407 lines
14 KiB
C#
407 lines
14 KiB
C#
using System;
|
|
using System.Collections.Generic;
|
|
using System.Linq;
|
|
using System.Text;
|
|
using System.Web;
|
|
using Foresight.Fleet.Services;
|
|
using Foresight.Fleet.Services.User;
|
|
using Foresight.Fleet.Services.Style;
|
|
using Foresight.Fleet.Services.Customer;
|
|
using IronIntel.Contractor.Users;
|
|
using IronIntel.Contractor.iisitebase;
|
|
using Foresight.Standard;
|
|
using System.Security.Cryptography;
|
|
|
|
namespace IronIntel.Contractor.Site
|
|
{
|
|
public class ContractorBasePage : IronIntelBasePage
|
|
{
|
|
public const char SPLIT_CHAR175 = (char)175;//\u00af
|
|
public const char SPLIT_CHAR180 = (char)180;//\u00b4
|
|
public const char SPLIT_CHAR181 = (char)181;//'µ'
|
|
public const char SPLIT_CHAR182 = (char)182;//'¶'
|
|
public const char SPLIT_CHAR183 = (char)183;//'·'
|
|
public const char SPLIT_CHAR184 = (char)182;//'\u00b8'
|
|
public const string OkResult = "OK";
|
|
public const string FailedResult = "Failed";
|
|
public static string AppVersion
|
|
{
|
|
get
|
|
{
|
|
return SystemParams.AppVersion;
|
|
}
|
|
}
|
|
|
|
new public string PageTitle
|
|
{
|
|
get
|
|
{
|
|
if (MainStyleObj != null && !string.IsNullOrWhiteSpace(MainStyleObj.PageTitle))
|
|
return MainStyleObj.PageTitle;
|
|
return base.PageTitle;
|
|
}
|
|
}
|
|
|
|
private MainStyle _MainStyleObj;
|
|
protected MainStyle MainStyleObj
|
|
{
|
|
get
|
|
{
|
|
if (_MainStyleObj == null)
|
|
{
|
|
_MainStyleObj = SystemParams.GetMainStyle();
|
|
}
|
|
return _MainStyleObj;
|
|
}
|
|
}
|
|
|
|
protected Users.UserInfo GetCurrentUser()
|
|
{
|
|
var session = GetCurrentLoginSession();
|
|
if (session == null)
|
|
{
|
|
return null;
|
|
}
|
|
return UserManagement.GetUserByIID(session.User.UID);
|
|
}
|
|
|
|
protected bool IsAdminOrSuper
|
|
{
|
|
get
|
|
{
|
|
var user = GetCurrentUser();
|
|
if (user == null)
|
|
{
|
|
return false;
|
|
}
|
|
return (user.UserType == Users.UserTypes.Admin || user.UserType == Users.UserTypes.SupperAdmin);
|
|
}
|
|
}
|
|
protected virtual bool AllowCurrentLoginSessionEnter(LoginSession session)
|
|
{
|
|
if (session == null)
|
|
session = GetCurrentLoginSession();
|
|
if (session == null)
|
|
{
|
|
return false;
|
|
}
|
|
if (string.Compare(session.User.CompanyID, SystemParams.CompanyID, true) == 0)
|
|
{
|
|
return true;
|
|
}
|
|
if (string.Compare(session.User.CompanyID, CustomerInfo.FORESIGHT, true) == 0)
|
|
{
|
|
return true;
|
|
}
|
|
return CreateClient<UserQueryClient>().CanEnterSite(session.SessionID, SystemParams.CompanyID);
|
|
}
|
|
|
|
protected virtual bool AllowCurrentLoginSessionEnter()
|
|
{
|
|
var session = GetCurrentLoginSession();
|
|
if (session == null)
|
|
{
|
|
return false;
|
|
}
|
|
if (string.Compare(session.User.CompanyID, SystemParams.CompanyID, true) == 0)
|
|
{
|
|
return true;
|
|
}
|
|
if (string.Compare(session.User.CompanyID, CustomerInfo.FORESIGHT, true) == 0)
|
|
{
|
|
return true;
|
|
}
|
|
return CreateClient<UserQueryClient>().CanEnterSite(session.SessionID, SystemParams.CompanyID);
|
|
}
|
|
|
|
protected virtual bool ThrowIfNotAllowed { get { return false; } }
|
|
|
|
protected virtual bool CanDirectAccess { get { return false; } }
|
|
|
|
protected virtual int FeatureID { get { return -1; } }
|
|
|
|
protected bool CheckUserToken()
|
|
{
|
|
var session = GetCurrentLoginSession();
|
|
if (session != null)//已经登录
|
|
{
|
|
return true;
|
|
}
|
|
string tkstring = Request.Params["tk"];
|
|
if (string.IsNullOrEmpty(tkstring))
|
|
return false;
|
|
|
|
try
|
|
{
|
|
var sc = new FI.FIC.Models.Security.SymmetricCrypt(FI.FIC.Models.Security.CryptType.DES);
|
|
tkstring = sc.Decrypt(tkstring,
|
|
FI.FIC.DataProviders.ChartDataProvider.DES_Key,
|
|
FI.FIC.DataProviders.ChartDataProvider.DES_IV);
|
|
|
|
string[] temps = tkstring.Split('|');
|
|
if (temps.Length != 2)
|
|
return false;
|
|
|
|
string timestring = temps[0];
|
|
DateTime time = DateTime.MinValue;
|
|
if (!DateTime.TryParse(timestring, out time)
|
|
|| time < DateTime.UtcNow.AddMinutes(-5))
|
|
return false;
|
|
|
|
var sessionid = temps[1];
|
|
var c = CreateClient<UserQueryClient>();
|
|
//通过手机SessionID获取新的Web Session
|
|
var newsession = c.GetNewLoginSession(sessionid, APPNAME);
|
|
SetLoginSessionCookie(newsession.SessionID);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
protected bool CheckLoginSession()
|
|
{
|
|
var session = GetCurrentLoginSession();
|
|
if (session == null)
|
|
{
|
|
if (CanDirectAccess)
|
|
RedirectToLoginPageWithUrl();
|
|
else
|
|
RedirectToLoginPage();
|
|
return false;
|
|
}
|
|
if (!session.User.AllowLoginIntoPC)
|
|
{
|
|
RedirectToErrorPage();
|
|
return false;
|
|
}
|
|
if (!AllowCurrentLoginSessionEnter(session) || !CheckRight(FeatureID))
|
|
{
|
|
if (ThrowIfNotAllowed)
|
|
{
|
|
throw new Exception("The user was not allowed to enter this page.");
|
|
}
|
|
else
|
|
{
|
|
RedirectToErrorPage();
|
|
}
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
protected void RedirectToLoginPageWithUrl()
|
|
{
|
|
string url = Request.Url.ToString();
|
|
url = HttpUtility.UrlEncode(url);
|
|
Response.Redirect(LoginPageUrl + "?f=" + url);
|
|
}
|
|
|
|
protected void RedirectToEntryPage()
|
|
{
|
|
var session = GetCurrentLoginSession();
|
|
string entry = GetUserDefaultEntryPageUrl(session.User);
|
|
//if (!user.IsForesightUser)
|
|
//{
|
|
// string pageurl = UserParams.GetStringParameter(user.UID, "LandingPage");//如果LandingPage没有权限会现成跳转死循环
|
|
// if (!string.IsNullOrEmpty(pageurl))
|
|
// {
|
|
// string url = entry.Substring(0, entry.LastIndexOf('/') + 1);
|
|
// entry = url + pageurl;
|
|
// }
|
|
//}
|
|
if (!string.IsNullOrEmpty(entry))
|
|
Response.Redirect(entry, true);
|
|
else
|
|
Response.Redirect(LoginPageUrl, true);
|
|
}
|
|
|
|
protected void RedirectToErrorPage()
|
|
{
|
|
var url = Request.Url;
|
|
var addr = string.Format("{0}://{1}:{2}{3}/ErrorPage.aspx?code=403", url.Scheme, url.Host, url.Port, Request.ApplicationPath);
|
|
Response.Redirect(addr, true);
|
|
}
|
|
|
|
protected void DoLogout()
|
|
{
|
|
string sid = null;
|
|
try
|
|
{
|
|
var session = GetCurrentLoginSession();
|
|
if (session != null)
|
|
{
|
|
sid = session.SessionID;
|
|
}
|
|
}
|
|
catch { }
|
|
try
|
|
{
|
|
ClearLoginSessionCookie();
|
|
}
|
|
catch { }
|
|
if (sid != null)
|
|
{
|
|
try
|
|
{
|
|
CreateClient<Foresight.Fleet.Services.User.UserQueryClient>().LogoutWithSessionID(sid);
|
|
}
|
|
catch
|
|
{
|
|
// nothing
|
|
}
|
|
}
|
|
|
|
//RedirectToLoginPage();
|
|
RedirectToLoginPageAndClearCookie();
|
|
}
|
|
|
|
protected void RedirectToLoginPageAndClearCookie()
|
|
{//由于登录站点和Contractor站得Webconfig的sessioncookiedomain配置不一样导致ClearLoginSessionCookie无法清除Sessionid的cookie
|
|
//增加tp=c，在登录页面清除Sessionid的cookie
|
|
Response.Redirect(LoginPageUrl + "?tp=c");
|
|
}
|
|
|
|
protected void AddLog(string type, string source, string message, string detail)
|
|
{
|
|
try
|
|
{
|
|
SystemParams.WriteLog(type, source, message, detail);
|
|
}
|
|
catch
|
|
{
|
|
// nothing
|
|
}
|
|
}
|
|
|
|
protected string GenerateUrl(string file)
|
|
{
|
|
string url;
|
|
System.Web.UI.Page page = System.Web.HttpContext.Current.Handler as System.Web.UI.Page;
|
|
if (page != null)
|
|
{
|
|
// Use page instance.
|
|
url = page.ResolveUrl("~/") + file;
|
|
}
|
|
else
|
|
{
|
|
// avoid duplicate operation
|
|
url = System.Web.HttpContext.Current.Request.ApplicationPath + "/" + file;
|
|
}
|
|
try
|
|
{
|
|
var path = System.IO.Path.Combine(System.Web.HttpContext.Current.Request.PhysicalApplicationPath, file);
|
|
if (System.IO.File.Exists(path))
|
|
{
|
|
url += "?t=" + System.IO.File.GetLastWriteTimeUtc(path).Ticks;
|
|
}
|
|
}
|
|
catch (Exception)
|
|
{
|
|
// cant read file
|
|
}
|
|
return url;
|
|
}
|
|
|
|
protected byte[] ConvertFile2bytes(HttpPostedFile uploadFile)
|
|
{
|
|
byte[] dataBuffer = new byte[uploadFile.InputStream.Length];
|
|
uploadFile.InputStream.Position = 0;
|
|
uploadFile.InputStream.Read(dataBuffer, 0, dataBuffer.Length);
|
|
uploadFile.InputStream.Close();
|
|
return dataBuffer;
|
|
}
|
|
|
|
public virtual string JQueryVersion
|
|
{
|
|
get { return "3.6.0"; }
|
|
}
|
|
|
|
protected T CreateClient<T>(string companyid = null) where T : RemoteClientBase
|
|
{
|
|
var session = GetCurrentLoginSession();
|
|
var client = FleetServiceClientHelper.CreateClient<T>(string.IsNullOrEmpty(companyid) ? SystemParams.CompanyID : companyid, session == null ? "" : session.SessionID);
|
|
client.Timeout = 300;
|
|
return client;
|
|
}
|
|
protected bool CheckRight(int featureid)
|
|
{
|
|
if (featureid < 0)
|
|
return true;
|
|
return CheckRight(SystemParams.CompanyID, featureid);
|
|
}
|
|
|
|
protected bool CheckRight(string custid, int featureid, Permissions per = Permissions.ReadOnly)
|
|
{
|
|
var user = GetCurrentUser();
|
|
if (user == null)
|
|
return false;
|
|
|
|
if (user.UserType == Users.UserTypes.SupperAdmin)
|
|
return true;
|
|
|
|
if (user.UserType == Users.UserTypes.Common || user.UserType == Users.UserTypes.Admin)
|
|
{
|
|
var client = FleetServiceClientHelper.CreateClient<PermissionProvider>();
|
|
Tuple<Feature, Permissions>[] pmss = client.GetUserPermissions(custid, user.IID);
|
|
if (pmss.Length > 0)
|
|
{
|
|
Tuple<Feature, Permissions> permission = pmss.FirstOrDefault(m => m.Item1.Id == featureid);
|
|
if (permission != null && permission.Item2 >= per)
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
protected bool CheckReadonly(string custid, int featureid)
|
|
{
|
|
var user = GetCurrentUser();
|
|
if (user == null)
|
|
return false;
|
|
|
|
if (user.UserType == Users.UserTypes.SupperAdmin || user.UserType == Users.UserTypes.Admin)
|
|
return false;
|
|
|
|
if (user.UserType == Users.UserTypes.Common)
|
|
{
|
|
var client = FleetServiceClientHelper.CreateClient<PermissionProvider>();
|
|
Tuple<Feature, Permissions>[] pmss = client.GetUserPermissions(custid, user.IID);
|
|
if (pmss.Length > 0)
|
|
{
|
|
Tuple<Feature, Permissions> permission = pmss.FirstOrDefault(m => m.Item1.Id == featureid);
|
|
if (permission != null && permission.Item2 == Permissions.ReadOnly)
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
protected bool CanEdit(string custid, int featureid, Permissions per = Permissions.FullControl)
|
|
{
|
|
var user = GetCurrentUser();
|
|
if (user == null)
|
|
return false;
|
|
|
|
if (user.UserType == Users.UserTypes.SupperAdmin || user.UserType == Users.UserTypes.Admin)
|
|
return true;
|
|
|
|
if (user.UserType == Users.UserTypes.Common)
|
|
{
|
|
var client = FleetServiceClientHelper.CreateClient<PermissionProvider>();
|
|
Tuple<Feature, Permissions>[] pmss = client.GetUserPermissions(custid, user.IID);
|
|
if (pmss.Length > 0)
|
|
{
|
|
Tuple<Feature, Permissions> permission = pmss.FirstOrDefault(m => m.Item1.Id == featureid);
|
|
if (permission != null && permission.Item2 >= per)
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
}
|
|
}
|