IOT/SERVER/IotAdmin/app/system/models/datascope.go

package models

import (
	"IotAdmin/core/sdk/pkg"
	"errors"

	"gorm.io/gorm"

	log "IotAdmin/core/logger"
	"IotAdmin/core/sdk/config"
)

type DataPermission struct {
	DataScope string
	UserId    int
	OrgId     int
	RoleId    int
}

func (e *DataPermission) GetDataScope(tableName string, db *gorm.DB) (*gorm.DB, error) {

	if !config.ApplicationConfig.EnabledDP {
		usageStr := `数据权限已经为您` + pkg.Green(`关闭`) + `，如需开启请参考配置文件字段说明`
		log.Debugf("%s\n", usageStr)
		return db, nil
	}
	user := new(SysUser)
	role := new(SysRole)
	err := db.Find(user, e.UserId).Error
	if err != nil {
		return nil, errors.New("获取用户数据出错 msg:" + err.Error())
	}
	err = db.Find(role, user.RoleId).Error
	if err != nil {
		return nil, errors.New("获取用户数据出错 msg:" + err.Error())
	}
	if role.DataScope == "2" {
		db = db.Where(tableName+".create_by in (select sys_user.user_id from sys_role_org left join sys_user on sys_user.org_id=sys_role_org.org_id where sys_role_org.role_id = ?)", user.RoleId)
	}
	if role.DataScope == "3" {
		db = db.Where(tableName+".create_by in (SELECT user_id from sys_user where org_id = ? )", user.OrgId)
	}
	if role.DataScope == "4" {
		db = db.Where(tableName+".create_by in (SELECT user_id from sys_user where sys_user.org_id in(select org_id from sys_org where org_path like ? ))", "%"+pkg.IntToString(user.OrgId)+"%")
	}
	if role.DataScope == "5" || role.DataScope == "" {
		db = db.Where(tableName+".create_by = ?", e.UserId)
	}

	return db, nil
}

//func DataScopes(tableName string, userId int) func(db *gorm.DB) *gorm.DB {
//	return func(db *gorm.DB) *gorm.DB {
//		user := new(SysUser)
//		role := new(SysRole)
//		user.UserId = userId
//		err := db.Find(user, userId).Error
//		if err != nil {
//			db.Error = errors.New("获取用户数据出错 msg:" + err.Error())
//			return db
//		}
//		err = db.Find(role, user.RoleId).Error
//		if err != nil {
//			db.Error = errors.New("获取用户数据出错 msg:" + err.Error())
//			return db
//		}
//		if role.DataScope == "2" {
//			return db.Where(tableName+".create_by in (select sys_user.user_id from sys_role_org left join sys_user on sys_user.org_id=sys_role_org.org_id where sys_role_org.role_id = ?)", user.RoleId)
//		}
//		if role.DataScope == "3" {
//			return db.Where(tableName+".create_by in (SELECT user_id from sys_user where org_id = ? )", user.OrgId)
//		}
//		if role.DataScope == "4" {
//			return db.Where(tableName+".create_by in (SELECT user_id from sys_user where sys_user.org_id in(select org_id from sys_org where org_path like ? ))", "%"+pkg.IntToString(user.OrgId)+"%")
//		}
//		if role.DataScope == "5" || role.DataScope == "" {
//			return db.Where(tableName+".create_by = ?", userId)
//		}
//		return db
//	}
//}