yx lin
2 years ago
committed by
GitHub
GitHub
34 changed files with 585 additions and 1099 deletions
@ -1,14 +1,145 @@ |
|||
using Microsoft.EntityFrameworkCore; |
|||
using Microsoft.EntityFrameworkCore.ChangeTracking; |
|||
using System; |
|||
using System.Linq; |
|||
using System.Linq.Expressions; |
|||
using System.Reflection; |
|||
using Volo.Abp.Domain.Entities; |
|||
using Volo.Abp.EntityFrameworkCore; |
|||
using Volo.Abp.MultiTenancy; |
|||
using Volo.Abp.Uow; |
|||
using Volo.Abp.Users; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection.EntityFrameworkCore |
|||
{ |
|||
public class AbpDataProtectionDbContext<TDbContext> : AbpDbContext<TDbContext> |
|||
where TDbContext : DbContext |
|||
public class AbpDataProtectionDbContext : AbpDbContext<AbpDataProtectionDbContext> |
|||
{ |
|||
protected ICurrentUser CurrentUser => LazyServiceProvider.LazyGetService<ICurrentUser>(); |
|||
|
|||
protected virtual bool IsDataAccessFilterEnabled => DataFilter?.IsEnabled<IHasDataAccess>() ?? false; |
|||
|
|||
public AbpDataProtectionDbContext( |
|||
DbContextOptions<TDbContext> options) : base(options) |
|||
DbContextOptions<AbpDataProtectionDbContext> options) : base(options) |
|||
{ |
|||
} |
|||
|
|||
protected override void OnModelCreating(ModelBuilder modelBuilder) |
|||
{ |
|||
base.OnModelCreating(modelBuilder); |
|||
|
|||
foreach (var entityType in modelBuilder.Model.GetEntityTypes()) |
|||
{ |
|||
if (typeof(IHasDataAccess).IsAssignableFrom(entityType.ClrType)) |
|||
{ |
|||
modelBuilder.Entity(entityType.ClrType) |
|||
.OwnsOne(entityType.ClrType.FullName, nameof(IHasDataAccess.Owner), ownedNavigationBuilder => |
|||
{ |
|||
ownedNavigationBuilder.ToJson(); |
|||
}); |
|||
} |
|||
} |
|||
} |
|||
|
|||
protected override void ApplyAbpConceptsForAddedEntity(EntityEntry entry) |
|||
{ |
|||
base.ApplyAbpConceptsForAddedEntity(entry); |
|||
if (CurrentUser.IsAuthenticated) |
|||
{ |
|||
if (entry is IHasDataAccess entity) |
|||
{ |
|||
ProtectedEntityHelper.TrySetOwner( |
|||
entity, |
|||
() => new DataAccessOwner( |
|||
CurrentUser.Id, |
|||
CurrentUser.Roles, |
|||
CurrentUser.FindOrganizationUnits().Select(ou => ou.ToString()).ToArray())); |
|||
} |
|||
} |
|||
} |
|||
|
|||
protected virtual DataAccessRuleInfo AccessRuleInfo => UnitOfWorkManager.Current.GetAccessRuleInfo(); |
|||
|
|||
protected override void HandlePropertiesBeforeSave() |
|||
{ |
|||
foreach (var item in ChangeTracker.Entries().ToList()) |
|||
{ |
|||
HandleExtraPropertiesOnSave(item); |
|||
HandleCheckPropertiesOnSave(item); |
|||
if (item.State.IsIn(EntityState.Modified, EntityState.Deleted)) |
|||
{ |
|||
UpdateConcurrencyStamp(item); |
|||
} |
|||
} |
|||
} |
|||
|
|||
protected virtual void HandleCheckPropertiesOnSave(EntityEntry entry) |
|||
{ |
|||
// 仅当启用过滤器时检查
|
|||
if (IsDataAccessFilterEnabled) |
|||
{ |
|||
var entityAccessRules = AccessRuleInfo?.Rules.Where(r => r.EntityTypeFullName == entry.Metadata.ClrType.FullName); |
|||
if (entityAccessRules != null) |
|||
{ |
|||
if (entry.State.IsIn(EntityState.Modified, EntityState.Added, EntityState.Deleted)) |
|||
{ |
|||
var entityAccessRule = entityAccessRules.FirstOrDefault(r => r.Operation.IsIn(DataAccessOperation.Write, DataAccessOperation.Delete)); |
|||
if (entityAccessRule != null) |
|||
{ |
|||
if (entityAccessRule.Fileds.Count != 0) |
|||
{ |
|||
var notAccessProps = entry.Properties.Where(p => !entityAccessRule.Fileds.Any(f => f.Field == p.Metadata.Name)); |
|||
if (notAccessProps != null) |
|||
{ |
|||
foreach (var property in notAccessProps) |
|||
{ |
|||
// 无字段权限不做变更
|
|||
property.CurrentValue = property.OriginalValue; |
|||
} |
|||
} |
|||
} |
|||
} |
|||
else |
|||
{ |
|||
// 无实体变更权限不做修改
|
|||
entry.State = EntityState.Unchanged; |
|||
} |
|||
} |
|||
} |
|||
} |
|||
} |
|||
|
|||
protected override Expression<Func<TEntity, bool>> CreateFilterExpression<TEntity>() |
|||
{ |
|||
var expression = base.CreateFilterExpression<TEntity>(); |
|||
|
|||
if (typeof(IHasDataAccess).IsAssignableFrom(typeof(TEntity))) |
|||
{ |
|||
Expression<Func<TEntity, bool>> expression2 = (TEntity e) => !IsDataAccessFilterEnabled || CreateFilterExpression(e, AccessRuleInfo); |
|||
expression = (Expression<Func<TEntity, bool>>)((expression == null) ? ((LambdaExpression)expression2) : ((LambdaExpression)QueryFilterExpressionHelper.CombineExpressions(expression, expression2))); |
|||
} |
|||
|
|||
return expression; |
|||
} |
|||
|
|||
protected static bool CreateFilterExpression<TEntity>(TEntity entity, DataAccessRuleInfo accessRuleInfo) |
