78 lines
2.7 KiB
Go
78 lines
2.7 KiB
Go
package hr
|
||
|
||
import (
|
||
"WiiCITMS/process/common"
|
||
"WiiGenerates/WiiCITMS/generates/v1/go/types"
|
||
"WiiGoLibrary/apply/middle/process/v1"
|
||
"errors"
|
||
)
|
||
|
||
// CheckWorkflowApprovalPermission 检查是否有工作流审批权限
|
||
// staffGuid: 员工GUID
|
||
// instanceGuid: 工作流实例GUID
|
||
func CheckWorkflowApprovalPermission(staffGuid string, instanceGuid string) *process.Process {
|
||
// 首先检查是否有全局审批权限
|
||
result := CheckAccessControl(staffGuid, common.OperationApprove, common.ResourceLeave, "")
|
||
if result.HasPermission {
|
||
return process.Success(200)
|
||
}
|
||
|
||
// 如果没有全局权限，则调用通用的权限检查
|
||
return common.WorkflowSvc.CheckPermission(staffGuid, common.OperationApprove, instanceGuid)
|
||
}
|
||
|
||
// CanViewWorkflowInstance 检查是否可以查看工作流实例
|
||
// staffGuid: 员工GUID
|
||
// instanceGuid: 工作流实例GUID
|
||
func CanViewWorkflowInstance(staffGuid string, instanceGuid string) (bool, *process.Process) {
|
||
// 首先检查是否有实例查看权限
|
||
proc := common.WorkflowSvc.CheckPermission(staffGuid, common.OperationView, instanceGuid)
|
||
|
||
// 如果通过权限检查，说明有查看权限
|
||
if !proc.IsError() {
|
||
return true, process.Success(200)
|
||
}
|
||
|
||
// 如果是权限错误以外的错误，直接返回错误
|
||
if proc.Error != nil && proc.Error.Error() != "无权查看此工作流" {
|
||
return false, proc
|
||
}
|
||
if proc.IsError() {
|
||
return false, proc
|
||
}
|
||
|
||
|
||
// 否则检查是否有全局查看权限
|
||
result := CheckAccessControl(staffGuid, common.OperationView, common.ResourceWorkflow, "")
|
||
return result.HasPermission, process.Success(200)
|
||
}
|
||
|
||
// CheckWorkflowPermission 综合检查工作流权限
|
||
// staffGuid: 员工GUID
|
||
// operation: 操作类型（view, approve, create, update, delete）
|
||
// instanceGuid: 工作流实例GUID
|
||
func CheckWorkflowPermission(staffGuid string, operation string, instanceGuid string) *process.Process {
|
||
switch operation {
|
||
case common.OperationView:
|
||
canView, proc := CanViewWorkflowInstance(staffGuid, instanceGuid)
|
||
if proc.IsError() {
|
||
return proc
|
||
}
|
||
if !canView {
|
||
return process.FailError(types.NoPermissionError, errors.New("无权查看此工作流"))
|
||
}
|
||
return process.Success(200)
|
||
case common.OperationApprove:
|
||
return CheckWorkflowApprovalPermission(staffGuid, instanceGuid)
|
||
case common.OperationCreate, common.OperationUpdate, common.OperationDelete:
|
||
// 检查是否有工作流管理权限
|
||
result := CheckAccessControl(staffGuid, operation, common.ResourceWorkflow, "")
|
||
if !result.HasPermission {
|
||
return process.FailError(types.NoPermissionError, errors.New(result.ErrorMessage))
|
||
}
|
||
return process.Success(200)
|
||
default:
|
||
return process.FailError(types.InvalidParamError, errors.New("无效的操作类型"))
|
||
}
|
||
}
|