1.系统账户数据库优化： 修改“账户类型”的数据类型为VARCHAR2(1024)，多个角色时以半角“,”分隔。 加密盐。 密码加密优化；账户...

yzh

2022-06-15 f63d8ead25bdb3c32dacca817a059bd30390e9bc

 web/Dao/UserDao.cs

@@ -6,6 +6,7 @@
using System.Collections.Generic;
using System.Configuration;
using System.Data.Common;
using System.Text;

namespace Dao
{
@@ -23,7 +24,9 @@
                if (!((DbDataReader)reader).Read() || !this.ReadInfo(reader, user))
                    return false;
            }
            user.MenuIDList = this.LoadUserMenuList(user.UserID);
            //作废用户权限，改使用角色权限
            //user.MenuIDList = this.LoadUserMenuList(user.UserID);
            user.MenuIDList = this.LoadUserRoleMenuList(user.UserID);
            return true;
        }

@@ -48,6 +51,7 @@
            return list;
        }

        //edit:yangzh by 20220615 已作废（已使用用户角色关联权限--LoadUserRoleMenuList(int userID) ）
        public Dictionary<string, SysUserMenu> LoadUserMenuList(int userID)
        {
            Dictionary<string, SysUserMenu> dictionary = new Dictionary<string, SysUserMenu>();
@@ -64,6 +68,66 @@
            return dictionary;
        }

            public Dictionary<string, SysUserMenu> LoadUserRoleMenuList(int userID)
        {
            StringBuilder stringBuilder = new StringBuilder();

            Dictionary<string, SysUserMenu> dictionary = new Dictionary<string, SysUserMenu>();
            string userType = GetUserRoleByUserId(userID);
            if (!string.IsNullOrEmpty(userType))
            {
                List<object> list = DataConverter.stringToList(userType);
                if (list.Count > 0)
                {
                    stringBuilder.Append(" select sm.* from sys_menu sm ");
                    stringBuilder.Append(" left join ( ");
                    stringBuilder.Append(" select distinct * from ( ");
                    stringBuilder.Append(" select * from sys_role_menu where role_id = " + list[0] + " ");

                    for (int i = 1; i < list.Count; i++)
                    {
                        stringBuilder.Append(" union (select * from sys_role_menu where role_id = " + list[i] + ") ");

                    }
                    stringBuilder.Append(" ) bb ");
                    stringBuilder.Append(" ) cc on cc.menu_id = sm.menu_id ");
                    stringBuilder.Append(" where cc.menu_id is not null ");
                    using (OracleDataReader reader = OracleHelper.ExecuteReader(stringBuilder.ToString(), OracleHelper.Connection))
                    {
                        while (reader != null && ((DbDataReader)reader).Read())
                        {
                            /**
                            OracleReaderWrapper oracleReaderWrapper = new OracleReaderWrapper(reader);
                            string menuID = oracleReaderWrapper.GetString("MENU_ID", "");
                            string menuName = oracleReaderWrapper.GetString("MENU_NAME", "");
                            string remark = oracleReaderWrapper.GetString("REMARK", "");
                            string parentID = oracleReaderWrapper.GetString("PARENT_ID", "");
                            int menuLV = oracleReaderWrapper.GetInt("MENU_LV", 0);
                            SysMenu sysMenu = new SysMenu();
                            sysMenu.MenuID = menuID;
                            sysMenu.MenuName = menuName;
                            sysMenu.Remark = remark;
                            sysMenu.ParentID = parentID;
                            sysMenu.MenuLV = menuLV;

                            dictionary[menuID] = sysMenu;
                            **/

                            OracleReaderWrapper oracleReaderWrapper = new OracleReaderWrapper(reader);
                            string string1 = oracleReaderWrapper.GetString("MENU_ID", "");
                            //string string2 = oracleReaderWrapper.GetString("MENU_DATA", "");
                            string string2 = "";

                            dictionary[string1] = new SysUserMenu(string1, string2);

                        }
                    }
                }

            }
            return dictionary;
        }

        public List<SysMenu> LoadSysMenuList()
        {
            List<SysMenu> list = new List<SysMenu>();
@@ -75,7 +139,7 @@
            return list;
        }

//新加登陆日志
        //新加登陆日志
         public List<SysMenu> LoadSysMenuIDList(int menuid, int menulv)
    {
      List<SysMenu> list = new List<SysMenu>();
@@ -132,7 +196,7 @@
            e.Password = oracleReaderWrapper.GetString("PASSWORD", "");
            e.Salt = oracleReaderWrapper.GetString("SALT", "");
            e.UserName = oracleReaderWrapper.GetString("USER_NAME", "");
            e.UserType = oracleReaderWrapper.GetInt("USER_TYPE", 1);
            e.UserType = oracleReaderWrapper.GetString("USER_TYPE", "");
            e.ExpireTime = oracleReaderWrapper.GetDateTime("EXPIRE_TIME");
            e.CreateTime = oracleReaderWrapper.GetDateTime("CREATE_TIME");
            e.Remark = oracleReaderWrapper.GetString("REMARK", "");
@@ -167,8 +231,22 @@
                if (reader != null && ((DbDataReader)reader).Read())
                    this.ReadInfo(reader, e);
            }
            e.MenuIDList = this.LoadUserMenuList(userID);
            //作废用户权限，改使用角色权限
            //e.MenuIDList = this.LoadUserMenuList(userID);
            e.MenuIDList = this.LoadUserRoleMenuList(userID);
            return e;
        }

        //根据账户ID获取用户角色集
        public string GetUserRoleByUserId(int userID)
        {
            SysUser e = new SysUser();
            using (OracleDataReader reader = OracleHelper.ExecuteReader("SELECT * FROM SYS_USER WHERE USER_ID=:USER_ID", OracleHelper.Connection, new OracleParameter("USER_ID", (object)userID)))
            {
                if (reader != null && ((DbDataReader)reader).Read())
                    this.ReadInfo(reader, e);
            }
            return e.UserType;
        }

        public SysUser GetUser(string account)
@@ -266,14 +344,14 @@
            foreach (string str in menuIDArray)
            {
                OracleParameter[] oracleParameterArray2 = new OracleParameter[3]
        {
          new OracleParameter(":USER_ID", (object) userid),
          new OracleParameter(":MENU_ID", (object) str),
          new OracleParameter(":MENU_DATA", (object) "")
        };
                {
                  new OracleParameter(":USER_ID", (object) userid),
                  new OracleParameter(":MENU_ID", (object) str),
                  new OracleParameter(":MENU_DATA", (object) "")
                };
                list.Add(new KeyValuePair<string, OracleParameter[]>(key2, oracleParameterArray2));
                OracleHelper.ExecuteSqlTran(list, OracleHelper.Connection);
            }
            OracleHelper.ExecuteSqlTran(list, OracleHelper.Connection);
        }

        private int ReadCount(OracleDataReader reader)