权限控制

1、在路由前进行权限判断

// 路由前的操作
router.beforeEach((to, from, next) => {
    //顶部进度条开始显示加载
    NProgress.start()
    // 如果cookie中有token
    if (getToken()) {
        if (to.path === '/login') {
            // 如果是/login, 路由到/
            next({ path: '/' })
            NProgress.done()
        } else {
            if (store.getters.roles.length === 0) {
                // 判断当前用户是否已拉取完user_info信息
                store.dispatch('GetInfo').then(res => {
                    // 拉取user_info
                    const roles = res.roles
                    store.dispatch('GenerateRoutes', { roles }).then(accessRoutes => {
                        // 测试 默认静态页面
                        // store.dispatch('permission/generateRoutes', { roles }).then(accessRoutes => {
                        // 根据roles权限生成可访问的路由表
                        router.addRoutes(accessRoutes) // 动态添加可访问路由表
                        next({ ...to, replace: true }) // hack方法 确保addRoutes已完成
                    })
                })
                    .catch(err => {
                        store.dispatch('FedLogOut').then(() => {
                            Message.error(err)
                            next({ path: '/' })
                        })
                    })
            } else {
                next()
                // 没有动态改变权限的需求可直接next() 删除下方权限判断 ↓
                // if (hasPermission(store.getters.roles, to.meta.roles)) {
                //   next()
                // } else {
                //   next({ path: '/401', replace: true, query: { noGoBack: true }})
                // }
                // 可删 ↑
            }
        }
    }else {
        //如果没有token
        if(whiteList.indexOf(to.path) !== -1){
            //如果目标路径在白名单中，则直接进入
            next()
        }else {
            next(`/login?redirect=${to.path}`) //重定向到登录页
            // 进度条结束
            NProgress.done()
        }
    }

})

2、调用GetInfo方法获取用户信息

/**
 * 获取用户信息
 * 
 * @return 用户信息
 */
@GetMapping("getInfo")
public AjaxResult getInfo()
{
    LoginUser loginUser = tokenService.getLoginUser(ServletUtils.getRequest());
    SysUser user = loginUser.getUser();
    // 角色集合
    Set<String> roles = permissionService.getRolePermission(user);
    // 权限集合
    Set<String> permissions = permissionService.getMenuPermission(user);
    AjaxResult ajax = AjaxResult.success();
    ajax.put("user", user);
    ajax.put("roles", roles);
    ajax.put("permissions", permissions);
    return ajax;
}

I.超级管理员

SysUser user = loginUser.getUser();

// 角色集合

Set<String> roles = permissionService.getRolePermission(user);

["admin"]

// 权限集合

Set<String> permissions = permissionService.getMenuPermission(user);

["*:*:*"]

II.ry员工

SysUser user = loginUser.getUser();

// 角色集合

Set<String> roles = permissionService.getRolePermission(user);

/**
 * 获取角色数据权限
 * 
 * @param user 用户信息
 * @return 角色权限信息
 */
public Set<String> getRolePermission(SysUser user)
{
    Set<String> roles = new HashSet<String>();
    // 管理员拥有所有权限
    if (user.isAdmin())
    {
        roles.add("admin");
    }
    else
    {
        roles.addAll(roleService.selectRolePermissionByUserId(user.getUserId()));
    }
    return roles;
}

/**
 * 根据用户ID查询权限
 * 
 * @param userId 用户ID
 * @return 权限列表
 */
@Override
public Set<String> selectRolePermissionByUserId(Long userId)
{
    List<SysRole> perms = roleMapper.selectRolePermissionByUserId(userId);
    Set<String> permsSet = new HashSet<>();
    for (SysRole perm : perms)
    {
        if (StringUtils.isNotNull(perm))
        {
            permsSet.addAll(Arrays.asList(perm.getRoleKey().trim().split(",")));
        }
    }
    return permsSet;
}

