package com.zhgd.mybatis; import cn.hutool.core.collection.CollUtil; import cn.hutool.core.util.StrUtil; import com.alibaba.fastjson.JSONObject; import com.baomidou.mybatisplus.extension.plugins.handler.DataPermissionHandler; import com.zhgd.annotation.DataScope; import com.zhgd.xmgl.modules.video.service.IAiAnalyseHardWareRecordService; import com.zhgd.xmgl.modules.worker.entity.EnterpriseInfo; import com.zhgd.xmgl.modules.worker.mapper.EnterpriseInfoMapper; import com.zhgd.xmgl.modules.worker.service.impl.UserDevAuthorityServiceImpl; import com.zhgd.xmgl.modules.worker.service.impl.UserEnterpriseServiceImpl; import com.zhgd.xmgl.modules.xz.service.impl.XzSupplierQualificationApplyServiceImpl; import com.zhgd.xmgl.security.entity.UserInfo; import com.zhgd.xmgl.security.util.SecurityUtils; import com.zhgd.xmgl.util.EnvironmentUtil; import lombok.extern.slf4j.Slf4j; import net.sf.jsqlparser.JSQLParserException; import net.sf.jsqlparser.expression.Alias; import net.sf.jsqlparser.expression.Expression; import net.sf.jsqlparser.expression.Parenthesis; import net.sf.jsqlparser.expression.StringValue; import net.sf.jsqlparser.expression.operators.conditional.AndExpression; import net.sf.jsqlparser.expression.operators.conditional.OrExpression; import net.sf.jsqlparser.expression.operators.relational.EqualsTo; import net.sf.jsqlparser.expression.operators.relational.ExpressionList; import net.sf.jsqlparser.expression.operators.relational.InExpression; import net.sf.jsqlparser.expression.operators.relational.ItemsList; import net.sf.jsqlparser.parser.CCJSqlParserUtil; import net.sf.jsqlparser.schema.Column; import net.sf.jsqlparser.schema.Table; import net.sf.jsqlparser.statement.select.FromItem; import net.sf.jsqlparser.statement.select.Join; import net.sf.jsqlparser.statement.select.PlainSelect; import org.apache.commons.collections.CollectionUtils; import org.apache.commons.lang3.StringUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Lazy; import java.util.ArrayList; import java.util.HashMap; import java.util.List; import java.util.Map; import java.util.stream.Collectors; @Slf4j public class DataScopeHandler implements DataPermissionHandler { @Lazy @Autowired EnvironmentUtil environmentUtil; @Lazy @Autowired IAiAnalyseHardWareRecordService aiAnalyseHardWareRecordService; @Lazy @Autowired private XzSupplierQualificationApplyServiceImpl xzSupplierQualificationApplyService; @Lazy @Autowired private EnterpriseInfoMapper enterpriseInfoMapper; @Lazy @Autowired private UserDevAuthorityServiceImpl userDevAuthorityService; @Lazy @Autowired private UserEnterpriseServiceImpl userEnterpriseService; @Override public Expression getSqlSegment(Expression where, String mappedStatementId) { return null; } protected String getEngineeringSn() { return "engineering_sn"; } protected String getProjectSn() { return "project_sn"; } /** * 获取设置的过滤的表名和字段名 * * @return */ private HashMap getFieldEnterpriseTables() { HashMap tables = new HashMap<>(); tables.put("worker_info", "enterprise_id"); tables.put("team_info", "enterprise_id"); tables.put("department_info", "enterprise_id"); tables.put("xz_task_progress_content", "enterprise_id"); tables.put("xz_task_progress_alarm", "enterprise_id"); tables.put("xz_task_progress", "enterprise_id"); tables.put("quality_inspection_record", "enterprise_id"); tables.put("worker_info_audit_record", "enterprise_id"); tables.put("xz_material", "enterprise_id"); tables.put("inspect_task_record", "enterprise_id"); tables.put("xz_security_inspect_task_record", "enterprise_id"); tables.put("xz_security_quality_inspection_record", "enterprise_id"); tables.put("exam_notice", "enterprise_id"); tables.put("exam_train_record", "enterprise_id"); tables.put("exam_course_record", "enterprise_id"); tables.put("xz_worker_safe_watch_alarm", "enterprise_id"); if (!environmentUtil.isBaise()) { tables.put("car_info", "enterprise_id"); tables.put("enterprise_info", "id"); } return tables; } private HashMap getFieldVideoTables() { HashMap tables = new HashMap<>(); tables.put("video_item", "item_id"); return tables; } private HashMap getFieldAiTables() { HashMap tables = new HashMap<>(); if (!environmentUtil.isBaise()) { tables.put("ai_analyse_hard_ware_alarm_record", "hardware_id"); } return tables; } public PlainSelect getSqlSegment(PlainSelect plainSelect, Object obj) { UserInfo user = SecurityUtils.getUser(); if (user == null) { return plainSelect; } return dataScopeFilterByProject(plainSelect, user, obj); // else if (type == 2 && user.getAccountType() == 4) { // return dataScopeFilterByProject(plainSelect, user); //} else if (type == 2) { // return dataScopeFilterByEnt(plainSelect, user); //} } private PlainSelect dataScopeFilterByProject(PlainSelect plainSelect, UserInfo user, Object obj) { JSONObject jo = (JSONObject) obj; Object parameter = jo.get("parameter"); DataScope ds = jo.getObject("ds", DataScope.class); init(plainSelect); //expressions List expressions = new ArrayList<>(); if (!DataScopeInterceptor.findIgnoreDataScope(parameter, ds)) { if (user.getAccountType() == 6) { List filterEnterprises = getNeedFilterLeftExpression(plainSelect, getFieldEnterpriseTables(), ds); if (CollUtil.isNotEmpty(filterEnterprises)) { List enterpriseIds = userEnterpriseService.getEnterpriseIdsIfSubProject(); for (String filterEnterprise : filterEnterprises) { inExpression(filterEnterprise, enterpriseIds, plainSelect); } } List filterItems = getNeedFilterLeftExpression(plainSelect, getFieldVideoTables(), ds); if (CollUtil.isNotEmpty(filterItems)) { List videoItems = userDevAuthorityService.getVideoItemsIfSubProject(); for (String item : filterItems) { inExpression(item, videoItems, plainSelect); } } List filterAis = getNeedFilterLeftExpression(plainSelect, getFieldAiTables(), ds, true); if (CollUtil.isNotEmpty(filterAis)) { List videoItems = aiAnalyseHardWareRecordService.getAiAnalyseHardIdsByUserId(); if (CollUtil.isEmpty(videoItems)) { videoItems.add("0"); } videoItems = videoItems.stream().map(s -> "'" + s + "'").collect(Collectors.toList()); for (String filterAi : filterAis) { String sql = StrUtil.format(" ({}.hardware_id in ({}) OR ({}.quality_region_id in (select distinct quality_region_id from quality_region_to_user where user_id = {}))) ", filterAi, StrUtil.join(",", videoItems), filterAi, SecurityUtils.getUser().getUserId()); Expression expression = null; try { expression = CCJSqlParserUtil.parseCondExpression(sql); expressions.add(expression); } catch (JSQLParserException e) { log.error(e.getMessage(), e); } } } } else if (user.getAccountType() == 11) { List filterEnterprises = getNeedFilterLeftExpression(plainSelect, getFieldEnterpriseTables(), ds); EnterpriseInfo ei = enterpriseInfoMapper.getXzSupplierByUserId(SecurityUtils.getUser().getUserId()); Long id; if (ei == null) { id = -1L; } else { id = ei.getId(); } for (String filterEnterprise : filterEnterprises) { String sql = StrUtil.format(" ({} = {} OR {} IN ( SELECT DISTINCT t.enterprise_id FROM " + "(SELECT t.id FROM project_enterprise t WHERE t.enterprise_id = {}) t2 join project_enterprise t on find_in_set( t2.id, ancestors ) )) ", filterEnterprise, id, filterEnterprise, id); Expression expression = null; try { expression = CCJSqlParserUtil.parseCondExpression(sql); expressions.add(expression); } catch (JSQLParserException e) { log.error(e.getMessage(), e); } } } if (expressions.size() > 0) { Expression dataExpression; if (expressions.size() > 1) { //数据权限大于1个,之间用或 OrExpression orExpression = new OrExpression(expressions.get(0), expressions.get(1)); for (int i = 2; i < expressions.size(); i++) { orExpression = new OrExpression(orExpression, expressions.get(i)); } // 数据权限使用单独的括号 防止与其他条件冲突 dataExpression = new Parenthesis(orExpression); } else { dataExpression = expressions.get(0); } Expression where = plainSelect.getWhere(); if (where != null) { where = new AndExpression(where, dataExpression); } else { where = dataExpression; } plainSelect.setWhere(where); } } if (!DataScopeInterceptor.isNotSqlTest()) { String sql = " ('1qqq')"; try { Expression expression = CCJSqlParserUtil.parseCondExpression(sql); Expression where = plainSelect.getWhere(); if (where != null) { where = new AndExpression(where, expression); } else { where = expression; } plainSelect.setWhere(where); } catch (JSQLParserException e) { throw new RuntimeException(e); } } //List scopeIds = systemUserDataScopeService.list(Wrappers.lambdaQuery().eq(SystemUserDataScope::getUserId, user.getUserId())) // .stream().map(u -> u.getRelevanceId()).collect(Collectors.toList()); //if (user.getAccountType() == 4) { // if (scopeIds.size() > 0) { // inExpression(getAliasColumn(plainSelect, getEngineeringSn()), scopeIds, plainSelect); // } else { // equalsTo(getAliasColumn(plainSelect, getProjectSn()), user.getSn(), plainSelect); // } //} //if (user.getAccountType() == 3) { // List engineeringSns = scopeIds.size() > 0 ? scopeIds : engineeringService.getSnListByEnterprise(user.getSn()); // if (engineeringSns.size() == 0) { // engineeringSns.add("0"); // } // inExpression(getAliasColumn(plainSelect, getEngineeringSn()), engineeringSns, plainSelect); //} //if (user.getAccountType() == 2) { // List projectSns = projectService.getSnListForGov(user.getSn()); // if (projectSns.size() == 0) { // projectSns.add("0"); // } // inExpression(getAliasColumn(plainSelect, getProjectSn()), projectSns, plainSelect); //} return plainSelect; } /** * 获取需要过滤的表别名或加字段 * * @param plainSelect * @param tables * @param ds * @param onlyAlas false:表别名.字段 true:表别名 * @return */ private List getNeedFilterLeftExpression(PlainSelect plainSelect, Map tables, DataScope ds, boolean onlyAlas) { ArrayList rtList = new ArrayList<>(); String[] dsArr = ds.includeTable(); if (dsArr.length > 0) { Map nt = new HashMap<>(); for (String ds1 : dsArr) { if (tables.containsKey(ds1)) { nt.put(ds1, tables.get(ds1)); } } tables = nt; } FromItem fromItem = plainSelect.getFromItem(); if (fromItem instanceof Table) { Table table = (Table) fromItem; String name = table.getName(); if (tables.get(name) != null) { String aliasName = null; Alias alias = table.getAlias(); if (alias != null) { aliasName = alias.getName(); } String e; if (onlyAlas) { e = (StringUtils.isEmpty(aliasName) ? name : aliasName); } else { e = (StringUtils.isEmpty(aliasName) ? name : aliasName) + "." + tables.get(name); } rtList.add(e); } } List joins = plainSelect.getJoins(); //主表不是user表 if (!CollectionUtils.isEmpty(joins)) { //判断join的表里有没有user表 for (Join join : joins) { // 判断join里面是否存在user表,不存在则新增 FromItem rightItem = join.getRightItem(); if (rightItem instanceof Table) { Table joinTable = (Table) rightItem; if (tables.get(joinTable.getName()) != null) { String aliasName = null; Alias alias = joinTable.getAlias(); if (alias != null) { aliasName = alias.getName(); } String e; if (onlyAlas) { e = (StringUtils.isEmpty(aliasName) ? joinTable.getName() : aliasName); } else { e = (StringUtils.isEmpty(aliasName) ? joinTable.getName() : aliasName) + "." + tables.get(joinTable.getName()); } rtList.add(e); } } } } return rtList; } private List getNeedFilterLeftExpression(PlainSelect plainSelect, Map tables, DataScope ds) { return getNeedFilterLeftExpression(plainSelect, tables, ds, false); } //private PlainSelect dataScopeFilterByEnt(PlainSelect plainSelect, SecurityUser user) { // init(plainSelect); // if (user.getAccountType() == 3) { // equalsTo(getAliasColumn(plainSelect, getEnterpriseSn()), user.getSn(), plainSelect); // } // if (user.getAccountType() == 2) { // List entSns = enterpriseService.getSnListForGov(user.getSn()); // if (entSns.size() == 0) { // entSns.add("0"); // } // inExpression(getAliasColumn(plainSelect, getEnterpriseSn()), entSns, plainSelect); // } // return plainSelect; //} private void equalsTo(String leftExpression, String rightExpression, PlainSelect plainSelect) { EqualsTo equalsTo = new EqualsTo(); equalsTo.setLeftExpression(new Column(leftExpression)); equalsTo.setRightExpression(new StringValue(rightExpression)); AndExpression andExpression = new AndExpression(plainSelect.getWhere(), equalsTo); plainSelect.setWhere(andExpression); } private void inExpression(String leftExpression, List rightExpression, PlainSelect plainSelect) { InExpression inExpression = new InExpression(); ItemsList itemsList = new ExpressionList(rightExpression.stream().map(StringValue::new).collect(Collectors.toList())); inExpression.setLeftExpression(new Column(leftExpression)); inExpression.setRightItemsList(itemsList); AndExpression andExpression = new AndExpression(plainSelect.getWhere(), inExpression); plainSelect.setWhere(andExpression); } private String getAliasColumn(PlainSelect plainSelect, String sn) { FromItem fromItem = plainSelect.getFromItem(); Alias alias = fromItem.getAlias(); StringBuilder prefix = new StringBuilder(); if (alias != null) { prefix.append(alias).append("."); } return prefix.append(sn).toString(); } private void init(PlainSelect plainSelect) { Expression envCondition = null; try { envCondition = CCJSqlParserUtil.parseCondExpression("1 == 1"); } catch (JSQLParserException e) { log.error(e.getMessage(), e); } Expression where = plainSelect.getWhere(); if (where == null) { plainSelect.setWhere(envCondition); } } //protected void addParam(Insert insert, Object obj){ // SecurityUser user = SecurityUtil.getUser(); // if (user == null) { // return; // } // List columns = insert.getColumns(); // if (CollectionUtils.isEmpty(columns)) { // // 针对不给列名的insert 不处理 // return; // } // if (user.getAccountType() == 4 || user.getAccountType() == 3) { // if (!columns.stream().anyMatch(c -> c.toString().equals(getProjectSn()))) { // columns.add(new Column(getProjectSn())); // if (insert.getItemsList() != null) { // ItemsList itemsList = insert.getItemsList(); // if (itemsList instanceof MultiExpressionList) { // ((MultiExpressionList) itemsList).getExprList().forEach(el -> el.getExpressions().add(getProjectSn(obj))); // } else { // ((ExpressionList) itemsList).getExpressions().add(getProjectSn(obj)); // } // } else { // throw ExceptionUtils.mpe("Failed to process multiple-table update, please exclude the tableName or statementId"); // } // } // } //} //protected Expression getProjectSn(Object engineeringSn){ // SecurityUser user = SecurityUtil.getUser(); // if (user.getAccountType() == 4) { // return new StringValue(user.getSn()); // } // if (user.getAccountType() == 3) { // return new StringValue(engineeringService.getOne(Wrappers.lambdaQuery().eq(Engineering::getEngineeringSn, engineeringSn)).getProjectSn()); // } // return null; //} }