package project.web.admin;
|
|
import java.text.MessageFormat;
|
import java.util.Date;
|
import java.util.List;
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import org.slf4j.Logger;
|
import org.slf4j.LoggerFactory;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.security.providers.encoding.PasswordEncoder;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
import org.springframework.web.bind.annotation.RestController;
|
import org.springframework.web.servlet.ModelAndView;
|
|
import kernel.exception.BusinessException;
|
import kernel.util.StringUtils;
|
import kernel.web.ApplicationUtil;
|
import kernel.web.Page;
|
import kernel.web.PageActionSupport;
|
import project.Constants;
|
import project.cms.AdminCmsService;
|
import project.cms.Cms;
|
import project.cms.PropertiesUtilCms;
|
import project.log.LogService;
|
import security.Role;
|
import security.SecUser;
|
import security.internal.SecUserService;
|
|
/**
|
* 用户端内容管理
|
*/
|
@RestController
|
public class AdminCmsController extends PageActionSupport {
|
|
private Logger logger = LoggerFactory.getLogger(AdminCmsController.class);
|
|
@Autowired
|
private AdminCmsService adminCmsService;
|
@Autowired
|
private SecUserService secUserService;
|
@Autowired
|
private LogService logService;
|
@Autowired
|
private PasswordEncoder passwordEncoder;
|
|
private final String action = "normal/adminCmsAction!";
|
|
/**
|
* 获取 用户端内容管理 列表
|
*/
|
@RequestMapping(action + "list.action")
|
public ModelAndView list(HttpServletRequest request) {
|
String pageNoStr = request.getParameter("pageNo");
|
String message = request.getParameter("message");
|
String error = request.getParameter("error");
|
String para_language = request.getParameter("para_language");
|
String para_title = request.getParameter("para_title");
|
String content_code_para = request.getParameter("content_code_para");
|
|
ModelAndView modelAndView = new ModelAndView();
|
modelAndView.setViewName("cms_list");
|
|
int pageNo=1;
|
Page page=null;
|
int pageSize = 20;
|
try {
|
pageNo=checkAndSetPageNo(pageNoStr);
|
page = this.adminCmsService.pagedQuery(pageNo, pageSize, para_language, para_title, content_code_para);
|
|
for (Cms cms : (List<Cms>) page.getElements()) {
|
cms.setLanguage(Constants.LANGUAGE.get(cms.getLanguage()));
|
}
|
|
} catch (BusinessException e) {
|
modelAndView.addObject("error", e.getMessage());
|
return modelAndView;
|
} catch (Throwable t) {
|
logger.error(" error ", t);
|
modelAndView.addObject("error", "[ERROR] " + t.getMessage());
|
return modelAndView;
|
}
|
|
modelAndView.addObject("pageNo", pageNo);
|
modelAndView.addObject("pageSize", pageSize);
|
modelAndView.addObject("page", page);
|
modelAndView.addObject("message", message);
|
modelAndView.addObject("error", error);
|
modelAndView.addObject("para_language", para_language);
|
modelAndView.addObject("para_title", para_title);
|
modelAndView.addObject("content_code_para", content_code_para);
|
modelAndView.addObject("languageMap", Constants.LANGUAGE);
|
return modelAndView;
|
}
|
|
/**
|
* 新增 用户端内容管理 页面
|
*/
|
@RequestMapping(action + "toAdd.action")
|
public ModelAndView toAdd(HttpServletRequest request) {
|
ModelAndView modelAndView = new ModelAndView();
|
|
try {
|
if (!this.checkIsRoot()) {
|
throw new BusinessException("root 权限下才可添加");
|
}
|
|
modelAndView.addObject("language", PropertiesUtilCms.getProperty("system_cms_language"));
|
modelAndView.addObject("modelMap", Constants.CMS_MODEL);
|
modelAndView.addObject("languageMap", Constants.LANGUAGE);
|
|
} catch (BusinessException e) {
|
modelAndView.addObject("error", e.getMessage());
