Exemplo n.º 1
0
    def post(self, user_id, module_id):

        token = request.json.get('utoken', None)
        is_active = True if request.json.get('is_checked', False) else False
        if not psd_handler.user_is_admin(token):
            return jsonify('登录已过期或没有权限进行这个操作'), 400
        try:
            db_connection = MySQLConnection()
            cursor = db_connection.get_cursor()
            nowork_select_statement = "SELECT `user_id`,`module_id`,`is_active` FROM `user_ndo_module` WHERE `user_id`=%s AND `module_id`=%s;"
            cursor.execute(nowork_select_statement, (user_id, module_id))
            nowork_module = cursor.fetchone()
            # print(nowork_module)
            if not nowork_module:  # 数据库不存在记录增加一条
                add_statement = "INSERT INTO `user_ndo_module` (user_id,module_id,is_active) VALUES (%s,%s,%s);"
                cursor.execute(add_statement,
                               (user_id, module_id, not is_active))
            else:  # 存在记录就更新
                update_statement = "UPDATE `user_ndo_module` SET `is_active`=%s WHERE `user_id`=%s AND `module_id`=%s;"
                cursor.execute(update_statement,
                               (not is_active, user_id, module_id))
            db_connection.commit()
            db_connection.close()
        except Exception as e:
            logger = current_app.logger
            logger.error("修改用户需要工作的模块失败:" + str(e))
            return jsonify('操作错误,500 SERVER ERROR'), 400
        else:
            return jsonify("操作成功")
Exemplo n.º 2
0
 def get(self):
     token = request.args.get("utoken")
     if not psd_handler.user_is_admin(token):
         return jsonify("登录已过期或没有权限进行这个操作"), 400
     db_connection = MySQLConnection()
     cursor = db_connection.get_cursor()
     # 查询所有用户信息
     select_statement = "SELECT id,name,fixed_code,join_time,phone,email,update_time,is_active,is_admin,org_id FROM user_info;"
     cursor.execute(select_statement)
     # 重新组织用户数据
     user_data = list()
     for user_item in cursor.fetchall():
         user_dict = dict()
         user_dict['id'] = user_item['id']
         user_dict['name'] = user_item['name']
         user_dict['fixed_code'] = user_item['fixed_code']
         user_dict['join_time'] = user_item['join_time'].strftime(
             '%Y-%m-%d %H:%M:%S')
         user_dict['update_time'] = user_item['update_time'].strftime(
             '%Y-%m-%d %H:%M:%S')
         user_dict['is_active'] = user_item['is_active']
         user_dict['is_admin'] = user_item['is_admin']
         user_dict['organization'] = ORGANIZATIONS.get(
             user_item['org_id'], '未知')
         user_dict['phone'] = user_item['phone']
         user_dict['email'] = user_item['email']
         user_data.append(user_dict)
     db_connection.close()
     return jsonify(user_data)
Exemplo n.º 3
0
    def post(self):
        json_data = request.json
        token = json_data.get('utoken', None)
        if not user_is_admin(token):
            return jsonify("登录已过期或没有权限进行这个操作."), 400
        # 验证上传的数据
        module_name = json_data.get('module_name', None)
        module_page_url = json_data.get('page_url', None)
        module_parent_id = json_data.get('parent_id', None)
        if not module_name:
            return jsonify("请填写名称!"), 400
        if module_parent_id and not module_page_url:
            return jsonify("子级模块需填写页面路径!"), 400
        module_page_url += ".html"  # 加上后缀
        # 写入数据库
        db_connection = MySQLConnection()
        cursor = db_connection.get_cursor()
        try:
            if not module_parent_id:
                save_statement = "INSERT INTO `work_module` (`name`,`page_url`,`parent_id`) VALUES (%s,'',NULL);"
                cursor.execute(save_statement, module_name)
                new_id = db_connection.insert_id()

            else:
                save_statement = "INSERT INTO `work_module` (`name`,`page_url`,`parent_id`) VALUES (%s,%s,%s);"
                cursor.execute(
                    save_statement,
