users_delaction.java

J2EE架构的权限系统

//Created by MyEclipse Struts
// XSL source (default): platform:/plugin/com.genuitec.eclipse.cross.easystruts.eclipse_3.8.4/xslt/JavaClass.xsl

package com.infosys.struts.action;

import java.io.IOException;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import net.sf.hibernate.HibernateException;
import net.sf.hibernate.Session;
import net.sf.hibernate.Transaction;

import org.apache.struts.action.Action;
import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.infosys.security.Check;
import org.infosys.security.UserData;
import org.infosys.util.RecordLog;

import com.infosys.Hibernate.SessionFactory;

/** 
 * MyEclipse Struts
 * Creation date: 08-26-2005
 * 
 * XDoclet definition:
 * @struts:action
 */
public class Users_delAction extends Action {

	// --------------------------------------------------------- Instance Variables

	// --------------------------------------------------------- Methods

	/** 
	 * Method execute
	 * @param mapping
	 * @param form
	 * @param request
	 * @param response
	 * @return ActionForward
	 */
	public ActionForward execute(
		ActionMapping mapping,
		ActionForm form,
		HttpServletRequest request,
		HttpServletResponse response) {
		//验证登录以及权限
		String isrights=Check.isRights(request,response,"users_man.do");
		if(!isrights.equals("OK")){
			org.infosys.security.Check.redirectErr(request,response,"err.do?errmsg="+isrights);
			return null;
		}else{
			String ids[]=request.getParameterValues("id");
			if(ids!=null && ids.length>0){
				String sessionUserid=UserData.userInfo(request).get("userid").toString();
				Session session;
				try {
					session = SessionFactory.currentSession();
					Transaction tx=session.beginTransaction();
					for(int i=0;i<ids.length;i++){
						if(!ids[i].equals(sessionUserid)){
							session.delete("from PUserBase a where a.userid='"+ids[i]+"'");
							session.delete("from PUserExt a where a.userid='"+ids[i]+"'");
							RecordLog.log(request,"Del user:"+ids[i],session);
						}
					}
					tx.commit();
				} catch (HibernateException e) {
					e.printStackTrace();
				} finally {
					try {
						SessionFactory.closeSession();
					} catch (HibernateException e1) {
						e1.printStackTrace();
					}
				}
			}
			
			try {
				response.sendRedirect("users_man.do");
			} catch (IOException e) {
				// TODO 自动生成 catch 块
				e.printStackTrace();
			}
			return null;
		}
	}

}