using Bootstrap.Security; using Longbow.Cache; using Longbow.Data; using Longbow.Security; using System; using System.Collections.Generic; using System.Data; using System.Data.Common; using System.Linq; namespace Bootstrap.DataAccess.SQLite { /// /// 用户表实体类 /// public class User : DataAccess.User { /// /// /// 删除用户 /// /// public override bool DeleteUser(IEnumerable value) { bool ret = false; var ids = string.Join(",", value); using (TransactionPackage transaction = DbAccessManager.DBAccess.BeginTransaction()) { try { using (DbCommand cmd = DbAccessManager.DBAccess.CreateCommand(CommandType.Text, $"Delete from UserRole where UserID in ({ids})")) { DbAccessManager.DBAccess.ExecuteNonQuery(cmd); cmd.CommandText = $"delete from UserGroup where UserID in ({ids})"; DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); cmd.CommandText = $"delete from Users where ID in ({ids})"; DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); transaction.CommitTransaction(); CacheCleanUtility.ClearCache(userIds: value); ret = true; } } catch (Exception ex) { transaction.RollbackTransaction(); throw ex; } } return ret; } /// /// 保存新建 /// /// /// public override bool SaveUser(DataAccess.User p) { var ret = false; if (p.Id == 0 && p.Description.Length > 500) p.Description = p.Description.Substring(0, 500); if (p.UserName.Length > 50) p.UserName = p.UserName.Substring(0, 50); p.PassSalt = LgbCryptography.GenerateSalt(); p.Password = LgbCryptography.ComputeHash(p.Password, p.PassSalt); using (TransactionPackage transaction = DbAccessManager.DBAccess.BeginTransaction()) { try { using (DbCommand cmd = DbAccessManager.DBAccess.CreateCommand(CommandType.Text, "select UserName from Users Where UserName = @userName")) { cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@userName", p.UserName)); var un = DbAccessManager.DBAccess.ExecuteScalar(cmd, transaction); if (DbAdapterManager.ToObjectValue(un) == null) { cmd.CommandText = "Insert Into Users (UserName, [Password], PassSalt, DisplayName, RegisterTime, ApprovedBy, ApprovedTime, [Description]) values (@userName, @password, @passSalt, @displayName, datetime('now', 'localtime'), @approvedBy, datetime('now', 'localtime'), @description)"; cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@password", p.Password)); cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@passSalt", p.PassSalt)); cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@displayName", p.DisplayName)); cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@approvedBy", DbAdapterManager.ToDBValue(p.ApprovedBy))); cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@description", p.Description)); DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); cmd.CommandText = $"insert into UserRole (UserID, RoleID) select ID, (select ID from Roles where RoleName = 'Default') RoleId from Users where UserName = '{p.UserName}'"; cmd.Parameters.Clear(); DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); transaction.CommitTransaction(); CacheCleanUtility.ClearCache(userIds: p.Id == 0 ? new List() : new List() { p.Id }); ret = true; } } } catch (Exception ex) { transaction.RollbackTransaction(); throw ex; } } return ret; } /// /// /// /// /// /// public override bool ApproveUser(int id, string approvedBy) { var ret = false; var sql = "update Users set ApprovedTime = datetime('now', 'localtime'), ApprovedBy = @approvedBy where ID = @id"; using (DbCommand cmd = DbAccessManager.DBAccess.CreateCommand(CommandType.Text, sql)) { cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@id", id)); cmd.Parameters.Add(DbAccessManager.DBAccess.CreateParameter("@approvedBy", approvedBy)); ret = DbAccessManager.DBAccess.ExecuteNonQuery(cmd) == 1; if (ret) CacheCleanUtility.ClearCache(userIds: new List() { id }); } return ret; } /// /// /// /// /// /// /// public override bool RejectUser(int id, string rejectBy) { var ret = false; using (TransactionPackage