package filter;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.*;
//import dao.AccessBean;

import po.Toperator;

/**
 * @author 趙昌峻
 * 
 * TODO 判斷用戶是否是管理員
 */
public class SecondFilter implements Filter {

	public void init(FilterConfig cong) {
//		do nothing
	}

	public void doFilter(ServletRequest srequest, ServletResponse sresponse,
			FilterChain chain) {

		try {
			HttpServletRequest requst = (HttpServletRequest) srequest;
			HttpServletResponse response = (HttpServletResponse) sresponse;
			HttpSession session = requst.getSession();
			//從session中取得操作員
			Toperator operator = (Toperator) session.getAttribute("operator");
			String ad=operator.getIsAdmin().toString();
			//如果是普通業務員,則無此操作權限
			if (operator == null || ad.equals("0")) {
				
					response.sendRedirect("/chinamobile/web/main.jsp");
				
			} else {
				chain.doFilter(srequest, sresponse);
			}
		} catch (Exception e) {
			e.printStackTrace();
		}
	}

	public void destroy() {
		//do nothing
	}

}