227 lines
7.7 KiB
Go
227 lines
7.7 KiB
Go
|
package hr
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"WiiCITMS/models/hr"
|
|||
|
|
"WiiGenerates/WiiCITMS/generates/v1/go/types"
|
|||
|
|
"WiiGoLibrary/apply/middle/process/v1"
|
|||
|
|
"WiiGoLibrary/framework/db/v1/utils/mssql/unique"
|
|||
|
|
"WiiGoLibrary/framework/hub/v1/dblib"
|
|||
|
|
"errors"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
// PositionPermissionRequest 岗位权限分配请求
|
|||
|
|
type PositionPermissionRequest struct {
|
|||
|
|
PositionGuid string `json:"positionGuid"` // 岗位GUID
|
|||
|
|
PermissionGuid string `json:"permissionGuid"` // 权限GUID
|
|||
|
|
GrantType int `json:"grantType"` // 授权类型：0-直接授权，1-继承授权
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// CheckPermissionRequest 权限检查请求
|
|||
|
|
type CheckPermissionRequest struct {
|
|||
|
|
StaffGuid string `json:"staffGuid"` // 员工GUID
|
|||
|
|
PermissionID int `json:"permissionId"` // 权限ID
|
|||
|
|
OrganizationGuid string `json:"organizationGuid"` // 相关组织GUID（可选）
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// AssignPermissionToPosition 为岗位分配权限
|
|||
|
|
func AssignPermissionToPosition(params PositionPermissionRequest) (*hr.PositionPermissionModel, *process.Process) {
|
|||
|
|
// 验证岗位是否存在
|
|||
|
|
positionGuid, err := unique.FromString(params.PositionGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return nil, process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
position := &hr.PositionModel{}
|
|||
|
|
r := dblib.DBIns.DB.Where("RecordGuid = ? AND (RecordStatus & 524288) = 0", positionGuid).First(position)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return nil, process.FailError(types.PositionNotFoundError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 验证权限是否存在
|
|||
|
|
permissionGuid, err := unique.FromString(params.PermissionGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return nil, process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
permission := &hr.PermissionModel{}
|
|||
|
|
r = dblib.DBIns.DB.Where("RecordGuid = ? AND (RecordStatus & 524288) = 0", permissionGuid).First(permission)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return nil, process.FailError(types.PermissionNotFoundError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 检查是否已存在相同的岗位权限关系
|
|||
|
|
var count int64
|
|||
|
|
r = dblib.DBIns.DB.Model(&hr.PositionPermissionModel{}).
|
|||
|
|
Where("PositionGuid = ? AND PermissionGuid = ? AND (RecordStatus & 524288) = 0",
|
|||
|
|
positionGuid, permissionGuid).Count(&count)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return nil, process.FailError(types.QueryPermissionError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if count > 0 {
|
|||
|
|
return nil, process.FailError(types.DuplicatePermissionError, errors.New("该岗位已拥有此权限"))
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 创建岗位权限关系
|
|||
|
|
relation := hr.PositionPermissionInstance()
|
|||
|
|
relation.PositionGuid = positionGuid
|
|||
|
|
relation.PermissionGuid = permissionGuid
|
|||
|
|
relation.PositionID = position.PositionID
|
|||
|
|
relation.PermissionID = permission.PermissionID
|
|||
|
|
relation.GrantType = int16(params.GrantType)
|
|||
|
|
|
|||
|
|
// 保存到数据库
|
|||
|
|
r = dblib.DBIns.DB.Create(relation)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return nil, process.FailError(types.CreatePermissionError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return relation, process.Success(200)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// RemovePermissionFromPosition 从岗位中移除权限
|
|||
|
|
func RemovePermissionFromPosition(relationGuid string) *process.Process {
|
|||
|
|
// 验证关系ID
|
|||
|
|
guid, err := unique.FromString(relationGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 查询岗位权限关系
|
|||
|
|
relation := &hr.PositionPermissionModel{}
|
|||
|
|
r := dblib.DBIns.DB.Where("RecordGuid = ? AND (RecordStatus & 524288) = 0", guid).First(relation)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return process.FailError(types.PositionPermNotFoundError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 使用原生SQL执行删除操作（设置删除标记）
|
|||
|
|
sql := "UPDATE " + hr.PositionPermissionTable + " SET RecordStatus = RecordStatus | 524288 WHERE RecordGuid = ?"
|
|||
|
|
r = dblib.DBIns.DB.Exec(sql, guid)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return process.FailError(types.DeletePermissionError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return process.Success(200)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// QueryPositionPermissions 查询岗位的权限列表
|
|||
|
|
func QueryPositionPermissions(positionGuid string) ([]*hr.PermissionModel, *process.Process) {
|
|||
|
|
// 验证岗位ID
|
|||
|
|
guid, err := unique.FromString(positionGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return nil, process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 查询岗位是否存在
|
|||
|
|
position := &hr.PositionModel{}
|
|||
|
|
r := dblib.DBIns.DB.Where("RecordGuid = ? AND (RecordStatus & 524288) = 0", guid).First(position)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return nil, process.FailError(types.PositionNotFoundError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 查询岗位权限
|
|||
|
|
result := make([]*hr.PermissionModel, 0)
|
|||
|
|
r = dblib.DBIns.DB.Table(hr.PermissionTable+" p").
