@Override public boolean hasPermission(long userId, long permissionId) { User user = userService.findById(userId); if (user == null || !user.isStatusOk()) { return false; } if (roleService.isSupperAdmin(userId)) { return true; } List<Permission> permissions = findPermissionListByUserId(userId); if (permissions == null || permissions.isEmpty()) { return false; } for (Permission permission : permissions) { if (permission.getId().equals(permissionId)) { return true; } } return false; }
@Override public boolean hasPermission(long userId, String actionKey) { User user = userService.findById(userId); if (user == null || !user.isStatusOk()) { return false; } if (roleService.isSupperAdmin(userId)) { return true; } List<Permission> permissions = findPermissionListByUserId(userId); if (permissions == null || permissions.isEmpty()) { return false; } for (Permission permission : permissions) { if (permission.getActionKey().equals(actionKey)) { return true; } } return false; }
/** * 获取用户信息 */ public void index() { Long id = getParaToLong("id"); if (id == null) { renderFailJson(); return; } User user = userService.findById(id); renderJson(Ret.ok().set("user", user)); }
public void permissions() { User user = userService.findById(getParaToLong()); setAttr("user", user); List<Permission> permissions = permissionService.findAll(); setAttr("permissionGroup", PermissionKits.groupPermission(permissions)); render("user/user_permissions.html"); }
public void detail() { Long uid = getParaToLong(); User user = userService.findById(uid); setAttr("user", user); exeOtherAction(user); if (exeOtherAction(user)) { render(getRenderHtml()); } }
/** * 用户信息页面 */ public void index() { //不支持渲染用户详情 if (hasTemplate("user_detail.html") == false) { renderError(404); return; } Long id = getParaToLong(); if (id == null) { renderError(404); return; } User user = userService.findById(id); if (user == null) { renderError(404); return; } setAttr("user", user.keepSafe()); render("user_detail.html"); }
@EmptyValidate({ @Form(name = "path", message = "请先选择图片") }) public void doSaveAvatar(String path, Long uid, int x, int y, int w, int h) { User user = userService.findById(uid); if (user == null) { renderJson(Ret.fail()); return; } String attachmentRoot = StrUtils.isNotBlank(JPressConfig.me.getAttachmentRoot()) ? JPressConfig.me.getAttachmentRoot() : PathKit.getWebRootPath(); String oldPath = attachmentRoot + path; //先进行图片缩放,保证图片和html的图片显示大小一致 String zoomPath = AttachmentUtils.newAttachemnetFile(FileUtils.getSuffix(path)).getAbsolutePath(); ImageUtils.zoom(500, oldPath, zoomPath); //500的值必须和 html图片的max-width值一样 //进行剪切 String newAvatarPath = AttachmentUtils.newAttachemnetFile(FileUtils.getSuffix(path)).getAbsolutePath(); ImageUtils.crop(zoomPath, newAvatarPath, x, y, w, h); String newPath = FileUtils.removePrefix(newAvatarPath, attachmentRoot); AliyunOssUtils.upload(newPath, new File(newAvatarPath)); user.setAvatar(newPath); userService.saveOrUpdate(user); renderJson(Ret.ok()); }
@Override public void intercept(Invocation inv) { Controller controller = inv.getController(); User user = controller.getAttr(JPressConsts.ATTR_LOGINED_USER); if (user != null) { inv.invoke(); return; } String uid = EncryptCookieUtils.get(inv.getController(), JPressConsts.COOKIE_UID); if (StrUtils.isBlank(uid)) { inv.invoke(); return; } user = userService.findById(uid); if (user != null) { inv.getController().setAttr(JPressConsts.ATTR_LOGINED_USER, user); } inv.invoke(); }
public void index() { Long userId = getParaToLong("userId"); if (userId == null) { renderJson(Ret.fail().set("message", "userId不能为空")); return; } // 如果当前用户不是超级管理员 // 需要对传入的ID进行验证,只能自己给自己发送邮件 if (roleService.isSupperAdmin(getLoginedUser().getId()) == false) { if (getLoginedUser().getId().equals(userId) == false) { renderJson(Ret.fail().set("message", "没有权限操作")); return; } } User user = userService.findById(userId); if (user == null) { renderJson(Ret.fail().set("message", "用户不存在或已经被删除")); return; } UserEmailSender.sendEmailForUserEmailActivate(user); renderJson(Ret.ok().set("message", "激活邮件已经发送成功")); }
