Design/EasySoft-ZenTaoPMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 30 Wiki Activity

* [story #78659] add method to check object whether the user has priv to view it.

Browse Source
This commit is contained in:
sunhao
2025-12-02 16:27:35 +08:00
parent b1dcec9ad0
commit ff21c529b2
1 changed files with 46 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
module/zai/model.php
+46
View File
@@ -380,6 +380,52 @@ class zaiModel extends model
return array('result' => 'success', 'target' => $target, 'id' => $target->id, 'data' => $result['data']);
}
public function isCanViewObject(string $objectType, int $objectID, ?array $attrs = null): bool
{
if($attrs === null) $attrs = array();
$canView = false;
if($objectType === 'story' || $objectType === 'demand')
{
$table = $objectType === 'story' ? TABLE_STORY : TABLE_DEMAND;
$product = isset($attrs['product']) ? $attrs['product'] : 0;
if(!$product) $product = $this->dao->select('product')->from($table)->where('id')->eq($objectID)->fetch('product');
$canView = strpos(',' . $this->app->user->view->products . ',', ",$product,") !== false;
}
elseif($objectType === 'bug' || $objectType === 'case')
{
$table = $objectType === 'bug' ? TABLE_BUG : TABLE_CASE;
$product = isset($attrs['product']) ? $attrs['product'] : 0;
if(!$product) $product = $this->dao->select('product')->from($table)->where('id')->eq($objectID)->fetch('product');
$canView = strpos(',' . $this->app->user->view->products . ',', ",$product,") !== false;
if(!$canView)
{
$project = isset($attrs['project']) ? $attrs['project'] : 0;
if(!$project) $project = $this->dao->select('project')->from($table)->where('id')->eq($objectID)->fetch('project');
$canView = strpos(',' . $this->app->user->view->projects . ',', ",$project,") !== false;
}
}
elseif($objectType === 'task')
{
$project = isset($attrs['project']) ? $attrs['project'] : 0;
if(!$project) $project = $this->dao->select('project')->from(TABLE_TASK)->where('id')->eq($objectID)->fetch('project');
$canView = strpos(',' . $this->app->user->view->projects . ',', ",$project,") !== false;
}
elseif($objectType === 'feedback')
{
$product = isset($attrs['product']) ? $attrs['product'] : 0;
if(!$product) $product = $this->dao->select('product')->from(TABLE_FEEDBACK)->where('id')->eq($objectID)->fetch('product');
$canView = strpos(',' . $this->app->user->view->products . ',', ",$product,") !== false;
}
elseif($objectType === 'doc')
{
$doc = $this->loadModel('doc')->getByID($objectID);
$canView = $this->loadModel('doc')->checkPrivDoc($doc);
}
static::$objectViews[$objectType][$objectID] = $canView;
return $canView;
}
/**
* 同步表。
* Sync tables.