/**
    * Copyright By Grandsoft Company Limited.  
    * 2012-6-28 下午02:21:24
    */
   package gboat2.web.service.impl;
   
   import gboat2.base.core.service.ModuleService;
   import gboat2.base.core.validate.IOperaPrivilegeCheckService;
   import gboat2.base.bridge.model.Resource;
  import gboat2.base.bridge.model.UserSession;
  import gboat2.base.bridge.GboatAppContext;
  
  import java.util.List;
  import java.util.Map;
  
  import org.osgi.framework.Bundle;
  
  /**
   * 操作权限验证服务的实现类
   * @author lysming
   * @since 1.0
   * @date 2012-6-28
   */
  public class SessionPrivilegeCheckServiceImpl implements IOperaPrivilegeCheckService {
  
  	@Override
      public boolean privilegeCheckServiceByMethodName(Map<?, ?> params, Bundle bd) {
          UserSession session = GboatAppContext.getUserSession();
          if(session==null){
          	//如果没有登录直接返回失败 //TODO 该处应该和GboatUserSessionFilter中的配置联动
          	return false;
          }else if ("super".equals(session.getLoginId())){
          	// 如果是超级管理员，直接放权
              return true;
          }
  
          String actionName = (String) params.get("ACTION_NAME");
          String methodName = (String) params.get("METHOD_NAME");
  
          // 如果是用MethodName查询权限则先查询其对应的MethodCode，再根据MethodCode查询
          List<String> operationCodes = ModuleService.getOperationCodesOf(actionName, methodName);
          if (null == operationCodes || operationCodes.isEmpty())
              return true;// 不在受控范围内，直接放权
  
          for (String operationCode : operationCodes) {
              if (session.havePriority(new Resource(actionName, operationCode)))
                  return true; // 只要有一项在权限表中，表示有权限
          }
          return false;
      }
  
  	@Override
  	public boolean privilegeCheckServiceByMethodCode(Map<?, ?> params, Bundle bd) {
  		UserSession session = GboatAppContext.getUserSession();
          // 如果是超级管理员，直接放权
  		if ("super".equals(session.getLoginId()))
  	        return true;
  		
  		String actionName = (String) params.get("ACTION_NAME");
  		String methodCode = (String) params.get("METHOD_CODE");
  		//用 MethodCode 查询权限
  		return session.havePriority(new Resource(actionName, methodCode));
  	}
  
  }