|||
{ |
|||
if (accessRuleInfo == null) |
|||
{ |
|||
return true; |
|||
} |
|||
|
|||
if (!accessRuleInfo.Rules.Any(r => r.EntityTypeFullName == typeof(TEntity).FullName)) |
|||
{ |
|||
return false; |
|||
} |
|||
|
|||
if (entity is not IHasDataAccess accessEntity) |
|||
{ |
|||
return true; |
|||
} |
|||
|
|||
// TODO: 需要完成详细的过滤条件
|
|||
return false; |
|||
} |
|||
} |
|||
} |
|||
|
|||
@ -1,297 +0,0 @@ |
|||
using Microsoft.EntityFrameworkCore; |
|||
using System; |
|||
using System.Collections.Generic; |
|||
using System.Linq; |
|||
using System.Linq.Expressions; |
|||
using System.Threading; |
|||
using System.Threading.Tasks; |
|||
using Volo.Abp.Domain.Entities; |
|||
using Volo.Abp.Domain.Repositories.EntityFrameworkCore; |
|||
using Volo.Abp.EntityFrameworkCore; |
|||
using Volo.Abp.Users; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection.EntityFrameworkCore |
|||
{ |
|||
/// <summary>
|
|||
/// 受保护的资源仓储接口需要继承此接口,否则需要自行实现过滤器
|
|||
/// </summary>
|
|||
/// <typeparam name="TDbContext"></typeparam>
|
|||
/// <typeparam name="TEntity"></typeparam>
|
|||
/// <typeparam name="TKey"></typeparam>
|
|||
public abstract class EfCoreDataProtectionRepositoryBase<TDbContext, TEntity, TKey> : EfCoreRepository<TDbContext, TEntity, TKey> |
|||
where TEntity : class, IEntity<TKey>, IDataProtection |
|||
where TDbContext: IEfCoreDbContext |
|||
{ |
|||
protected ICurrentUser CurrentUser => LazyServiceProvider.LazyGetService<ICurrentUser>(); |
|||
protected IDataProtectdChecker DataProtectdChecker => LazyServiceProvider.LazyGetService<IDataProtectdChecker>(); |
|||
protected EfCoreDataProtectionRepositoryBase( |
|||
IDbContextProvider<TDbContext> dbContextProvider) |
|||
: base(dbContextProvider) |
|||
{ |
|||
} |
|||
|
|||
public override async Task<TEntity> InsertAsync(TEntity entity, bool autoSave = false, CancellationToken cancellationToken = default) |
|||
{ |
|||
if (CurrentUser.IsAuthenticated && |
|||
entity is IDataProtection protectedEntity) |
|||
{ |
|||
ProtectedEntityHelper.TrySetOwner( |
|||
protectedEntity, |
|||
() => string.Join(",", CurrentUser.UserName, CurrentUser.Roles.JoinAsString(","))); |
|||
} |
|||
|
|||
return await base.InsertAsync(entity, autoSave, cancellationToken); |
|||
} |
|||
|
|||
public override async Task InsertManyAsync(IEnumerable<TEntity> entities, bool autoSave = false, CancellationToken cancellationToken = default) |
|||
{ |
|||
if (CurrentUser.IsAuthenticated && |
|||
typeof(IDataProtection).IsAssignableFrom(typeof(TEntity))) |
|||
{ |
|||
foreach (var entity in entities) |
|||
{ |
|||
ProtectedEntityHelper.TrySetOwner( |
|||
entity, |
|||
() => string.Join(",", CurrentUser.UserName, CurrentUser.Roles.JoinAsString(","))); |
|||
} |
|||
} |
|||
|
|||
await base.InsertManyAsync(entities, autoSave, cancellationToken); |
|||
} |
|||
|
|||
public override async Task<List<TEntity>> GetListAsync(bool includeDetails = false, CancellationToken cancellationToken = default) |
|||
{ |
|||
return includeDetails |
|||
? await(await WithDetailsAsync(ProtectBehavior.Query)).ToListAsync(GetCancellationToken(cancellationToken)) |
|||
: await(await GetQueryableAsync(ProtectBehavior.Query)).ToListAsync(GetCancellationToken(cancellationToken)); |
|||
} |
|||
|
|||
public override async Task<TEntity> FindAsync(TKey id, bool includeDetails = true, CancellationToken cancellationToken = default) |
|||
{ |
|||
return includeDetails |
|||
? await(await WithDetailsAsync(ProtectBehavior.Query)).OrderBy(e => e.Id).FirstOrDefaultAsync(e => e.Id.Equals(id), GetCancellationToken(cancellationToken)) |
|||
: await(await GetQueryableAsync(ProtectBehavior.Query)).OrderBy(e => e.Id).FirstOrDefaultAsync(e => e.Id.Equals(id), GetCancellationToken(cancellationToken)); |
|||
} |
|||
|
|||
public override async Task<List<TEntity>> GetListAsync( |
|||
Expression<Func<TEntity, bool>> predicate, |
|||
bool includeDetails = false, |
|||
CancellationToken cancellationToken = default) |
|||
{ |
|||
return includeDetails |
|||
? await (await WithDetailsAsync(ProtectBehavior.Query)).Where(predicate).ToListAsync(GetCancellationToken(cancellationToken)) |
|||
: await (await GetQueryableAsync(ProtectBehavior.Query)).Where(predicate).ToListAsync(GetCancellationToken(cancellationToken)); |
|||
} |
|||
|
|||
public override async Task DeleteAsync(TKey id, bool autoSave = false, CancellationToken cancellationToken = default) |
|||
{ |
|||
var queryable = await GetQueryableAsync(ProtectBehavior.Delete); |
|||
var entity = await queryable |
|||
