package com.fdkankan.scene.Interceptor; import cn.hutool.core.collection.CollUtil; import cn.hutool.core.util.StrUtil; import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper; import com.fdkankan.common.constant.CommonStatus; import com.fdkankan.common.constant.ErrorCode; import com.fdkankan.common.constant.PayStatus; import com.fdkankan.common.constant.SceneStatus; import com.fdkankan.common.exception.BusinessException; import com.fdkankan.redis.constant.RedisKey; import com.fdkankan.redis.util.RedisUtil; import com.fdkankan.scene.entity.*; import com.fdkankan.scene.service.*; import com.fdkankan.web.user.SSOLoginHelper; import com.fdkankan.web.user.SSOUser; import com.fdkankan.web.util.WebUtil; import java.io.IOException; import java.util.List; import java.util.Objects; import java.util.Set; import java.util.stream.Collectors; import javax.servlet.http.HttpServletRequest; import lombok.extern.log4j.Log4j2; import org.aspectj.lang.JoinPoint; import org.aspectj.lang.annotation.Aspect; import org.aspectj.lang.annotation.Before; import org.aspectj.lang.annotation.Pointcut; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.core.annotation.Order; import org.springframework.stereotype.Component; import org.springframework.web.context.request.RequestContextHolder; import org.springframework.web.context.request.ServletRequestAttributes; @Log4j2 @Aspect @Component @Order(101) public class CheckPermitAspect { @Autowired private SSOLoginHelper ssoLoginHelper; @Autowired private RedisUtil redisUtil; @Autowired private IScenePlusService scenePlusService; @Autowired private ISceneCooperationService sceneCooperationService; @Autowired private IRoleService roleService; @Autowired private IUserRoleService userRoleService; @Autowired private IUserService userService; @Autowired private ICameraDetailService cameraDetailService; @Pointcut("@annotation(com.fdkankan.scene.annotation.CheckPermit)") public void checkCooperationPermit() { } /** * 前置通知 用于判断用户协作场景是否有协作权限 * * @param joinPoint * 切点 * @throws IOException */ @Before("checkCooperationPermit()") public void doBefore(JoinPoint joinPoint) throws Exception { HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder.getRequestAttributes()).getRequest(); // 读取session中的用户 SSOUser user = ssoLoginHelper.getSsoUser(request.getHeader("token")); if(Objects.isNull(user)){ throw new BusinessException(ErrorCode.TOKEN_NOT_FOUND); } String num = WebUtil.getParameter("num", joinPoint, request); if(StrUtil.isEmpty(num)){ throw new BusinessException(ErrorCode.PARAM_REQUIRED); } ScenePlus scenePlus= scenePlusService.getScenePlusByNum(num); if(Objects.isNull(scenePlus)){ throw new BusinessException(ErrorCode.FAILURE_CODE_5005); } //如果是计算中或者计算出错,返回计算中 if(SceneStatus.wait.code().equals(scenePlus.getSceneStatus()) || SceneStatus.FAILD.code().equals(scenePlus.getSceneStatus())){ throw new BusinessException(ErrorCode.FAILURE_CODE_5033); } //封存 if(!PayStatus.PAY.code().equals(scenePlus.getPayStatus())){ throw new BusinessException(ErrorCode.FAILURE_CODE_5034); } //如果上面场景用户与当前用户不匹配,需要校验当前用户是否拥有某些角色,从而可以访问此场景 List list = userRoleService.list(new LambdaQueryWrapper().eq(UserRole::getUserId, user.getId())); Set roleIdSet = null; if(CollUtil.isNotEmpty(list)){ roleIdSet = list.stream().map(ur -> ur.getRoleId()).collect(Collectors.toSet()); } if(CollUtil.isEmpty(roleIdSet)){ throw new BusinessException(ErrorCode.FAILURE_CODE_5014); } //平台管理员拥有最高权限 if(roleIdSet.contains(5L)){ return; } //判断是否有公司管理者权限,有则放开 // if(roleIdSet.contains(6L)){ //当前登录用户user User currentUser = userService.getById(user.getId()); CameraDetail cameraDetail = cameraDetailService.findByCameraId(scenePlus.getCameraId()); if(Objects.isNull(currentUser) || Objects.isNull(currentUser.getCompanyId()) || Objects.isNull(cameraDetail) || Objects.isNull(cameraDetail.getCompanyId()) || !currentUser.getCompanyId().equals(cameraDetail.getCompanyId())){ throw new BusinessException(ErrorCode.FAILURE_CODE_5014); } // } //校验场景用户是否与当前登录用户相同,相同则跳出 // if(Objects.isNull(scenePlus.getUserId()) || !scenePlus.getUserId().equals(user.getId())){ // throw new BusinessException(ErrorCode.FAILURE_CODE_5014); // } } }