@EmptyValidate({ @Form(name = "oldPwd", message = "旧不能为空"), @Form(name = "newPwd", message = "新密码不能为空"), @Form(name = "confirmPwd", message = "确认密码不能为空") }) public void doUpdatePwd(long uid, String oldPwd, String newPwd, String confirmPwd) { User user = userService.findById(uid); if (user == null) { renderJson(Ret.fail().set("message", "该用户不存在")); return; } if (userService.doValidateUserPwd(user, oldPwd).isFail()) { renderJson(Ret.fail().set("message", "密码错误")); return; } if (newPwd.equals(confirmPwd) == false) { renderJson(Ret.fail().set("message", "两次出入密码不一致")); return; } String salt = user.getSalt(); String hashedPass = HashKit.sha256(salt + newPwd); user.setPassword(hashedPass); userService.update(user); renderJson(Ret.ok()); }
controller.setAttr(JPressConsts.ATTR_LOGINED_USER, userService.findById(userId));
public void intercept(Invocation inv) { String uid = EncryptCookieUtils.get(inv.getController(), JPressConsts.COOKIE_UID); if (StrUtils.isBlank(uid)) { inv.getController().redirect("/admin/login"); return; } User user = us.findById(uid); if (user == null || !user.isStatusOk()) { inv.getController().redirect("/admin/login"); return; } List<MenuGroup> systemMenuGroups = SystemMenuManager.me().getSystemMenus(); List<MenuGroup> moduleMenuGroups = SystemMenuManager.me().getModuleMenus(); inv.getController().setAttr("systemMenuGroups", systemMenuGroups); inv.getController().setAttr("moduleMenuGroups", moduleMenuGroups); inv.getController().setAttr(JPressConsts.ATTR_LOGINED_USER, user); inv.invoke(); }
/** * 用户激活页面 */ public void activate() { String id = getPara("id"); if (StrUtils.isBlank(id)) { renderError(404); return; } AuthCode authCode = AuthCodeKit.get(id); if (authCode == null) { setAttr("code", 1); setAttr("message", "链接已经失效,可以尝试再次发送激活邮件"); render("user_activate.html", default_user_register_activate); return; } User user = userService.findById(authCode.getUserId()); if (user == null) { setAttr("code", 2); setAttr("message", "用户不存在或已经被删除"); render("user_activate.html", default_user_register_activate); return; } user.setStatus(User.STATUS_OK); userService.update(user); setAttr("code", 0); setAttr("user", user); render("user_activate.html", default_user_register_activate); }
/** * 邮件激活 */ public void emailactivate() { String id = getPara("id"); if (StrUtils.isBlank(id)) { renderError(404); return; } AuthCode authCode = AuthCodeKit.get(id); if (authCode == null) { setAttr("code", 1); setAttr("message", "链接已经失效,您可以尝试在用户中心再次发送激活邮件"); render("user_emailactivate.html", default_user_register_emailactivate); return; } User user = userService.findById(authCode.getUserId()); if (user == null) { setAttr("code", 2); setAttr("message", "用户不存在或已经被删除"); render("user_emailactivate.html", default_user_register_emailactivate); return; } user.setEmailStatus(User.STATUS_OK); userService.update(user); setAttr("code", 0); setAttr("user", user); render("user_emailactivate.html", default_user_register_emailactivate); }
String hashedPass = HashKit.sha256(salt + pwd); User user = userService.findById(1l); if (user == null) user = new User();
public void index() { Article article = getArticle(); assertNotNull(article); //当文章处于审核中、草稿等的时候,显示404 if (!article.isNormal()) { renderError(404); return; } if (StrUtils.isNotBlank(article.getLinkTo())) { redirect(article.getLinkTo()); return; } //设置页面的seo信息 setSeoInfos(article); //设置菜单高亮 doFlagMenuActive(article); //记录当前浏览量 articleService.doIncArticleViewCount(article.getId()); User articleAuthor = article.getUserId() != null ? userService.findById(article.getUserId()) : null; article.put("user", articleAuthor); setAttr("article", article); render(article.getHtmlView()); }
String hashedPass = HashKit.sha256(salt + pwd); User user = userService.findById(1l); if (user == null) user = new User();