Merge remote-tracking branch 'origin/master' into master

刘光辉

15 小时以前 34981c30a78e8bbd7791131059a9210f9928b62c

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
package jnpf.dmsPermission;
 
import jnpf.dmsEntity.permission.entity.DmsFilePermissionEntity;
import jnpf.dmsEntity.permission.enums.DmsPrincipalType;
import jnpf.dmsEntity.permission.enums.DmsResourceScope;
import jnpf.dmsEntity.permission.enums.DmsResourceType;
import jnpf.dmsEntity.permission.model.DmsResourcePath;
import jnpf.dmsEntity.permission.model.DmsSubjectSet;
import org.springframework.stereotype.Component;
 
@Component
public class DmsPermissionMatcher {
 
    public boolean matches(DmsFilePermissionEntity permission, DmsResourcePath path, DmsSubjectSet subjects) {
        return matchesPrincipal(permission, subjects) && coversResource(permission, path);
    }
 
    public boolean matchesPrincipal(DmsFilePermissionEntity permission, DmsSubjectSet subjects) {
        DmsPrincipalType type = DmsPrincipalType.valueOf(permission.getPrincipalType());
        String id = permission.getPrincipalId();
        switch (type) {
            case USER:
                return id.equals(subjects.getUserId());
            case ORG:
                return Boolean.TRUE.equals(permission.getIncludeChildOrgs())
                        ? subjects.getAncestorOrgIds().contains(id)
                        : subjects.getDirectOrgIds().contains(id);
            case POSITION:
                return subjects.getPositionIds().contains(id);
            case ROLE:
                return subjects.getRoleIds().contains(id);
            case GROUP:
                return subjects.getPermissionGroupIds().contains(id);
            default:
                return false;
        }
    }
 
    public boolean coversResource(DmsFilePermissionEntity permission, DmsResourcePath path) {
        DmsResourceType grantedType = DmsResourceType.valueOf(permission.getResourceType());
        if (grantedType == DmsResourceType.FILE_VERSION) {
            return DmsResourceType.FILE_VERSION.name().equals(path.getActualResourceType())
                    && permission.getResourceId().equals(path.getActualResourceId());
        }
        if (grantedType == DmsResourceType.DOCUMENT) {
            return permission.getResourceId().equals(path.getDocumentId());
        }
        if (DmsResourceScope.SUBTREE.name().equals(permission.getResourceScope())) {
            return path.getFolderPath().contains(permission.getResourceId());
        }
        return permission.getResourceId().equals(path.getDirectFolderId());
    }
}