|
|||
|
|
Select("p.*").
|
|||
|
|
Joins("JOIN "+hr.PositionPermissionTable+" pp ON p.RecordGuid = pp.PermissionGuid").
|
|||
|
|
Where("pp.PositionGuid = ? AND (p.RecordStatus & 524288) = 0 AND (pp.RecordStatus & 524288) = 0", guid).
|
|||
|
|
Find(&result)
|
|||
|
|
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return nil, process.FailError(types.QueryPermissionError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return result, process.Success(200)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// HasPermission 检查岗位是否拥有特定权限
|
|||
|
|
func HasPermission(positionGuid string, permissionID int) (bool, *process.Process) {
|
|||
|
|
// 验证岗位ID
|
|||
|
|
guid, err := unique.FromString(positionGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return false, process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 查询岗位是否拥有指定权限
|
|||
|
|
var count int64
|
|||
|
|
r := dblib.DBIns.DB.Model(&hr.PositionPermissionModel{}).
|
|||
|
|
Where("PositionGuid = ? AND PermissionID = ? AND (RecordStatus & 524288) = 0", guid, permissionID).
|
|||
|
|
Count(&count)
|
|||
|
|
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return false, process.FailError(types.QueryPermissionError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 如果找到记录，则表示有权限
|
|||
|
|
return count > 0, process.Success(200)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// CheckStaffPermission 检查员工是否拥有特定权限
|
|||
|
|
// 该方法会检查员工在指定组织下的岗位是否拥有相关权限
|
|||
|
|
func CheckStaffPermission(params CheckPermissionRequest) (bool, *process.Process) {
|
|||
|
|
// 验证员工ID
|
|||
|
|
staffGuid, err := unique.FromString(params.StaffGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return false, process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 构建查询条件
|
|||
|
|
query := dblib.DBIns.DB.Table(hr.PositionPermissionTable+" pp").
|
|||
|
|
Joins("JOIN "+hr.Staff2OrganizationTable+" so ON pp.PositionGuid = so.PositionGuid").
|
|||
|
|
Where("so.ObjectGuid = ? AND pp.PermissionID = ? AND (pp.RecordStatus & 524288) = 0 AND (so.RecordStatus & 524288) = 0", staffGuid, params.PermissionID)
|
|||
|
|
|
|||
|
|
// 如果指定了组织，则限定在该组织范围内
|
|||
|
|
if params.OrganizationGuid != "" {
|
|||
|
|
orgGuid, err := unique.FromString(params.OrganizationGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return false, process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
query = query.Where("so.TargetGuid = ?", orgGuid)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 执行查询
|
|||
|
|
var count int64
|
|||
|
|
r := query.Count(&count)
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return false, process.FailError(types.QueryPermissionError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 如果找到记录，则表示有权限
|
|||
|
|
return count > 0, process.Success(200)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// GetPermissionsByStaff 获取员工的所有权限
|
|||
|
|
func GetPermissionsByStaff(staffGuid string) ([]*hr.PermissionModel, *process.Process) {
|
|||
|
|
// 验证员工ID
|
|||
|
|
guid, err := unique.FromString(staffGuid)
|
|||
|
|
if err != nil {
|
|||
|
|
return nil, process.FailError(types.InvalidParamError, err)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 查询员工的所有权限
|
|||
|
|
result := make([]*hr.PermissionModel, 0)
|
|||
|
|
r := dblib.DBIns.DB.Table(hr.PermissionTable+" p").
|
|||
|
|
Select("DISTINCT p.*").
|
|||
|
|
Joins("JOIN "+hr.PositionPermissionTable+" pp ON p.RecordGuid = pp.PermissionGuid").
|
|||
|
|
Joins("JOIN "+hr.Staff2OrganizationTable+" so ON pp.PositionGuid = so.PositionGuid").
|
|||
|
|
Where("so.ObjectGuid = ? AND (p.RecordStatus & 524288) = 0 AND (pp.RecordStatus & 524288) = 0 AND (so.RecordStatus & 524288) = 0", guid).
|
|||
|
|
Find(&result)
|
|||
|
|
|
|||
|
|
if r.Error != nil {
|
|||
|
|
return nil, process.FailError(types.QueryPermissionError, r.Error)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return result, process.Success(200)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// IsSystemAdmin 检查员工是否是系统管理员
|
|||
|
|
func IsSystemAdmin(staffGuid string) (bool, *process.Process) {
|
|||
|
|
// 系统管理员权限特殊处理
|
|||
|
|
params := CheckPermissionRequest{
|
|||
|
|
StaffGuid: staffGuid,
|
|||
|
|
PermissionID: hr.PermSystemAdmin,
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return CheckStaffPermission(params)
|
|||
|
|
}
|