setUrl(rights_editForm.getUrl());
							privilege.setVieworder(rights_editForm.getVieworder());
							privilege.setStatus(rights_editForm.getStatus());
							privilege.setRemark(rights_editForm.getRemark());
							Transaction tx=session.beginTransaction();
							session.update(privilege);
							
							RecordLog.log(request,"Edit rights:"+rights_editForm.getId(),session);
							tx.commit();
							status=Constants.PROCESS_DATABASE_EDIT_OK;
						}
					}
					InfoTips infotips=new InfoTips();
					infotips.setTipsInfo(status);
					request.setAttribute("InfoTips",infotips);
				}
				//显示数据
				List list=session.find("from PPrivilege p where p.prvid='"+rights_editForm.getId()+"'");
				PPrivilege privObj=(PPrivilege)list.get(0);
				rights_editForm.setId(privObj.getPrvid());
				rights_editForm.setName(privObj.getName());
				rights_editForm.setUrl(privObj.getUrl());
				rights_editForm.setParentprvid(privObj.getParentprvid());
				rights_editForm.setRemark(privObj.getRemark());
				rights_editForm.setVieworder(privObj.getVieworder());
				rights_editForm.setStatus(privObj.getStatus());
				list=null;
			} catch (HibernateException e) {
				e.printStackTrace();
			} finally {
				try {
					SessionFactory.closeSession();
				} catch (HibernateException e1) {
					e1.printStackTrace();
				}
				Db2Private.setFatherRights(); //刷新父节点持久数据
			}
		}
		
		//显示select
		PrivilegeTree objTree=new PrivilegeTree();
		Vector vector=new Vector();
		List sellist=objTree.searchPrv("0");
		vector.add(new LabelValueBean("---顶级权限---","0"));
		if(sellist!=null && sellist.size()>0){
			for(int i=0;i<sellist.size();i++){
				Object[] row = (Object[])sellist.get(i);
				String prvid = (String)row[0];
				String name = (String)row[1];
				vector.add(new LabelValueBean(name,prvid));
			}
		}
		request.setAttribute("parentprvid",vector);
		return mapping.findForward("admin/rights_edit");
	}

}