com.seeyon.v3x.common.security

类 SecurityCheck

java.lang.Object

com.seeyon.v3x.common.security.SecurityCheck

public class SecurityCheck
extends java.lang.Object

协同访问安全控制主程序

构造器概要

构造器

构造器和说明
SecurityCheck()

方法概要

限定符和类型	方法和说明
static boolean	hasFormQueryPermission(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, com.seeyon.ctp.common.authenticate.domain.User user, java.lang.Long appId, java.lang.String objectName, java.lang.String summaryId) 是否具有表单查询的权限
static void	init()
static boolean	isDocCanAccess(java.lang.Long archiveId) 文档权限判断
static boolean	isLicit(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, com.seeyon.ctp.common.constants.ApplicationCategoryEnum appEnum, com.seeyon.ctp.common.authenticate.domain.User user, java.lang.Long objectId, CtpAffair affair, java.lang.Long preArchiveId) 安全防护，校验是否有权限查看主题
static boolean	isLicit(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, com.seeyon.ctp.common.constants.ApplicationCategoryEnum appEnum, com.seeyon.ctp.common.authenticate.domain.User user, java.lang.Long objectId, CtpAffair affair, java.lang.Long preArchiveId, boolean responseMsg) 安全防护，校验是否有权限查看主题
static boolean	isLicit(SecurityCheckParam param) 权限校验
static boolean	isSupervisor(java.lang.Long currentUserId, java.lang.Long objectId) 是否是流程的督办人
static java.lang.String	printInbreakTrace(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, com.seeyon.ctp.common.authenticate.domain.User user, com.seeyon.ctp.common.constants.ApplicationCategoryEnum appEnum) 记录非法访问日志
void	setSecurityCheckers(java.util.Map<java.lang.String,SecurityControl> securityCheckers)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

SecurityCheck

public SecurityCheck()

方法详细资料

setSecurityCheckers

public void setSecurityCheckers(java.util.Map<java.lang.String,SecurityControl> securityCheckers)

init

@RefreshInterfacesAfterUpdate(inface=SecurityControl.class)
public static void init()

isLicit

public static boolean isLicit(javax.servlet.http.HttpServletRequest request,
                              javax.servlet.http.HttpServletResponse response,
                              com.seeyon.ctp.common.constants.ApplicationCategoryEnum appEnum,
                              com.seeyon.ctp.common.authenticate.domain.User user,
                              java.lang.Long objectId,
                              CtpAffair affair,
                              java.lang.Long preArchiveId,
                              boolean responseMsg)

安全防护，校验是否有权限查看主题

参数:

request -

response -

appEnum - 应用枚举

user - CurrentUser

objectId - 主题对象的id

affair - 用于协同和公文，其他应用传null

preArchiveId - 预归档Id，用于协同，其他应用传null

responseMsg - 是否向前台推送消息

返回:

isLicit

public static boolean isLicit(SecurityCheckParam param)

权限校验

参数:

param -

isLicit

public static boolean isLicit(javax.servlet.http.HttpServletRequest request,
                              javax.servlet.http.HttpServletResponse response,
                              com.seeyon.ctp.common.constants.ApplicationCategoryEnum appEnum,
                              com.seeyon.ctp.common.authenticate.domain.User user,
                              java.lang.Long objectId,
                              CtpAffair affair,
                              java.lang.Long preArchiveId)

安全防护，校验是否有权限查看主题

参数:

request -

response -

appEnum - 应用枚举

user - CurrentUser

objectId - 主题对象的id

affair - 用于协同和公文，其他应用传null

preArchiveId - 预归档Id，用于协同，其他应用传null

返回:

printInbreakTrace

public static java.lang.String printInbreakTrace(javax.servlet.http.HttpServletRequest request,
                                                 javax.servlet.http.HttpServletResponse response,
                                                 com.seeyon.ctp.common.authenticate.domain.User user,
                                                 com.seeyon.ctp.common.constants.ApplicationCategoryEnum appEnum)

记录非法访问日志

参数:

request -

user -

subject -

返回:

isSupervisor

public static boolean isSupervisor(java.lang.Long currentUserId,
                                   java.lang.Long objectId)

是否是流程的督办人

参数:

currentUserId -

objectId - summaryId

isDocCanAccess

public static boolean isDocCanAccess(java.lang.Long archiveId)

文档权限判断

参数:

archiveId -

返回:

hasFormQueryPermission

public static boolean hasFormQueryPermission(javax.servlet.http.HttpServletRequest request,
                                             javax.servlet.http.HttpServletResponse response,
                                             com.seeyon.ctp.common.authenticate.domain.User user,
                                             java.lang.Long appId,
                                             java.lang.String objectName,
                                             java.lang.String summaryId)

是否具有表单查询的权限

参数:

request -

response -

user -

返回: