package org.ithinking.strutsExample.util;

import javax.servlet.jsp.tagext.TagSupport;

import org.ithinking.strutsExample.entity.Userinfo;

public class AuthenticationTag extends TagSupport{
	//當action為修改操作時，操作的用戶對象
	Integer userId;
	//權限校驗的動作,包括：new,delete,modify
	String action;
	public void setUserId(Integer id) {
		userId = id;
	}
	public void setAction(String action) {
		this.action = action;
	}
	 public int doStartTag()
	    {
		 	if(action==null||action.trim().length()<=0)
		 	{
		 		return SKIP_BODY;
		 	}
		 	//只有administrator具有新增和刪除用戶的權限
		 	if(action.equals("new")||action.equals("delete"))
		 	{
		 		Userinfo userInfo=(Userinfo)pageContext.getSession().getAttribute(SiteContance.CURRENT_USER);
		 		if(userInfo!=null)
		 		{
		 			if(userInfo.getUserloginid().equals("administrator"))
		 			{
		 				return this.EVAL_BODY_AGAIN;
		 			}
		 		}
		 	}
		 	//administrator用戶可以修改所有用戶的信息，當前登陸用戶只能修改自己的信息
		 	if(action.equals("modify"))
		 	{
		 		Userinfo userInfo=(Userinfo)pageContext.getSession().getAttribute(SiteContance.CURRENT_USER);
		 		if(userInfo!=null)
		 		{
		 			if(userInfo.getUserloginid().equals("administrator"))
		 			{
		 				return this.EVAL_BODY_AGAIN;
		 			}
		 			else
		 			{
		 				if(userId!=null)
		 				{
		 					if(userInfo.getId().equals(userId))
		 					{
		 						return this.EVAL_BODY_AGAIN;
		 					}
		 				}
		 			}
		 		}
		 	}
		 	return SKIP_BODY;
	    }
}