List<SysRole> perms = roleMapper.selectRolePermissionByUserId(userId);

 select distinct r.role_id, r.role_name, r.role_key, r.role_sort, r.data_scope,
           r.status, r.del_flag, r.create_time, r.remark 
 from sys_role r
        left join sys_user_role ur on ur.role_id = r.role_id
        left join sys_user u on u.user_id = ur.user_id
        left join sys_dept d on u.dept_id = d.dept_id
 WHERE r.del_flag = '0' and ur.user_id = #{userId}
   

关联关系：

permsSet

["common"]

// 权限集合

Set<String> permissions = permissionService.getMenuPermission(user);

/**
 * 获取菜单数据权限
 * 
 * @param user 用户信息
 * @return 菜单权限信息
 */
public Set<String> getMenuPermission(SysUser user)
{
    Set<String> roles = new HashSet<String>();
    // 管理员拥有所有权限
    if (user.isAdmin())
    {
        roles.add("*:*:*");
    }
    else
    {
        roles.addAll(menuService.selectMenuPermsByUserId(user.getUserId()));
    }
    return roles;
}

/**
 * 根据用户ID查询权限
 * 
 * @param userId 用户ID
 * @return 权限列表
 */
@Override
public Set<String> selectMenuPermsByUserId(Long userId)
{
    List<String> perms = menuMapper.selectMenuPermsByUserId(userId);
    Set<String> permsSet = new HashSet<>();
    for (String perm : perms)
    {
        if (StringUtils.isNotEmpty(perm))
        {
            permsSet.addAll(Arrays.asList(perm.trim().split(",")));
        }
    }
    return permsSet;
}

List<String> perms = menuMapper.selectMenuPermsByUserId(userId);

select distinct m.perms
from sys_menu m
    left join sys_role_menu rm on m.menu_id = rm.menu_id
    left join sys_user_role ur on rm.role_id = ur.role_id
where ur.user_id = #{userId}

关联关系：

permsSet

store.dispatch('GetInfo') 出参：

3、调用GenerateRoutes方法获取用户信息

/**
 * 获取路由信息
 * 
 * @return 路由信息
 */
@GetMapping("getRouters")
public AjaxResult getRouters()
{
    LoginUser loginUser = tokenService.getLoginUser(ServletUtils.getRequest());
    // 用户信息
    SysUser user = loginUser.getUser();
    List<SysMenu> menus = menuService.selectMenuTreeByUserId(user.getUserId());
    return AjaxResult.success(menuService.buildMenus(menus));
}

I.超级管理员

List<SysMenu> menus = menuService.selectMenuTreeByUserId(user.getUserId());

递归添加菜单路由树

/**
 * 根据用户名称查询菜单
 * 
 * @param username 用户名称
 * @return 菜单列表
 */
@Override
public List<SysMenu> selectMenuTreeByUserId(Long userId)
{
    List<SysMenu> menus = null;
    if (SecurityUtils.isAdmin(userId))
    {
        menus = menuMapper.selectMenuTreeAll();
    }
    else
    {
        menus = menuMapper.selectMenuTreeByUserId(userId);
    }
    return getChildPerms(menus, 0);
}

List<SysMenu> menus = menuMapper.selectMenuTreeAll();

select distinct m.menu_id, m.parent_id, m.menu_name, m.path, m.component, m.visible, ifnull(m.perms,'') as perms, m.is_frame, m.menu_type, m.icon, m.order_num, m.create_time
from sys_menu m where m.menu_type in ('M', 'C') and m.visible = 0
order by m.parent_id, m.order_num

II.ry员工

List<SysMenu> menus = menuMapper.selectMenuTreeByUserId(userId);

select distinct m.menu_id, m.parent_id, m.menu_name, m.path, m.component, m.visible, ifnull(m.perms,'') as perms, m.is_frame, m.menu_type, m.icon, m.order_num, m.create_time
from sys_menu m
    left join sys_role_menu rm on m.menu_id = rm.menu_id
    left join sys_user_role ur on rm.role_id = ur.role_id
    left join sys_role ro on ur.role_id = ro.role_id
    left join sys_user u on ur.user_id = u.user_id
where u.user_id = #{userId} and m.menu_type in ('M', 'C') and m.visible = 0  AND ro.status = 0
order by m.parent_id, m.order_num

关联关系

store.dispatch('GenerateRoutes', { roles })出参：