.FirstOrDefaultAsync(e => e.Id.Equals(id), GetCancellationToken(cancellationToken)); |
|||
if (entity == null) |
|||
{ |
|||
return; |
|||
} |
|||
await DeleteAsync(entity, autoSave, cancellationToken); |
|||
} |
|||
|
|||
public override async Task DeleteManyAsync(IEnumerable<TKey> ids, bool autoSave = false, CancellationToken cancellationToken = default) |
|||
{ |
|||
var queryable = await GetQueryableAsync(ProtectBehavior.Delete); |
|||
|
|||
var entities = await queryable.Where(x => ids.Contains(x.Id)).ToListAsync(cancellationToken); |
|||
|
|||
await DeleteManyAsync(entities, autoSave, cancellationToken); |
|||
} |
|||
|
|||
public override async Task DeleteAsync( |
|||
Expression<Func<TEntity, bool>> predicate, |
|||
bool autoSave = false, |
|||
CancellationToken cancellationToken = default) |
|||
{ |
|||
var queryable = await GetQueryableAsync(ProtectBehavior.Delete); |
|||
|
|||
var entities = await queryable.Where(predicate).ToListAsync(cancellationToken); |
|||
|
|||
await DeleteManyAsync(entities, autoSave, cancellationToken); |
|||
} |
|||
protected async virtual Task<IQueryable<TEntity>> WithDetailsAsync(ProtectBehavior behavior = ProtectBehavior.All) |
|||
{ |
|||
if (typeof(IDataProtection).IsAssignableFrom(typeof(TEntity))) |
|||
{ |
|||
var result = await DataProtectdChecker.IsGrantedAsync<TEntity>(behavior); |
|||
if (!result.Succeeded) |
|||
{ |
|||
var queryable = await base.GetQueryableAsync(); |
|||
return queryable.Where((t) => false); |
|||
} |
|||
|
|||
return await WithDetailsAsync(result); |
|||
} |
|||
|
|||
return await base.WithDetailsAsync(); |
|||
} |
|||
protected async virtual Task<IQueryable<TEntity>> WithDetailsAsync(ResourceGrantedResult resourceGranted) |
|||
{ |
|||
if (AbpEntityOptions.DefaultWithDetailsFunc == null) |
|||
{ |
|||
return await GetQueryableAsync(resourceGranted); |
|||
} |
|||
|
|||
return AbpEntityOptions.DefaultWithDetailsFunc(await GetQueryableAsync(resourceGranted)); |
|||
} |
|||
protected async virtual Task<IQueryable<TEntity>> GetQueryableAsync(ProtectBehavior behavior = ProtectBehavior.All) |
|||
{ |
|||
if (typeof(IDataProtection).IsAssignableFrom(typeof(TEntity))) |
|||
{ |
|||
var result = await DataProtectdChecker.IsGrantedAsync<TEntity>(behavior); |
|||
if (!result.Succeeded) |
|||
{ |
|||
var queryable = await base.GetQueryableAsync(); |
|||
return queryable.Where((t) => false); |
|||
} |
|||
|
|||
return await GetQueryableAsync(result); |
|||
} |
|||
|
|||
return await base.GetQueryableAsync(); |
|||
} |
|||
protected async virtual Task<IQueryable<TEntity>> GetQueryableAsync(ResourceGrantedResult resourceGranted) |
|||
{ |
|||
var queryable = await base.GetQueryableAsync(); |
|||
if (!resourceGranted.Succeeded) |
|||
{ |
|||
// 无资源访问权限, 不返回结果
|
|||
return queryable.Where((t) => false); |
|||
} |
|||
// 资源过滤,用户是否有对某个资源的访问权限
|
|||
// 方案1、Resource.Owner In ("user1", "user2", "role1", "role2", "organization1", "...") 独立模块，业务增加Owner字段
|
|||
// 方案2、Select R.* From Resource R Inner Join Protect T On T.Visitor = R.Owner Where T.Resource = 'Resource' 业务侵入,增加Protect表
|
|||
queryable = FilterResource(queryable, resourceGranted.Resource); |
|||
// 对于可访问资源的进一步动态规则过滤 1 == 1 And Resource.Field1 = 'allow' And Resource.Field2 >= 100 And Resource.Field2 <= 200
|
|||
queryable = FilterFieldRule(queryable, resourceGranted.Rules); |
|||
// 对于资源可访问字段过滤 Select Resource.Field1, Resource.Field2, Resource.Field3
|
|||
queryable = FilterFieldReturn(queryable, resourceGranted.Fields); |
|||
|
|||
return queryable; |
|||
} |
|||
|
|||
protected virtual IQueryable<T> FilterResource<T>(IQueryable<T> queryable, ProtectedResource resource) |
|||
where T : IDataProtection |
|||
{ |
|||
ParameterExpression pe = Expression.Parameter(typeof(T)); |
|||
|
|||
// 检查资源的可访问者
|
|||
// any: 内置常量,允许访问所有资源
|
|||
if (!resource.Visitor.IsNullOrWhiteSpace() || !resource.Visitor.Contains("any")) |
|||
{ |
|||
// 过滤允许的资源访问者
|
|||
// 方案一：模块之间独立，传递当前访问者即可
|
|||
// Select * From Resource As R Where R.Owner LIKE ('visitor1', 'visitorRole1')
|
|||
var ownerExp = Expression.PropertyOrField(pe, nameof(IDataProtection.Owner)); |
|||
var visities = resource.Visitor.Split(','); |
|||
Expression visitorExpr = null; |
|||
foreach (var visitor in visities) |
|||
{ |
|||
visitorExpr = visitorExpr == null |
|||
? Expression.Call( |
|||
ownerExp, |
|||
typeof(string).GetMethod(nameof(string.Contains), new Type[] { typeof(string) }), |
|||
Expression.Constant(visitor, ownerExp.Type)) |
|||
: Expression.Or( |
|||
visitorExpr, |
|||
Expression.Call( |
|||
ownerExp, |
|||