|
modelAndView.setViewName("redirect:/" + action + "list.action");
|
return modelAndView;
|
} catch (Throwable t) {
|
logger.error(" error ", t);
|
modelAndView.addObject("error", "[ERROR] " + t.getMessage());
|
modelAndView.setViewName("redirect:/" + action + "list.action");
|
return modelAndView;
|
}
|
|
modelAndView.setViewName("cms_add");
|
return modelAndView;
|
}
|
|
/**
|
* 新增 用户端内容管理
|
*
|
* title 标题
|
* content 内容
|
* model 模块
|
* language 语言
|
* content_code 业务代码
|
*/
|
@RequestMapping(action + "add.action")
|
public ModelAndView add(HttpServletRequest request) {
|
String login_safeword = request.getParameter("login_safeword");
|
String model = request.getParameter("model");
|
String language = request.getParameter("language");
|
String content_code = request.getParameter("content_code");
|
String title = request.getParameter("title");
|
String content = request.getParameter("content");
|
|
ModelAndView modelAndView = new ModelAndView();
|
|
try {
|
|
String error = this.verif(title, content);
|
if (!StringUtils.isNullOrEmpty(error)) {
|
throw new BusinessException(error);
|
}
|
|
if (!this.checkIsRoot()) {
|
throw new BusinessException("root 权限下才可添加");
|
}
|
|
String username_login = this.getUsername_login();
|
|
SecUser sec = this.secUserService.findUserByLoginName(username_login);
|
|
this.checkLoginSafeword(sec, username_login, login_safeword);
|
|
if (StringUtils.isEmptyString(model)) {
|
throw new BusinessException("请选择模块");
|
}
|
if (StringUtils.isEmptyString(language)) {
|
throw new BusinessException("请选择语言");
|
}
|
if (StringUtils.isEmptyString(content_code)) {
|
throw new BusinessException("请填写业务码");
|
}
|
|
Cms entity = new Cms();
|
entity.setId(ApplicationUtil.getCurrentTimeUUID());
|
entity.setTitle(title);
|
entity.setContent(content);
|
entity.setCreateTime(new Date());
|
entity.setModel(model);
|
entity.setLanguage(language);
|
entity.setContent_code(content_code);
|
|
this.adminCmsService.saveCms(entity);
|
|
String log = null;
|
if ("116".equals(content_code) || "117".equals(content_code)) {
|
log = MessageFormat.format("ip:" + this.getIp() + ",管理员新增cms，id:{0},标题:{1},语言:{2},模块:{3},业务代码:{4},内容:新增图片",
|
entity.getId(), entity.getTitle(), entity.getLanguage(), entity.getModel(), entity.getContent_code());
|
} else {
|
log = MessageFormat.format("ip:" + this.getIp() + ",管理员新增cms，id:{0},标题:{1},语言:{2},模块:{3},业务代码:{4},内容:{5}",
|
entity.getId(), entity.getTitle(), entity.getLanguage(), entity.getModel(), entity.getContent_code(), entity.getContent());
|
}
|
this.saveLog(sec, username_login, log);
|
|
} catch (BusinessException e) {
|
modelAndView.addObject("error", e.getMessage());
|
modelAndView.addObject("model", model);
|
modelAndView.addObject("language", language);
|
modelAndView.addObject("content_code", content_code);
|
modelAndView.addObject("title", title);
|
modelAndView.addObject("content", content);
|
modelAndView.addObject("modelMap", Constants.CMS_MODEL);
|
modelAndView.addObject("languageMap", Constants.LANGUAGE);
|
modelAndView.setViewName("cms_add");
|
return modelAndView;
|
} catch (Throwable t) {
|
logger.error(" error ", t);
|
modelAndView.addObject("error", "[ERROR] " + t.getMessage());
|
modelAndView.addObject("model", model);
|
modelAndView.addObject("language", language);
|
modelAndView.addObject("content_code", content_code);
|
modelAndView.addObject("title", title);
|
modelAndView.addObject("content", content);
|
modelAndView.addObject("modelMap", Constants.CMS_MODEL);
|
modelAndView.addObject("languageMap", Constants.LANGUAGE);
|
modelAndView.setViewName("cms_add");
|
return modelAndView;
|
}
|
|
modelAndView.addObject("message", "操作成功");
|
modelAndView.setViewName("redirect:/" + action + "list.action");
|
return modelAndView;
|
}
|
|
/**
|
* 修改 用户端内容管理 页面
|
*
|
* title 标题
|
* content 内容
|
* model 模块
|
* language 语言
|
* content_code 业务代码
|
*/
|
@RequestMapping(action + "toUpdate.action")
|
public ModelAndView toUpdate(HttpServletRequest request) {
|
String id = request.getParameter("id");
|
|
ModelAndView modelAndView = new ModelAndView();
|
|
try {
|
if (StringUtils.isNullOrEmpty(id)) {
|
throw new BusinessException("内容不存在或已删除");
|
}
|
|
Cms entity = this.adminCmsService.findById(id);
|
if (null == entity) {
|
throw new BusinessException("内容不存在或已删除");
|
}
|
|
modelAndView.addObject("id", id);
|
modelAndView.addObject("title", entity.getTitle());
|
modelAndView.addObject("content", entity.getContent());
|
if (this.checkIsRoot()) {
|
modelAndView.addObject("model", entity.getModel());
|
modelAndView.addObject("language", entity.getLanguage());
|
modelAndView.addObject("content_code", entity.getContent_code());
|
}
|
modelAndView.addObject("modelMap", Constants.CMS_MODEL);
|
modelAndView.addObject("languageMap", Constants.LANGUAGE);
|
|
} catch (BusinessException e) {
|
modelAndView.addObject("error", e.getMessage());
|
modelAndView.setViewName("redirect:/" + action + "list.action");
|
return modelAndView;
|
} catch (Throwable t) {
|
logger.error(" error ", t);
|
modelAndView.addObject("error", "[ERROR] " + t.getMessage());
|
modelAndView.setViewName("redirect:/" + action + "list.action");
|
return modelAndView;
|
}
|
|
modelAndView.setViewName("cms_update");
|
return modelAndView;
|
}
|
|
/**
|
* 修改 用户端内容管理
|
*
|
* title 标题
|
* content 内容
|
* model 模块
|
* language 语言
|
* content_code 业务代码
|
*/
|
@RequestMapping(action + "update.action")
|
public ModelAndView update(HttpServletRequest request) {
|
String id = request.getParameter("id");
|
String model = request.getParameter("model");
|
String language = request.getParameter("language");
|
String content_code = request.getParameter("content_code");
|
String title = request.getParameter("title");
|
String content = request.getParameter("content");
|
String login_safeword = request.getParameter("login_safeword");
|
|
ModelAndView modelAndView = new ModelAndView();
|
|
try {
|
|
String error = this.verif(title, content);
|
if (!StringUtils.isNullOrEmpty(error)) {
|
throw new BusinessException(error);
|
}
|
|
String username_login = this.getUsername_login();
|
|
SecUser sec = this.secUserService.findUserByLoginName(username_login);
|
|
this.checkLoginSafeword(sec, username_login, login_safeword);
|
|
if (StringUtils.isNullOrEmpty(id)) {
|
throw new BusinessException("内容不存在或已删除");
|
}
|
|
Cms entity = new Cms();
|
entity = this.adminCmsService.findById(id);
|
if (null == entity) {
|
throw new BusinessException("内容不存在或已删除");
|
}
|
|
String log = null;
|
if ("116".equals(content_code) || "117".equals(content_code)) {
|
log = MessageFormat.format("ip:" + this.getIp() + ",管理员修改cms，id:{0},原标题:{1},原语言:{2},原模块:{3},原业务代码:{4},原内容:旧图片",
|
entity.getId(), entity.getTitle(), entity.getLanguage(), entity.getModel(), entity.getContent_code());
|
} else {
|
log = MessageFormat.format("ip:" + this.getIp() + ",管理员修改cms，id:{0},原标题:{1},原语言:{2},原模块:{3},原业务代码:{4},原内容:{5}",
|
entity.getId(), entity.getTitle(), entity.getLanguage(), entity.getModel(), entity.getContent_code(), entity.getContent());
|
}
|
|
String strOriginalLanguage = entity.getLanguage();
|
String strOriginalContentCode = entity.getContent_code();
|
|
entity.setTitle(title);
|
entity.setContent(content);
|
|
if (this.checkIsRoot()) {
