SVN r499

SVN-Revision: r499

插件库/Lskj.Business/Impl/BaseModuleImpl.cs

@@ -1201,8 +1201,26 @@ namespace Lskj.Business.Impl
         {
             try
             {
-                string sqlValue = "select * from p_systemDlltabDetail where tab=@tab and (charindex('," + ERPInfo.Instance.UserName + ",',','+privilegeOper+',')>0 or isnull(privilegeOper,'')='') and ISNULL(isVisible,0)=0 order by orderid";
-                return SqlHelper.ExecuteDataTable(sqlValue, new SqlParameter[] { new SqlParameter("@tab", menuCode) });
+                string sqlTemplate = @"WITH UserRoles AS (
+                SELECT  r.roleName
+                FROM p_systemRoleOperSetTab AS ro
+			    JOIN p_systemRoleSetTab AS r ON r.id = ro.roleId
+			    WHERE ro.operatorname = '{0}'
+			    )
+			    SELECT  pm.*
+			    FROM p_systemDlltabDetail AS pm WITH (NOLOCK)
+			    WHERE ISNULL(pm.isvisible, 0) = 0
+			    AND pm.tab = '{1}'
+			    AND (
+			    ISNULL(pm.privilegeOper, '') = ''
+			    OR CHARINDEX(',' + '{0}' + ',', ',' + pm.privilegeOper + ',') > 0
+			    OR EXISTS (
+			    SELECT 1
+			    FROM UserRoles AS ur
+			    WHERE CHARINDEX('{{&' + ur.roleName + '&}}', pm.privilegeOper) > 0)
+			    ) ORDER BY pm.orderid;";
+                string sqlValue = string.Format(sqlTemplate, ERPInfo.Instance.UserName, menuCode);
+                return SqlHelper.ExecuteDataTable(sqlValue);
             }
             catch (Exception)
             {
@@ -1260,29 +1278,4 @@ namespace Lskj.Business.Impl
         /// <param name="comfirmAdvice">确认意见.</param>
         /// <returns>System.Int32.</returns>
         public static bool isParamComplete(string storedName, string[] Param)
-        {
-            string whereConfig = string.Empty;
-            for (int i = 0; i < Param.Length; i++)
-            {
-                whereConfig += string.Format(" LOWER(PARAMETER_NAME)=LOWER('{0}') or", Param[i]);
-            }
-            string sql = string.Format("SELECT PARAMETER_NAME AS [参数名称] FROM INFORMATION_SCHEMA.PARAMETERS WHERE SPECIFIC_NAME='{1}' and ({0})", whereConfig.Substring(0, whereConfig.Length - 2), storedName);
-            return SqlHelper.ExecuteDataTable(sql).Rows.Count == Param.Length;
-        }
-
-        /// <summary>
-        /// 创建只读列
-        /// </summary>
-        /// <param name="key"></param>
-        /// <returns></returns>
-        public static DataTable getDetail_Details(string key)
-        {
-            string sql = string.Format("select * from p_systembillsourcedetail where sourceid=0 and sourcekey='{0}' and mxflag=1 and isnull(isVisible,0)=0 order by orderid", key);
-            return GetDataTableResult(sql);
-        }
-
-
-
-
-    }
-}
+