Yi.Admin/Yi.Framework.Net6/Yi.Framework.WebCore/DbExtend/DbFiterExtend.cs

using Microsoft.Extensions.DependencyInjection;
using SqlSugar;
using System.Linq;
using Yi.Framework.Common.Base;
using Yi.Framework.Common.Const;
using Yi.Framework.Common.Enum;
using Yi.Framework.Common.Models;
using Yi.Framework.Core.Cache;
using Yi.Framework.DtoModel.Base.Dto;
using Yi.Framework.Model.RABC.Entitys;
using Yi.Framework.WebCore.CommonExtend;

namespace Yi.Framework.WebCore.DbExtend
{
    public class DbFiterExtend
    {
        public static void Data(SqlSugarClient db)
        {
            //非请求情况
            if (!ServiceLocator.GetHttp(out var httpContext))
            {
                return;
            }

            //无需授权情况
            var userName = httpContext?.GetUserIdInfo();
            if (userName is null)
            {
                return;
            }

            //超级管理员直接放行
            if (SystemConst.Admin.Equals(userName))
            {
                return;
            }

            var userId = httpContext?.GetUserIdInfo();

            //根据缓存获取全部用户信息
            var userRoleMenu = ServiceLocator.Instance?.GetService<CacheInvoker>()?.Get<UserRoleMenuDto>($"Yi:UserInfo:{userId}");


            var roles = userRoleMenu?.Roles;
            if (roles!.IsNull())
            {
                roles = new();
            }

            long deptId = userRoleMenu?.User.DeptId ?? -1;
            //根据角色的数据范围，来添加相对于的数据权限
            if (roles is not null)
            {
                foreach (var role in roles)
                {
                    //默认为全部
                    DataScopeEnum dataScope = (DataScopeEnum)(role.DataScope ?? DataScopeEnum.ALL.GetHashCode());
                    switch (dataScope)
                    {
                        case DataScopeEnum.ALL:
                            //直接放行
                            break;
                        case DataScopeEnum.DEPT:
                            //只能查询到自己的部门的数据
                            db.QueryFilter.Add(new TableFilterItem<UserEntity>(it => it.DeptId == deptId, true));
                            break;
                        case DataScopeEnum.USER:
                            //只能查询到自己
                            db.QueryFilter.Add(new TableFilterItem<UserEntity>(it => it.Id == userId, true));
                            break;
                        case DataScopeEnum.CUSTOM:
                            //自定义查询
                            var filter = new TableFilterItem<UserEntity>(it => SqlFunc.Subqueryable<RoleDeptEntity>().Where(f => f.DeptId == it.DeptId && f.RoleId == role.Id).Any(), true);
                            db.QueryFilter.Add(filter);
                            break;
                        case DataScopeEnum.DEPT_FOLLOW:
                            //放行自己部门及以下
                            var allChildDepts = db.Queryable<DeptEntity>().ToChildList(it => it.ParentId, deptId);

                            var filter1 = new TableFilterItem<UserEntity>(it => allChildDepts.Select(f => f.Id).ToList().Contains(it.DeptId ?? -1), true);

                            db.QueryFilter.Add(filter1);

                            //部门无需过滤
                            //var filter2 = new TableFilterItem<DeptEntity>(it => allChildDepts.Select(f => f.Id).ToList().Contains(it.Id),true);
                            //db.QueryFilter.Add(filter2);
                            break;
                        default:
                            break;
                    }
                }
            }
        }
    }
}