|
if (StringUtils.isEmptyString(model)) {
|
throw new BusinessException("请选择模块");
|
}
|
if (StringUtils.isEmptyString(language)) {
|
throw new BusinessException("请选择语言");
|
}
|
if (StringUtils.isEmptyString(content_code)) {
|
throw new BusinessException("请填写业务码");
|
}
|
entity.setModel(model);
|
entity.setLanguage(language);
|
entity.setContent_code(content_code);
|
}
|
//this.adminCmsService.saveOrUpdate(entity);
|
this.adminCmsService.update(entity,strOriginalLanguage,strOriginalContentCode);
|
|
if ("116".equals(content_code) || "117".equals(content_code)) {
|
log += MessageFormat.format(",新标题:{0},新语言:{1},新模块:{2},新业务代码:{3},新内容:新图片",
|
entity.getTitle(), entity.getLanguage(), entity.getModel(), entity.getContent_code());
|
} else {
|
log += MessageFormat.format(",新标题:{0},新语言:{1},新模块:{2},新业务代码:{3},新内容:{4}",
|
entity.getTitle(), entity.getLanguage(), entity.getModel(), entity.getContent_code(), entity.getContent());
|
}
|
saveLog(sec, username_login, log);
|
|
} catch (BusinessException e) {
|
modelAndView.addObject("error", e.getMessage());
|
modelAndView.addObject("id", id);
|
modelAndView.addObject("model", model);
|
modelAndView.addObject("language", language);
|
modelAndView.addObject("content_code", content_code);
|
modelAndView.addObject("title", title);
|
modelAndView.addObject("content", content);
|
modelAndView.addObject("modelMap", Constants.CMS_MODEL);
|
modelAndView.addObject("languageMap", Constants.LANGUAGE);
|
modelAndView.setViewName("cms_update");
|
return modelAndView;
|
} catch (Throwable t) {
|
logger.error(" error ", t);
|
modelAndView.addObject("error", "[ERROR] " + t.getMessage());
|
modelAndView.addObject("id", id);
|
modelAndView.addObject("model", model);
|
modelAndView.addObject("language", language);
|
modelAndView.addObject("content_code", content_code);
|
modelAndView.addObject("title", title);
|
modelAndView.addObject("content", content);
|
modelAndView.addObject("modelMap", Constants.CMS_MODEL);
|
modelAndView.addObject("languageMap", Constants.LANGUAGE);
|
modelAndView.setViewName("cms_update");
|
return modelAndView;
|
}
|
|
modelAndView.addObject("message", "操作成功");
|
modelAndView.setViewName("redirect:/" + action + "list.action");
|
return modelAndView;
|
}
|
|
private boolean checkIsRoot() {
|
String username = this.getUsername_login();
|
// root才可以改动
|
SecUser secUser = this.secUserService.findUserByLoginName(username);
|
for (Role role : secUser.getRoles()) {
|
if (Constants.SECURITY_ROLE_ROOT.equals(role.getRoleName())) {
|
return Boolean.TRUE;
|
}
|
}
|
return Boolean.FALSE;
|
}
|
|
public String verif(String title, String content) {
|
if (StringUtils.isNullOrEmpty(title)) {
|
return "请输入标题！";
|
}
|
if (StringUtils.isNullOrEmpty(content)) {
|
return "请输入内容！";
|
}
|
return "";
|
}
|
|
/**
|
* 验证登录人资金密码
|
*/
|
protected void checkLoginSafeword(SecUser secUser, String operatorUsername, String loginSafeword) {
|
// SecUser sec = this.secUserService.findUserByLoginName(operatorUsername);
|
String sysSafeword = secUser.getSafeword();
|
String safeword_md5 = this.passwordEncoder.encodePassword(loginSafeword, operatorUsername);
|
if (!safeword_md5.equals(sysSafeword)) {
|
throw new BusinessException("登录人资金密码错误");
|
}
|
}
|
|
public void saveLog(SecUser secUser, String operator, String context) {
|
project.log.Log log = new project.log.Log();
|
log.setCategory(Constants.LOG_CATEGORY_OPERATION);
|
log.setOperator(operator);
|
log.setUsername(secUser.getUsername());
|
log.setPartyId(secUser.getPartyId());
|
log.setLog(context);
|
log.setCreateTime(new Date());
|
logService.saveSync(log);
|
}
|
|
}
|