typeof(string).GetMethod(nameof(string.Contains), new Type[] { typeof(string) }), |
|||
Expression.Constant(visitor, ownerExp.Type))); |
|||
} |
|||
|
|||
// 方案二：节省网络带宽,快速查询
|
|||
// Select R.* From Resource As R
|
|||
// Inner Join Protect As P On P.Resource = 'Resource'
|
|||
// Where 1 == 1
|
|||
// And P.Behavior = ProtectBehavior.Query
|
|||
// And ((P.Visitor = 'visitor1') Or (P.Visitor = 'visitorRole1') Or (P.Visitor = 'visitorRole2'))
|
|||
queryable = queryable.Where(Expression.Lambda<Func<T, bool>>(visitorExpr, pe)); |
|||
} |
|||
|
|||
return queryable; |
|||
} |
|||
|
|||
protected virtual IQueryable<T> FilterFieldRule<T>(IQueryable<T> queryable, IEnumerable<ProtectedFieldRule> rules) |
|||
where T : IDataProtection |
|||
{ |
|||
ParameterExpression pe = Expression.Parameter(typeof(T)); |
|||
|
|||
// 默认未指定访问规则
|
|||
// 则可访问所有允许的资源
|
|||
if (rules.Any()) |
|||
{ |
|||
Expression<Func<T, bool>> where = PredicateBuilder.New<T>((t) => true); |
|||
foreach (var fieldRule in rules) |
|||
{ |
|||
var memberExp = Expression.PropertyOrField(pe, fieldRule.Field); |
|||
Expression memberCondition = null; |
|||
memberCondition = fieldRule.Operator switch |
|||
{ |
|||
// LIKE
|
|||
ExpressionType.Contains => Expression.Call( |
|||
memberExp, |
|||
typeof(string).GetMethod(nameof(string.Contains), new Type[] { typeof(string) }), |
|||
Expression.Constant(fieldRule.Value, memberExp.Type)), |
|||
// ==
|
|||
ExpressionType.Equal => Expression.Equal(memberExp, Expression.Constant(fieldRule.Value, memberExp.Type)), |
|||
// <
|
|||
ExpressionType.LessThan => Expression.LessThan(memberExp, Expression.Constant(fieldRule.Value, memberExp.Type)), |
|||
// <=
|
|||
ExpressionType.LessThanOrEqual => Expression.LessThanOrEqual(memberExp, Expression.Constant(fieldRule.Value, memberExp.Type)), |
|||
// >
|
|||
ExpressionType.GreaterThan => Expression.GreaterThan(memberExp, Expression.Constant(fieldRule.Value, memberExp.Type)), |
|||
// >=
|
|||
ExpressionType.GreaterThanOrEqual => Expression.GreaterThanOrEqual(memberExp, Expression.Constant(fieldRule.Value, memberExp.Type)), |
|||
// 其他操作符未引入
|
|||
_ => throw new NotSupportedException($"Dynamic rules do not support operator: {fieldRule.Operator}"), |
|||
}; |
|||
switch (fieldRule.Logic) |
|||
{ |
|||
case PredicateOperator.And: |
|||
where = where.And(Expression.Lambda<Func<T, bool>>(memberCondition, pe)); |
|||
break; |
|||
case PredicateOperator.Or: |
|||
where = where.Or(Expression.Lambda<Func<T, bool>>(memberCondition, pe)); |
|||
break; |
|||
} |
|||
} |
|||
queryable = queryable.Where(where); |
|||
} |
|||
|
|||
return queryable; |
|||
} |
|||
|
|||
protected virtual IQueryable<T> FilterFieldReturn<T>(IQueryable<T> queryable, IEnumerable<ProtectedField> fields) |
|||
{ |
|||
// 默认未指定可访问字段则返回所有字段
|
|||
if (fields.Any()) |
|||
{ |
|||
ParameterExpression pe = Expression.Parameter(typeof(T)); |
|||
Type queryableResultType = typeof(T); |
|||
NewExpression ne = Expression.New(queryableResultType); |
|||
List<MemberAssignment> members = new List<MemberAssignment>(); |
|||
|
|||
foreach (var field in fields) |
|||
{ |
|||
var fieldProp = queryableResultType.GetProperty(field.Field); |
|||
var meField = Expression.MakeMemberAccess(pe, fieldProp); |
|||
members.Add(Expression.Bind(fieldProp, meField)); |
|||
} |
|||
|
|||
var mie = Expression.MemberInit(ne, members); |
|||
Expression<Func<T, T>> personSelectExpression = Expression.Lambda<Func<T, T>>(mie, pe); |
|||
|
|||
queryable = queryable.Select(personSelectExpression); |
|||
} |
|||
|
|||
return queryable; |
|||
} |
|||
} |
|||
} |
|||
@ -1,11 +1,10 @@ |
|||
using Volo.Abp.Modularity; |
|||
using Volo.Abp.Threading; |
|||
using Volo.Abp.Domain; |
|||
using Volo.Abp.Modularity; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection |
|||
namespace LINGYUN.Abp.DataProtection; |
|||
|
|||
[DependsOn( |
|||
typeof(AbpDddDomainModule))] |
|||
public class AbpDataProtectionModule : AbpModule |
|||
{ |
|||
[DependsOn( |
|||
typeof(AbpThreadingModule))] |
|||
public class AbpDataProtectionModule : AbpModule |
|||
{ |
|||
} |
|||
} |
|||
|
|||
@ -0,0 +1,30 @@ |
|||
using System.Collections.Generic; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection; |
|||
public class DataAccessCacheItem |
|||
{ |
|||
/// <summary>
|
|||
/// 实体类型全名
|
|||
/// </summary>
|
|||
public string EntityTypeFullName { get; set; } |
|||
/// <summary>
|
|||
/// 数据访问操作
|
|||
/// </summary>
|
|||
public DataAccessOperation Operation { get; set; } |
|||
/// <summary>
|
|||
/// 数据访问角色
|
|||
/// </summary>
|
|||
public DataAccessRole Role { get; set; } |
|||
/// <summary>
|
|||
/// 资源访问者
|
|||
/// </summary>
|
|||
public string Visitor { get; set; } |
|||
/// <summary>
|
|||
/// 字段访问控制
|
|||
/// </summary>
|
|||
public List<DataAccessFiledRule> Fileds { get; set; } |
|||
/// <summary>
|
|||
/// 自定义表达式
|
|||
/// </summary>
|
|||
public List<DataAccessExpressionRule> Expressions { get; set; } |
|||
} |
|||
@ -0,0 +1,12 @@ |
|||
using System; |
|||
using System.Collections.Generic; |
|||
using System.Text; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection; |
|||
/// <summary>
|
|||
/// 数据访问实体控制
|
|||
/// </summary>
|
|||
public class DataAccessEntityRule |
|||
{ |
|||
|
|||
} |
|||
@ -0,0 +1,11 @@ |
|||
namespace LINGYUN.Abp.DataProtection; |
|||
/// <summary>
|
|||
/// 数据访问控制规则：自定义表达式
|
|||
/// </summary>
|
|||
public class DataAccessExpressionRule |
|||
{ |
|||
/// <summary>
|
|||
/// 表达式
|
|||
/// </summary>
|
|||
public virtual string Expression { get; protected set; } |
|||
} |
|||
@ -0,0 +1,19 @@ |
|||
namespace LINGYUN.Abp.DataProtection; |
|||
/// <summary>
|
|||
/// 数据访问控制规则：字段
|
|||
/// </summary>
|
|||
public class DataAccessFiledRule |
|||
{ |
|||
/// <summary>
|
|||
/// 字段名称
|
|||
/// </summary>
|
|||
public virtual string Field { get; protected set; } |
|||
public DataAccessFiledRule() |
|||
{ |
|||
} |
|||
|
|||
public DataAccessFiledRule(string field) |
|||
{ |
|||
Field = field; |
|||
} |
|||
} |
|||
@ -0,0 +1,7 @@ |
|||
namespace LINGYUN.Abp.DataProtection; |
|||
public enum DataAccessOperation |
|||
{ |
|||
Read, |
|||
Write, |
|||
Delete |
|||
} |
|||
@ -0,0 +1,34 @@ |
|||
using System; |
|||
using System.Linq; |
|||
using Volo.Abp.Auditing; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection; |
|||
/// <summary>
|
|||
/// 数据拥有者
|
|||
/// </summary>
|
|||
public class DataAccessOwner : IMayHaveCreator |
|||
{ |
|||
public Guid? CreatorId { get; set; } |
|||
public string[] Roles { get; set; } |
|||
public string[] OrganizaztionUnits { get; set; } |
|||
protected DataAccessOwner() |
|||
{ |
|||
} |
|||
|
|||
public DataAccessOwner(Guid? creatorId, string[] roles, string[] organizaztionUnits) |
|||
{ |
|||
CreatorId = creatorId; |
|||
Roles = roles; |
|||
OrganizaztionUnits = organizaztionUnits; |
|||
} |
|||
|
|||
public bool IsInRole(string[] roles) |
|||
{ |
|||
return Roles != null && Roles.Any(r => roles.Contains(r)); |
|||
} |
|||
|
|||
public bool IsInOrganizaztionUnit(string[] organizaztionUnits) |
|||
{ |
|||
return OrganizaztionUnits != null && OrganizaztionUnits.Any(ou => organizaztionUnits.Contains(ou)); |
|||
} |
|||
} |
|||
@ -0,0 +1,23 @@ |
|||
namespace LINGYUN.Abp.DataProtection; |
|||
/// <summary>
|
|||
/// 数据访问角色
|
|||
/// </summary>
|
|||
public enum DataAccessRole |
|||
{ |
|||
/// <summary>
|
|||
/// 所有
|
|||
/// </summary>
|
|||
All = 0, |
|||
/// <summary>
|
|||
/// 用户
|
|||
/// </summary>
|
|||
User = 1, |
|||
/// <summary>
|
|||
/// 角色
|
|||
/// </summary>
|
|||
Role = 2, |
|||
/// <summary>
|
|||
/// 组织机构
|
|||
/// </summary>
|
|||
OrganizationUnit = 3, |
|||
} |
|||
@ -0,0 +1,54 @@ |
|||
using System.Collections.Generic; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection; |
|||
/// <summary>
|
|||
/// 数据访问控制规则
|
|||
/// </summary>
|
|||
public class DataAccessRule |
|||
{ |
|||
/// <summary>
|
|||
/// 实体类型全名
|
|||
/// </summary>
|
|||
public virtual string EntityTypeFullName { get; protected set; } |
|||
/// <summary>
|
|||
/// 数据访问操作
|
|||
/// </summary>
|
|||
public virtual DataAccessOperation Operation { get; protected set; } |
|||
/// <summary>
|
|||
/// 数据访问角色
|
|||
/// </summary>
|
|||
public virtual DataAccessRole Role { get; protected set; } |
|||
/// <summary>
|
|||
/// 资源访问者
|
|||
/// </summary>
|
|||
public virtual string Visitor { get; protected set; } |
|||
/// <summary>
|
|||
/// 字段访问控制
|
|||
/// </summary>
|
|||
public virtual List<DataAccessFiledRule> Fileds { get; protected set; } |
|||
/// <summary>
|
|||
/// 自定义表达式
|
|||
/// </summary>
|
|||
public virtual List<DataAccessExpressionRule> Expressions { get; protected set; } |
|||
protected DataAccessRule() |
|||
{ |
|||
Fileds = []; |
|||
Expressions = []; |
|||
} |
|||
|
|||
public DataAccessRule( |
|||
string entityTypeFullName, |
|||
DataAccessOperation operation = DataAccessOperation.Read, |
|||
DataAccessRole role = DataAccessRole.All, |
|||
string visitor = null, |
|||
List<DataAccessFiledRule> fileds = null, |
|||
List<DataAccessExpressionRule> expressions = null) |
|||
{ |
|||
EntityTypeFullName = entityTypeFullName; |
|||
Operation = operation; |
|||
Role = role; |
|||
Visitor = visitor; |
|||
Fileds = fileds ?? []; |
|||
Expressions = expressions ?? []; |
|||
} |
|||
} |
|||
@ -0,0 +1,11 @@ |
|||
using System.Collections.Generic; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection; |
|||
public class DataAccessRuleInfo |
|||
{ |
|||
public List<DataAccessRule> Rules { get; } |
|||
public DataAccessRuleInfo(List<DataAccessRule> rules) |
|||
{ |
|||
Rules = rules ?? new List<DataAccessRule>(); |
|||
} |
|||
} |
|||
@ -1,352 +0,0 @@ |
|||
using System; |
|||
using System.Collections.Generic; |
|||
using System.Linq; |
|||
using System.Linq.Expressions; |
|||
using System.Text; |
|||
using System.Threading; |
|||
using System.Threading.Tasks; |
|||
using Volo.Abp.Linq; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public class DataProtectionAsyncQueryableProvider : IAsyncQueryableProvider |
|||
{ |
|||
public Task<bool> AllAsync<T>( |
|||
IQueryable<T> queryable, |
|||
Expression<Func<T, bool>> predicate, |
|||
CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<bool> AnyAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<bool> AnyAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal> AverageAsync(IQueryable<decimal> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal?> AverageAsync(IQueryable<decimal?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, decimal>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal?> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, decimal?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> AverageAsync(IQueryable<int> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> AverageAsync(IQueryable<int?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, int>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, int?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> AverageAsync(IQueryable<long> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> AverageAsync(IQueryable<long?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, long>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, long?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> AverageAsync(IQueryable<double> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> AverageAsync(IQueryable<double?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, double>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, double?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float> AverageAsync(IQueryable<float> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float?> AverageAsync(IQueryable<float?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, float>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float?> AverageAsync<T>(IQueryable<T> queryable, Expression<Func<T, float?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public bool CanExecute<T>(IQueryable<T> queryable) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<bool> ContainsAsync<T>(IQueryable<T> queryable, T item, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<int> CountAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<int> CountAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> FirstAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> FirstAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> FirstOrDefaultAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> FirstOrDefaultAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> LastAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> LastAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> LastOrDefaultAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> LastOrDefaultAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<long> LongCountAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<long> LongCountAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> MaxAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<TResult> MaxAsync<T, TResult>(IQueryable<T> queryable, Expression<Func<T, TResult>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> MinAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<TResult> MinAsync<T, TResult>(IQueryable<T> queryable, Expression<Func<T, TResult>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> SingleAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> SingleAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> SingleOrDefaultAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T> SingleOrDefaultAsync<T>(IQueryable<T> queryable, Expression<Func<T, bool>> predicate, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal> SumAsync(IQueryable<decimal> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal?> SumAsync(IQueryable<decimal?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, decimal>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<decimal?> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, decimal?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<int> SumAsync(IQueryable<int> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<int?> SumAsync(IQueryable<int?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<int> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, int>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<int?> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, int?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<long> SumAsync(IQueryable<long> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<long?> SumAsync(IQueryable<long?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<long> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, long>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<long?> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, long?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> SumAsync(IQueryable<double> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> SumAsync(IQueryable<double?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, double>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<double?> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, double?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float> SumAsync(IQueryable<float> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float?> SumAsync(IQueryable<float?> source, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, float>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<float?> SumAsync<T>(IQueryable<T> queryable, Expression<Func<T, float?>> selector, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<T[]> ToArrayAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
|
|||
public Task<List<T>> ToListAsync<T>(IQueryable<T> queryable, CancellationToken cancellationToken = default) |
|||
{ |
|||
throw new NotImplementedException(); |
|||
} |
|||
} |
|||
} |
|||
@ -1,12 +0,0 @@ |
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public enum ExpressionType |
|||
{ |
|||
Contains, |
|||
Equal, |
|||
LessThan, |
|||
LessThanOrEqual, |
|||
GreaterThan, |
|||
GreaterThanOrEqual, |
|||
} |
|||
} |
|||
@ -0,0 +1,8 @@ |
|||
using System; |
|||
using System.Collections.Generic; |
|||
using System.Text; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection; |
|||
public interface IDataAccessCache |
|||
{ |
|||
} |
|||
@ -1,19 +0,0 @@ |
|||
using System.Threading.Tasks; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
/// <summary>
|
|||
/// 实现此接口
|
|||
/// 检查资源的访问权限
|
|||
/// </summary>
|
|||
public interface IDataProtectdChecker |
|||
{ |
|||
/// <summary>
|
|||
/// 资源是否拥有某种行为的访问权限
|
|||
/// </summary>
|
|||
/// <typeparam name="T">受保护的资源（实体）</typeparam>
|
|||
/// <param name="behavior">访问行为</param>
|
|||
/// <returns>不管是否拥有访问权限,请返回非空结果,由EF模块检查</returns>
|
|||
Task<ResourceGrantedResult> IsGrantedAsync<T>(ProtectBehavior behavior = ProtectBehavior.All); |
|||
} |
|||
} |
|||
@ -1,11 +0,0 @@ |
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
/// <summary>
|
|||
/// 实现接口
|
|||
/// 数据访问保护
|
|||
/// </summary>
|
|||
public interface IDataProtection |
|||
{ |
|||
string Owner { get; } |
|||
} |
|||
} |
|||
@ -0,0 +1,5 @@ |
|||
namespace LINGYUN.Abp.DataProtection; |
|||
public interface IHasDataAccess |
|||
{ |
|||
public DataAccessOwner Owner { get; } |
|||
} |
|||
@ -1,29 +0,0 @@ |
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
/// <summary>
|
|||
/// 保护行为
|
|||
/// </summary>
|
|||
public enum ProtectBehavior |
|||
{ |
|||
/// <summary>
|
|||
/// 所有
|
|||
/// </summary>
|
|||
All, |
|||
/// <summary>
|
|||
/// 查询
|
|||
/// </summary>
|
|||
Query, |
|||
/// <summary>
|
|||
/// 新增
|
|||
/// </summary>
|
|||
Insert, |
|||
/// <summary>
|
|||
/// 修改
|
|||
/// </summary>
|
|||
Update, |
|||
/// <summary>
|
|||
/// 删除
|
|||
/// </summary>
|
|||
Delete |
|||
} |
|||
} |
|||
@ -1,22 +0,0 @@ |
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public class ProtectedField |
|||
{ |
|||
/// <summary>
|
|||
/// 资源
|
|||
/// </summary>
|
|||
public string Resource { get; set; } |
|||
/// <summary>
|
|||
/// 资源拥有者
|
|||
/// </summary>
|
|||
public string Owner { get; set; } |
|||
/// <summary>
|
|||
/// 资源访问者
|
|||
/// </summary>
|
|||
public string Visitor { get; set; } |
|||
/// <summary>
|
|||
/// 字段
|
|||
/// </summary>
|
|||
public string Field { get; set; } |
