BizPermissionService (Bropen Framework 4.8.1 API)

bropen.framework.core.biz.BizPermissionService

业务文档权限服务

Field Summary

Fields
Modifiers	Name	Description
`static Integer`	`aliasOverridingOrder`

Properties Summary

Properties
Type	Name and description
`BizDefinitionService`	`bizDefinitionService`
`OsmEmployeeService`	`osmEmployeeService`
`grails.persistence.support.PersistenceContextInterceptor`	`persistenceInterceptor`
`SecPermissionService`	`secPermissionService`
`SecRoleService`	`secRoleService`
`SecUserService`	`secUserService`

Methods Summary

Methods
Type	Name and description
`static Map`	`assembleReferenceInfo(Map params)`
`void`	`bootStrapInit()` 监听创建文档事件，插入 DocumentPermission
`Granted`	`canDelete(Employee emp, String docClass, String docController, String entry, Map options = null)` 判断员工是否有删除某种业务文档的权限
`Granted`	`canDelete(Employee emp, Long bdId)`
`Granted`	`canDelete(User user, String docClass, String docController, String entry, Map options = null)` 判断用户是否有删除某种业务文档的权限
`Granted`	`canDelete(User user, Long bdId)`
`Granted`	`canDelete(Employee emp, Object doc, Map options = null)` 判断员工是否有业务文档删除权限
`Granted`	`canDelete(User user, Object doc, Map options = null)` 判断用户是否有业务文档删除权限
`Granted`	`canEdit(Employee emp, String docClass, String docController, String entry, Map options = null)` 同 isEditor
`Granted`	`canEdit(Employee emp, Long bdId)`
`Granted`	`canEdit(User user, String docClass, String docController, String entry, Map options = null)`
`Granted`	`canEdit(User user, Long bdId)`
`Granted`	`canEdit(Employee emp, Object doc, Map options = null)`
`Granted`	`canEdit(User user, Object doc, Map options = null)`
`Granted`	`canRead(Employee emp, String docClass, String docController, String entry, Map options = null)` 同 isReader
`Granted`	`canRead(Employee emp, Long bdId)`
`Granted`	`canRead(Employee emp, String docClass, Map options = null)`
`Granted`	`canRead(User user, String docClass, String docController, String entry, Map options = null)`
`Granted`	`canRead(User user, Long bdId)`
`Granted`	`canRead(User user, String docClass, Map options = null)`
`Granted`	`canRead(Employee emp, Object doc, Map options = null)`
`Granted`	`canRead(User user, Object doc, Map options = null)`
`Granted`	`canReadDocument(Object doc, Map options)` 自动配置在权限的 condition.service_failed 中，用于判断文档查阅权限
`void`	`enableUpdateEvent()` 启用 DocumentPermission 的更新事件
`String`	`encryptReferenceBizId(Object doc, String referenceId, Map params)` 加密 bizId，解决跨应用关联文档的鉴权问题
`List<Long>`	`getGroupNodeAdminUserIds(Map role)` 自动配置在业务文档的 ADM 角色的服务接口上，计算业务文档分组节点的（BizGroupNode）的管理员
`List<Map>`	`getManagedDefinitions(User user, Map options = null)` 根据 ROLE_BD_%_ADM 角色，计算所有相关的业务定义
`List<Map>`	`getManagedDefinitions(Long userId, Map options = null)` 根据 ROLE_BD_%_ADM 角色，计算所有相关的业务定义
`Boolean`	`isAdmin(User user)` 判断用户是否是业务管理员（权限 BD_DEFINITION_ADM）
`Boolean`	`isAdmin(User user, Long bdId)` 判断用户是否是某个业务的业务管理员
`Boolean`	`isAdmin(User user, String docClass, String docController, String entry, Map options = null)` 判断用户是否是某个业务的业务管理员
`Boolean`	`isAdmin(User user, String docClass, Map options = null)`
`Granted`	`isAuthor(Employee emp, Long bdId)` 判断员工是否有起草权限
`Granted`	`isAuthor(Employee emp, String docClass, String docController, String entry, Map options = null)` 判断员工是否有起草权限
`Granted`	`isAuthor(Employee emp, String docClass, Map options = null)`
`Granted`	`isAuthor(EmployeeIdentity ei, Long bdId)` 判断员工身份是否有起草权限
`Granted`	`isAuthor(EmployeeIdentity ei, String docClass, String docController, String entry, Map options = null)`
`Granted`	`isAuthor(EmployeeIdentity ei, String docClass, Map options = null)`
`Granted`	`isDocumentCreator(Object doc, Map options)` 自动配置在权限的 condition.service_failed 中，用于判断作者对文档的编辑、删除权限
`Granted`	`isEditor(Employee emp, String docClass, String docController, String entry, Map options = null)` 判断员工是否有编辑某种业务文档的权限
`Granted`	`isEditor(Employee emp, Long bdId)`
`Granted`	`isEditor(User user, String docClass, String docController, String entry, Map options = null)` 判断用户是否有编辑某种业务文档的权限
`Granted`	`isEditor(User user, Long bdId)`
`Granted`	`isEditor(Employee emp, Object doc, Map options = null)` 判断员工是否有业务文档编辑权限
`Granted`	`isEditor(User user, Object doc, Map options = null)` 判断用户是否有业务文档编辑权限
`Granted`	`isObjectAdmin(Object obj, Map options)` 自动配置在权限 BD_DEFINITION_ADM 的 service_failed 中，用于判断文档定义与业务定义的权限。
`Granted`	`isParticipant(Employee emp, Long bdId)` 判断员工是否有参与权限
`Granted`	`isParticipant(Employee emp, String docClass, String docController, String entry, Map options = null)` 判断员工是否有参与权限
`Granted`	`isParticipant(Employee emp, String docClass, Map options = null)`
`Granted`	`isParticipant(User user, Long bdId)` 判断用户是否有参与权限
`Granted`	`isParticipant(User user, String docClass, String docController, String entry, Map options = null)`
`Granted`	`isParticipant(User user, String docClass, Map options = null)`
`Granted`	`isReader(Employee emp, String docClass, String docController, String entry, Map options = null)` 判断员工是否有某种业务文档的全局查阅权限
`Granted`	`isReader(Employee emp, Long bdId)`
`Granted`	`isReader(Employee emp, String docClass, Map options = null)`
`Granted`	`isReader(User user, String docClass, String docController, String entry, Map options = null)` 判断用户是否有某种业务文档的全局查阅权限
`Granted`	`isReader(User user, Long bdId)`
`Granted`	`isReader(User user, String docClass, Map options = null)`
`Granted`	`isReader(Employee emp, Object doc, Map options = null)` 是否有业务文档的查阅权限
`Granted`	`isReader(User user, Object doc, Map options = null)` 是否有业务文档的查阅权限
`Granted`	`isResourceAdmin(Object bean, Map options)` 自动配置在权限的 service_failed 中，用于判断业务关联资源的权限。
`static void`	`triggerUpdateEvent(String docClass, Long docId)`

Inherited Methods Summary

Inherited Methods
Methods inherited from class	Name
`class Object`	`Object#wait(long, int), Object#wait(long), Object#wait(), Object#equals(Object), Object#toString(), Object#hashCode(), Object#getClass(), Object#notify(), Object#notifyAll()`

- Field Detail
  - public static Integer aliasOverridingOrder
- Property Detail
  - BizDefinitionService bizDefinitionService
  - OsmEmployeeService osmEmployeeService
  - grails.persistence.support.PersistenceContextInterceptor persistenceInterceptor
  - SecPermissionService secPermissionService
  - SecRoleService secRoleService
  - SecUserService secUserService
- Method Detail
  - @Internal@bropen.toolkit.annotation.Internal static final Map assembleReferenceInfo(Map params)
  - void bootStrapInit()
    
    监听创建文档事件，插入 DocumentPermission
  - Granted canDelete(Employee emp, String docClass, String docController, String entry, Map options = null)
    
    判断员工是否有删除某种业务文档的权限
  - Granted canDelete(Employee emp, Long bdId)
  - Granted canDelete(User user, String docClass, String docController, String entry, Map options = null)
    
    判断用户是否有删除某种业务文档的权限
  - Granted canDelete(User user, Long bdId)
  - Granted canDelete(Employee emp, Object doc, Map options = null)
    
    判断员工是否有业务文档删除权限
    Parameters:
    doc - 需要鉴权的业务文档对象
  - Granted canDelete(User user, Object doc, Map options = null)
    
    判断用户是否有业务文档删除权限
  - Granted canEdit(Employee emp, String docClass, String docController, String entry, Map options = null)
    
    同 isEditor
  - Granted canEdit(Employee emp, Long bdId)
  - Granted canEdit(User user, String docClass, String docController, String entry, Map options = null)
  - Granted canEdit(User user, Long bdId)
  - Granted canEdit(Employee emp, Object doc, Map options = null)
  - Granted canEdit(User user, Object doc, Map options = null)
  - Granted canRead(Employee emp, String docClass, String docController, String entry, Map options = null)
    
    同 isReader
  - Granted canRead(Employee emp, Long bdId)
  - @Deprecated Granted canRead(Employee emp, String docClass, Map options = null)
  - Granted canRead(User user, String docClass, String docController, String entry, Map options = null)
  - Granted canRead(User user, Long bdId)
  - @Deprecated Granted canRead(User user, String docClass, Map options = null)
  - Granted canRead(Employee emp, Object doc, Map options = null)
  - Granted canRead(User user, Object doc, Map options = null)
  - @Internal@bropen.toolkit.annotation.Internal Granted canReadDocument(Object doc, Map options)
    
    自动配置在权限的 condition.service_failed 中，用于判断文档查阅权限
    See Also:
    BizDefinitionService.createPermissions
  - @Internal@bropen.toolkit.annotation.Internal void enableUpdateEvent()
    
    启用 DocumentPermission 的更新事件
    事件名 “gorm:afterDocumentPermissionUpdateCommit”，可用于更新搜索引擎的索引等。
  - @Internal@bropen.toolkit.annotation.Internal final String encryptReferenceBizId(Object doc, String referenceId, Map params)
    
    加密 bizId，解决跨应用关联文档的鉴权问题
    Parameters:
    doc - 当前打开的源文档
    referenceId - 保存在 doc 中的、格式为 bizId#docId 的关联文档信息
  - @Internal@bropen.toolkit.annotation.Internal List<Long> getGroupNodeAdminUserIds(Map role)
    
    自动配置在业务文档的 ADM 角色的服务接口上，计算业务文档分组节点的（BizGroupNode）的管理员
    
    Returns:
    返回所有有权限的用户 ID 列表（List）
    Parameters:
    role - 当前业务定义的 ADM 角色
  - List<Map> getManagedDefinitions(User user, Map options = null)
    
    根据 ROLE_BD_%_ADM 角色，计算所有相关的业务定义
    
    Returns:
    形如 [applicationId: x, domainId: x, docController: x, docClass: x, entry: x] 的 Map 列表
    Parameters:
    user - 用户，如为 null 则表示当前用户
    options.applicationId - 业务定义所属应用或应用ID
    options.application
    options.domainId - 业务定义所属域或域ID
    options.domain
  - List<Map> getManagedDefinitions(Long userId, Map options = null)
    
    根据 ROLE_BD_%_ADM 角色，计算所有相关的业务定义
  - Boolean isAdmin(User user)
    
    判断用户是否是业务管理员（权限 BD_DEFINITION_ADM）
    
    Returns:
    true/false
    Parameters:
    user - 用户，如为 null 则表示当前用户
  - Boolean isAdmin(User user, Long bdId)
    
    判断用户是否是某个业务的业务管理员
    
    Returns:
    true/false
    Parameters:
    user - 用户，如为 null 则表示当前用户
    bdId - 业务定义的 id
  - Boolean isAdmin(User user, String docClass, String docController, String entry, Map options = null)
    
    判断用户是否是某个业务的业务管理员
    如果 options 中不包含应用、域的信息，则按照当前应用、当前域、其它域的顺序查找。
    
    Parameters:
    docClass - 文档类名
    docController - 文档控制器名称
    entry - 流程定义 entry
    options.applicationId - 业务定义所属应用或应用ID
    options.application
    options.domainId - 业务定义所属域或域ID
    options.domain
  - @Deprecated Boolean isAdmin(User user, String docClass, Map options = null)
  - Granted isAuthor(Employee emp, Long bdId)
    
    判断员工是否有起草权限
    
    Parameters:
    emp - 员工
    bdId - 业务定义的 id
  - Granted isAuthor(Employee emp, String docClass, String docController, String entry, Map options = null)
    
    判断员工是否有起草权限
    如果 options 中不包含应用、域的信息，则按照当前应用、当前域、其它域的顺序查找。
    
    Parameters:
    docClass - 文档类名
    docController - 文档控制器名称
    entry - 流程定义 entry
    options.applicationId - 业务定义所属应用或应用ID
    options.application
    options.domainId - 业务定义所属域或域ID
    options.domain
  - @Deprecated Granted isAuthor(Employee emp, String docClass, Map options = null)
  - Granted isAuthor(EmployeeIdentity ei, Long bdId)
    
    判断员工身份是否有起草权限
  - Granted isAuthor(EmployeeIdentity ei, String docClass, String docController, String entry, Map options = null)
  - @Deprecated Granted isAuthor(EmployeeIdentity ei, String docClass, Map options = null)
  - @Internal@bropen.toolkit.annotation.Internal Granted isDocumentCreator(Object doc, Map options)
    
    自动配置在权限的 condition.service_failed 中，用于判断作者对文档的编辑、删除权限
    See Also:
    BizDefinitionService.createPermissions
  - Granted isEditor(Employee emp, String docClass, String docController, String entry, Map options = null)
    
    判断员工是否有编辑某种业务文档的权限
  - Granted isEditor(Employee emp, Long bdId)
  - Granted isEditor(User user, String docClass, String docController, String entry, Map options = null)
    
    判断用户是否有编辑某种业务文档的权限
  - Granted isEditor(User user, Long bdId)
  - Granted isEditor(Employee emp, Object doc, Map options = null)
    
    判断员工是否有业务文档编辑权限
    Parameters:
    doc - 需要鉴权的业务文档对象
  - Granted isEditor(User user, Object doc, Map options = null)
    
    判断用户是否有业务文档编辑权限
  - @Internal@bropen.toolkit.annotation.Internal Granted isObjectAdmin(Object obj, Map options)
    
    自动配置在权限 BD_DEFINITION_ADM 的 service_failed 中，用于判断文档定义与业务定义的权限。
  - Granted isParticipant(Employee emp, Long bdId)
    
    判断员工是否有参与权限
    
    Parameters:
    emp - 员工
    bdId - 业务定义的 id
  - Granted isParticipant(Employee emp, String docClass, String docController, String entry, Map options = null)
    
    判断员工是否有参与权限
    如果 options 中不包含应用、域的信息，则按照当前应用、当前域、其它域的顺序查找。
    
    Parameters:
    emp - 员工
    docClass - 文档类名
    docController - 文档控制器名称
    entry - 流程定义 entry
    options.applicationId - 业务定义所属应用或应用ID
    options.application
    options.domainId - 业务定义所属域或域ID
    options.domain
  - @Deprecated Granted isParticipant(Employee emp, String docClass, Map options = null)
  - Granted isParticipant(User user, Long bdId)
    
    判断用户是否有参与权限
  - Granted isParticipant(User user, String docClass, String docController, String entry, Map options = null)
  - @Deprecated Granted isParticipant(User user, String docClass, Map options = null)
  - Granted isReader(Employee emp, String docClass, String docController, String entry, Map options = null)
    
    判断员工是否有某种业务文档的全局查阅权限
    如果 options 中不包含应用、域的信息，则按照当前应用、当前域、其它域的顺序查找。
    
    Parameters:
    emp - 员工对象
    bdId - 业务定义的 id
    docClass - 文档类名
    docController - 文档控制器名称
    entry - 流程定义 entry
    options.applicationId - 业务定义所属应用或应用ID
    options.application
    options.domainId - 业务定义所属域或域ID
    options.domain
  - Granted isReader(Employee emp, Long bdId)
  - @Deprecated Granted isReader(Employee emp, String docClass, Map options = null)
  - Granted isReader(User user, String docClass, String docController, String entry, Map options = null)
    
    判断用户是否有某种业务文档的全局查阅权限
  - Granted isReader(User user, Long bdId)
  - @Deprecated Granted isReader(User user, String docClass, Map options = null)
  - Granted isReader(Employee emp, Object doc, Map options = null)
    
    是否有业务文档的查阅权限
    Parameters:
    doc - 需要鉴权的文档对象
    options.referenceId
    options.referenceClass
    options.referenceBizId
  - Granted isReader(User user, Object doc, Map options = null)
    
    是否有业务文档的查阅权限
  - @Internal@bropen.toolkit.annotation.Internal Granted isResourceAdmin(Object bean, Map options)
    
    自动配置在权限的 service_failed 中，用于判断业务关联资源的权限。
    权限：OSM_POS_ED、SEC_ROLE_ED、SYS_DATADICT_ED。
  - @Internal@bropen.toolkit.annotation.Internal static void triggerUpdateEvent(String docClass, Long docId)

| Detail:
Field
Property
Constructor
Method

BROPEN Documentation, 2020-04-21 11:00

[Groovy] Class BizPermissionService

Field Summary

Properties Summary

Methods Summary

Inherited Methods Summary

Field Detail

public static Integer aliasOverridingOrder

Property Detail

BizDefinitionService bizDefinitionService

OsmEmployeeService osmEmployeeService

grails.persistence.support.PersistenceContextInterceptor persistenceInterceptor

SecPermissionService secPermissionService

SecRoleService secRoleService

SecUserService secUserService

Method Detail

@Internal@bropen.toolkit.annotation.Internal static final Map assembleReferenceInfo(Map params)

void bootStrapInit()

Granted canDelete(Employee emp, String docClass, String docController, String entry, Map options = null)

Granted canDelete(Employee emp, Long bdId)

Granted canDelete(User user, String docClass, String docController, String entry, Map options = null)

Granted canDelete(User user, Long bdId)

Granted canDelete(Employee emp, Object doc, Map options = null)

Granted canDelete(User user, Object doc, Map options = null)

Granted canEdit(Employee emp, String docClass, String docController, String entry, Map options = null)

Granted canEdit(Employee emp, Long bdId)

Granted canEdit(User user, String docClass, String docController, String entry, Map options = null)

Granted canEdit(User user, Long bdId)

Granted canEdit(Employee emp, Object doc, Map options = null)

Granted canEdit(User user, Object doc, Map options = null)

Granted canRead(Employee emp, String docClass, String docController, String entry, Map options = null)

Granted canRead(Employee emp, Long bdId)

@Deprecated Granted canRead(Employee emp, String docClass, Map options = null)

Granted canRead(User user, String docClass, String docController, String entry, Map options = null)

Granted canRead(User user, Long bdId)

@Deprecated Granted canRead(User user, String docClass, Map options = null)

Granted canRead(Employee emp, Object doc, Map options = null)

Granted canRead(User user, Object doc, Map options = null)

@Internal@bropen.toolkit.annotation.Internal Granted canReadDocument(Object doc, Map options)

@Internal@bropen.toolkit.annotation.Internal void enableUpdateEvent()

@Internal@bropen.toolkit.annotation.Internal final String encryptReferenceBizId(Object doc, String referenceId, Map params)

@Internal@bropen.toolkit.annotation.Internal List<Long> getGroupNodeAdminUserIds(Map role)

List<Map> getManagedDefinitions(User user, Map options = null)

List<Map> getManagedDefinitions(Long userId, Map options = null)

Boolean isAdmin(User user)

Boolean isAdmin(User user, Long bdId)

Boolean isAdmin(User user, String docClass, String docController, String entry, Map options = null)

@Deprecated Boolean isAdmin(User user, String docClass, Map options = null)

Granted isAuthor(Employee emp, Long bdId)

Granted isAuthor(Employee emp, String docClass, String docController, String entry, Map options = null)

@Deprecated Granted isAuthor(Employee emp, String docClass, Map options = null)

Granted isAuthor(EmployeeIdentity ei, Long bdId)

Granted isAuthor(EmployeeIdentity ei, String docClass, String docController, String entry, Map options = null)

@Deprecated Granted isAuthor(EmployeeIdentity ei, String docClass, Map options = null)

@Internal@bropen.toolkit.annotation.Internal Granted isDocumentCreator(Object doc, Map options)

Granted isEditor(Employee emp, String docClass, String docController, String entry, Map options = null)

Granted isEditor(Employee emp, Long bdId)

Granted isEditor(User user, String docClass, String docController, String entry, Map options = null)

Granted isEditor(User user, Long bdId)

Granted isEditor(Employee emp, Object doc, Map options = null)

Granted isEditor(User user, Object doc, Map options = null)

@Internal@bropen.toolkit.annotation.Internal Granted isObjectAdmin(Object obj, Map options)

Granted isParticipant(Employee emp, Long bdId)

Granted isParticipant(Employee emp, String docClass, String docController, String entry, Map options = null)

@Deprecated Granted isParticipant(Employee emp, String docClass, Map options = null)

Granted isParticipant(User user, Long bdId)

Granted isParticipant(User user, String docClass, String docController, String entry, Map options = null)

@Deprecated Granted isParticipant(User user, String docClass, Map options = null)

Granted isReader(Employee emp, String docClass, String docController, String entry, Map options = null)

Granted isReader(Employee emp, Long bdId)

@Deprecated Granted isReader(Employee emp, String docClass, Map options = null)

Granted isReader(User user, String docClass, String docController, String entry, Map options = null)

Granted isReader(User user, Long bdId)

@Deprecated Granted isReader(User user, String docClass, Map options = null)

Granted isReader(Employee emp, Object doc, Map options = null)

Granted isReader(User user, Object doc, Map options = null)

@Internal@bropen.toolkit.annotation.Internal Granted isResourceAdmin(Object bean, Map options)

@Internal@bropen.toolkit.annotation.Internal static void triggerUpdateEvent(String docClass, Long docId)