|
|
@@ -102,12 +102,19 @@ func (this *RoleController) GetAuditerByDept() {
|
|
|
var users []userRole.Base_RoleList
|
|
|
rsvc := auditsetting.GetOilAuditSettingService(utils.DBE)
|
|
|
organsvc := organize.GetOrganizeService(utils.DBE)
|
|
|
- depids := organsvc.GetChildByTopId(Id)
|
|
|
- where := "DepartmentId in (" + depids + ")"
|
|
|
+ where := "1=1"
|
|
|
+ //判断超级管理员和有查看所有数据权限的用户
|
|
|
+ svcPerm := permission.GetPermissionService(utils.DBE)
|
|
|
+ isauth := svcPerm.IsAuthorized(this.User.Id, "oil_supplier.marketAccess.AllRecord")
|
|
|
+ if !svcPerm.IsAdmin(this.User.Id) && !isauth {
|
|
|
+ depids := organsvc.GetChildByTopId(Id)
|
|
|
+ where += " and DepartmentId in (" + depids + ")"
|
|
|
+ }else {
|
|
|
+ depids := organsvc.GetChildByTopId("0")
|
|
|
+ where += " and DepartmentId in (" + depids + ")"
|
|
|
+ }
|
|
|
where += " and IsCompanyUser = 0"
|
|
|
- //where := "DepartmentId = " + Id
|
|
|
rsvc.GetEntitysByWhere(BaseUserName, where, &users)
|
|
|
-
|
|
|
var datainfo ErrorDataInfo
|
|
|
if users == nil {
|
|
|
datainfo.Code = 0
|
|
|
@@ -505,6 +512,12 @@ func (this *RoleController) GetUsersForRole() {
|
|
|
if keyword != "" {
|
|
|
where = where + " and Realname like '%" + keyword + "%'"
|
|
|
}
|
|
|
+ //判断超级管理员和有查看所有数据权限的用户
|
|
|
+ svcPerm := permission.GetPermissionService(utils.DBE)
|
|
|
+ isauth := svcPerm.IsAuthorized(this.User.Id, "oil_supplier.marketAccess.AllRecord")
|
|
|
+ if !svcPerm.IsAdmin(this.User.Id) && !isauth {
|
|
|
+ where += " and Unit = '" + this.User.Uint+"'"
|
|
|
+ }
|
|
|
total, users := svc.GetUserListForRole(page.CurrentPage, page.Size, roleid, "Id", where)
|
|
|
|
|
|
var datainfo DataInfo
|
|
|
@@ -528,6 +541,7 @@ func (this *RoleController) UserRoleAddUser() {
|
|
|
for i := 0; i < len(userids); i++ {
|
|
|
if userids[i] != "0" && userids[i] != "" {
|
|
|
//err = svc.AddUserToRole(userid, roleids[i], entity[0])
|
|
|
+ //utils.RBAC.GetUsersForRoleInDomain("rid_"+roleid, utils.DOMAIN)
|
|
|
utils.RBAC.DeleteRoleForUserInDomain("uid_"+userids[i], "rid_"+roleid, utils.DOMAIN)
|
|
|
utils.RBAC.AddRoleForUserInDomain("uid_"+userids[i], "rid_"+roleid, utils.DOMAIN)
|
|
|
}
|