|||
} |
|||
} |
|||
@ -1,40 +0,0 @@ |
|||
using System; |
|||
using System.Linq; |
|||
using System.Linq.Expressions; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public class ProtectedFieldRule |
|||
{ |
|||
/// <summary>
|
|||
/// 资源
|
|||
/// </summary>
|
|||
public string Resource { get; set; } |
|||
/// <summary>
|
|||
/// 资源拥有者
|
|||
/// </summary>
|
|||
public string Owner { get; set; } |
|||
/// <summary>
|
|||
/// 资源访问者
|
|||
/// </summary>
|
|||
public string Visitor { get; set; } |
|||
/// <summary>
|
|||
/// 字段
|
|||
/// </summary>
|
|||
public string Field { get; set; } |
|||
/// <summary>
|
|||
/// 值
|
|||
/// </summary>
|
|||
public object Value { get; set; } |
|||
/// <summary>
|
|||
/// 连接类型
|
|||
/// Or 或
|
|||
/// And 且
|
|||
/// </summary>
|
|||
public PredicateOperator Logic { get; set; } |
|||
/// <summary>
|
|||
/// 操作符
|
|||
/// </summary>
|
|||
public ExpressionType Operator { get; set; } |
|||
} |
|||
} |
|||
@ -1,27 +0,0 @@ |
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public class ProtectedResource |
|||
{ |
|||
/// <summary>
|
|||
/// 资源
|
|||
/// </summary>
|
|||
public string Resource { get; set; } |
|||
/// <summary>
|
|||
/// 资源拥有者
|
|||
/// </summary>
|
|||
public string Owner { get; set; } |
|||
/// <summary>
|
|||
/// 资源访问者
|
|||
/// </summary>
|
|||
public string Visitor { get; set; } |
|||
/// <summary>
|
|||
/// 优先级
|
|||
/// 值越大排名越靠前
|
|||
/// </summary>
|
|||
public int Priority { get; set; } |
|||
/// <summary>
|
|||
/// 行为
|
|||
/// </summary>
|
|||
public ProtectBehavior Behavior { get; set; } |
|||
} |
|||
} |
|||
@ -1,19 +0,0 @@ |
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public class ResourceGrantedResult |
|||
{ |
|||
public bool Succeeded => Resource != null; |
|||
public ProtectedResource Resource { get; } |
|||
public ProtectedField[] Fields { get; } |
|||
public ProtectedFieldRule[] Rules { get; } |
|||
public ResourceGrantedResult( |
|||
ProtectedResource resource, |
|||
ProtectedField[] fields, |
|||
ProtectedFieldRule[] rules) |
|||
{ |
|||
Resource = resource; |
|||
Fields = fields; |
|||
Rules = rules; |
|||
} |
|||
} |
|||
} |
|||
@ -0,0 +1,24 @@ |
|||
using LINGYUN.Abp.DataProtection; |
|||
|
|||
namespace Volo.Abp.Uow; |
|||
public static class IUnitOfWorkDataAccessExtensions |
|||
{ |
|||
private const string DataAccessRuleKey = "LINGYUN.Abp.DataProtection.DataAccess"; |
|||
|
|||
public static IUnitOfWork SetAccessRuleInfo( |
|||
this IUnitOfWork unitOfWork, |
|||
DataAccessRuleInfo dataAccessRuleInfo) |
|||
{ |
|||
unitOfWork.RemoveItem(DataAccessRuleKey); |
|||
unitOfWork.AddItem(DataAccessRuleKey, dataAccessRuleInfo); |
|||
|
|||
return unitOfWork; |
|||
} |
|||
|
|||
public static DataAccessRuleInfo GetAccessRuleInfo( |
|||
this IUnitOfWork unitOfWork) |
|||
{ |
|||
return unitOfWork.GetItemOrDefault<DataAccessRuleInfo>(DataAccessRuleKey) |
|||
?? new DataAccessRuleInfo(null); |
|||
} |
|||
} |
|||
@ -1,25 +0,0 @@ |
|||
using System; |
|||
using System.Threading.Tasks; |
|||
using Volo.Abp.DependencyInjection; |
|||
using Volo.Abp.Uow; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public class FakeDataProtectdChecker : IDataProtectdChecker, ISingletonDependency |
|||
{ |
|||
private readonly IUnitOfWorkManager _unitOfWorkManager; |
|||
|
|||
public FakeDataProtectdChecker(IUnitOfWorkManager unitOfWorkManager) |
|||
{ |
|||
_unitOfWorkManager = unitOfWorkManager; |
|||
} |
|||
|
|||
public virtual Task<ResourceGrantedResult> IsGrantedAsync<T>(ProtectBehavior behavior = ProtectBehavior.All) |
|||
{ |
|||
var cacheItem = _unitOfWorkManager.Current.Items["ResourceGranted"]; |
|||
var result = cacheItem.As<ResourceGrantedResult>(); |
|||
|
|||
return Task.FromResult(result); |
|||
} |
|||
} |
|||
} |
|||
@ -1,24 +0,0 @@ |
|||
using LINGYUN.Abp.DataProtection.EntityFrameworkCore; |
|||
using Microsoft.EntityFrameworkCore; |
|||
|
|||
namespace LINGYUN.Abp.DataProtection |
|||
{ |
|||
public class FakeDataProtectedDbContext : AbpDataProtectionDbContext<FakeDataProtectedDbContext> |
|||
{ |
|||
public FakeDataProtectedDbContext( |
|||
DbContextOptions<FakeDataProtectedDbContext> options) |
|||
: base(options) |
|||
{ |
|||
} |
|||
|
|||
protected override void OnModelCreating(ModelBuilder modelBuilder) |
|||
{ |
|||
base.OnModelCreating(modelBuilder); |
|||
|
|||
modelBuilder.Entity<FakeProtectionObject>(b => |
|||
{ |
|||
b.Property(p => p.Owner).HasColumnName(nameof(IDataProtection.Owner)).HasMaxLength(200); |
|||
}); |
|||
} |
|||
} |
|||
} |
|||
Loading…
Reference in new issue