                    (module_name, module_page_url, module_parent_id))
                new_id = db_connection.insert_id()
            # 修改sort值
            update_sort_statement = "UPDATE `work_module` SET `sort`=%s WHERE `id`=%s;"
            cursor.execute(update_sort_statement, (new_id, new_id))
            db_connection.commit()
        except Exception as e:
            logger = current_app.logger
            logger.error("新增系统模块错误:" + str(e))
            db_connection.close()
            return jsonify("系统发生了个错误。"), 400
        else:
            db_connection.close()
            return self.get()  # 查询所有
Exemplo n.º 4
0
 def post(self):
     json_data = request.json
     token = json_data.get('utoken', None)
     if not user_is_admin(token):
         return jsonify("登录已过期或没有权限进行这个操作."), 400
     # 验证上传的数据
     variety_name = json_data.get('variety_name', None)
     variety_group_id = json_data.get('parent_id', None)
     variety_en_code = json_data.get('en_code', None)
     if not variety_name:
         return jsonify("请填写名称!"), 400
     if variety_group_id and not variety_en_code:
         return jsonify("品种请填写英文代码."), 400
     # 写入数据库
     db_connection = MySQLConnection()
     cursor = db_connection.get_cursor()
     try:
         if not variety_group_id:
             save_statement = "INSERT INTO `variety` (`name`,`parent_id`) VALUES (%s,NULL);"
             cursor.execute(save_statement, variety_name)
             new_id = db_connection.insert_id()
         else:
             save_statement = "INSERT INTO `variety` (`name`, `parent_id`,`en_code`) VALUES (%s,%s,%s);"
             cursor.execute(
                 save_statement,
                 (variety_name, variety_group_id, variety_en_code))
             new_id = db_connection.insert_id()
         # 修改sort值
         update_sort_statement = "UPDATE `variety` SET `sort`=%s WHERE `id`=%s;"
         cursor.execute(update_sort_statement, (new_id, new_id))
         db_connection.commit()
     except Exception as e:
         logger = current_app.logger
         logger.error("新增品种错误:" + str(e))
         db_connection.close()
         return jsonify("系统发生了个错误。"), 400
     else:
         db_connection.close()
         return self.get()  # 查询所有
Exemplo n.º 5
0
 def put(self, user_id):
     utoken = request.json.get('utoken')
     is_active = 1 if request.json.get('is_checked', False) else 0
     org_id = request.json.get('org_id')
     if not psd_handler.user_is_admin(utoken):
         return jsonify("登录已过期或没有权限进行这个操作"), 400
     try:
         org_id = int(org_id)
         # 进行修改
         modify_statement = "UPDATE `user_info` SET `is_active`=%d,`org_id`=%d WHERE id=%d;" % (
             is_active, org_id, user_id)
         db_connection = MySQLConnection()
         cursor = db_connection.get_cursor()
         cursor.execute(modify_statement)
         db_connection.commit()
         db_connection.close()
     except Exception as e:
         logger = current_app.logger
         logger.error('审核用户错误:' + str(e))
         return jsonify('参数错误 require int'), 400
     else:
         return jsonify("修改成功。")
Exemplo n.º 6
0
 def put(self, module_id):
     body_json = request.json
     operation = body_json.get('operation', None)
     if operation not in ['is_private', 'is_active']:
         return jsonify("参数错误."), 400
     token = body_json.get('utoken', None)
     if not user_is_admin(token):
         return jsonify("登录已过期或没有权限进行这个操作."), 400
     is_checked = 1 if body_json.get('is_checked') else 0
     try:
         # 查询模块
         db_connection = MySQLConnection()
         cursor = db_connection.get_cursor()
         update_statement = "UPDATE work_module SET %s=%d WHERE id=%d;" % (
             operation, is_checked, module_id)
         cursor.execute(update_statement)
         db_connection.commit()
         db_connection.close()
     except Exception as e:
         logger = current_app.logger
         logger.error("修改模块状态" + str(operation) + "错误:" + str(e))
         return jsonify("修改失败"), 400
     return jsonify("修改成功.")