transaction = DbAccessManager.DBAccess.BeginTransaction()) { try { using (DbCommand cmd = DbAccessManager.DBAccess.CreateCommand(CommandType.Text, $"insert into RejectUsers (UserName, DisplayName, RegisterTime, RejectedBy, RejectedTime, RejectedReason) select UserName, DisplayName, Registertime, '{rejectBy}', datetime('now', 'localtime'), '未填写' from Users where ID = {id}")) { DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); cmd.CommandText = $"delete from UserRole where UserId = {id}"; DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); cmd.CommandText = $"delete from UserGroup where UserId = {id}"; DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); cmd.CommandText = $"delete from users where ID = {id}"; DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); transaction.CommitTransaction(); CacheCleanUtility.ClearCache(userIds: new List() { id }); ret = true; } } catch (Exception ex) { transaction.RollbackTransaction(); throw ex; } } return ret; } /// /// 通过角色ID保存当前授权用户(插入) /// /// 角色ID /// 用户ID数组 /// public override bool SaveUsersByRoleId(int roleId, IEnumerable userIds) { bool ret = false; DataTable dt = new DataTable(); dt.Columns.Add("RoleID", typeof(int)); dt.Columns.Add("UserID", typeof(int)); userIds.ToList().ForEach(userId => dt.Rows.Add(roleId, userId)); using (TransactionPackage transaction = DbAccessManager.DBAccess.BeginTransaction()) { try { //删除用户角色表该角色所有的用户 string sql = $"delete from UserRole where RoleID = {roleId}"; using (DbCommand cmd = DbAccessManager.DBAccess.CreateCommand(CommandType.Text, sql)) { DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); //批插入用户角色表 userIds.ToList().ForEach(uId => { cmd.CommandText = $"Insert Into UserRole (UserID, RoleID) Values ( {uId}, {roleId})"; DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); }); transaction.CommitTransaction(); } CacheCleanUtility.ClearCache(userIds: userIds, roleIds: new List() { roleId }); ret = true; } catch (Exception ex) { transaction.RollbackTransaction(); throw ex; } } return ret; } /// /// 通过部门ID保存当前授权用户(插入) /// /// GroupID /// 用户ID数组 /// public override bool SaveUsersByGroupId(int groupId, IEnumerable userIds) { bool ret = false; using (TransactionPackage transaction = DbAccessManager.DBAccess.BeginTransaction()) { try { //删除用户角色表该角色所有的用户 string sql = $"delete from UserGroup where GroupID = {groupId}"; using (DbCommand cmd = DbAccessManager.DBAccess.CreateCommand(CommandType.Text, sql)) { DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); //批插入用户角色表 userIds.ToList().ForEach(uId => { cmd.CommandText = $"Insert Into UserGroup (UserID, GroupID) Values ( {uId}, {groupId})"; DbAccessManager.DBAccess.ExecuteNonQuery(cmd, transaction); }); transaction.CommitTransaction(); } CacheCleanUtility.ClearCache(userIds: userIds, groupIds: new List() { groupId }); ret = true; } catch (Exception ex) { transaction.RollbackTransaction(); throw ex; } } return ret; } /// /// /// /// /// public override BootstrapUser RetrieveUserByUserName(string userName) { var key = string.Format("{0}-{1}", RetrieveUsersByNameDataKey, userName); return CacheManager.GetOrAdd(key, k => { BootstrapUser user = null; var sql = "select UserName, DisplayName, case ifnull(d.Code, '') when '' then '~/images/uploader/' else d.Code end || ifnull(Icon, 'default.jpg') Icon, u.Css from Users u left join Dicts d on d.Define = '0' and d.Category = '头像地址' and Name = '头像路径' where ApprovedTime is not null and UserName = @UserName"; var db = DbAccessManager.DBAccess; var cmd = db.CreateCommand(CommandType.Text, sql); cmd.Parameters.Add(db.CreateParameter("@UserName", userName)); using (DbDataReader reader = db.ExecuteReader(cmd)) { if (reader.Read()) { user = new BootstrapUser { UserName = (string)reader[0], DisplayName = (string)reader[1], Icon = (string)reader[2], Css = reader.IsDBNull(3) ? string.Empty : (string)reader[3] }; } } return user; }, RetrieveUsersByNameDataKey); } } }