mybatisplus添加数据权限过滤（自定义拦截器，sql拦截）

添加数据权限过滤监听类

1. import com.baomidou.mybatisplus.core.toolkit.PluginUtils;
   
2. import com.baomidou.mybatisplus.extension.handlers.AbstractSqlParserHandler;
   
3. import org.apache.ibatis.executor.statement.StatementHandler;
   
4. import org.apache.ibatis.mapping.BoundSql;
   
5. import org.apache.ibatis.mapping.MappedStatement;
   
6. import org.apache.ibatis.mapping.SqlCommandType;
   
7. import org.apache.ibatis.plugin.Interceptor;
   
8. import org.apache.ibatis.plugin.Invocation;
   
9. import org.apache.ibatis.plugin.Plugin;
   
10. import org.apache.ibatis.reflection.MetaObject;
    
11. import org.apache.ibatis.reflection.SystemMetaObject;
    
12. 
    
13. import javax.sql.DataSource;
    
14. import java.util.Properties;
    
15. 
    
16. //@Slf4j
    
17. //@AllArgsConstructor
    
18. //@Intercepts({@Signature(type = StatementHandler.class, method = "prepare", args = {Connection.class, Integer.class})})
    
19. //@Component
    
20. public class DataScopeInterceptor  extends AbstractSqlParserHandler implements Interceptor {
    
21. private DataSource dataSource;
    
22. 
    
23. @Override
    
24. public Object intercept(Invocation invocation) throws Throwable {
    
25. StatementHandler statementHandler = PluginUtils.realTarget(invocation.getTarget());
    
26. MetaObject metaObject = SystemMetaObject.forObject(statementHandler);
    
27. this.sqlParser(metaObject);
    
28. // 先判断是不是SELECT操作 不是直接过滤
    
29. MappedStatement mappedStatement = (MappedStatement) metaObject.getValue("delegate.mappedStatement");
    
30. if (!SqlCommandType.SELECT.equals(mappedStatement.getSqlCommandType())) {
    
31. return invocation.proceed();
    
32. }
    
33. BoundSql boundSql = (BoundSql) metaObject.getValue("delegate.boundSql");
    
34. // 执行的SQL语句
    
35. String originalSql = boundSql.getSql();
    
36. // SQL语句的参数
    
37. Object parameterObject = boundSql.getParameterObject();
    
38. 
    
39. originalSql = "select * from (" + originalSql + ") temp_data_scope where temp_data_scope." + 1 + " in (" + 2 + ")";
    
40. metaObject.setValue("delegate.boundSql.sql", originalSql);
    
41. return invocation.proceed();
    
42. 
    
43. }
    
44. 
    
45. /**
    
46. 
    
47. * 生成拦截对象的代理
    
48. *
    
49. * @param target 目标对象
    
50. * @return 代理对象
    
51.   */
    
52.   @Override
    
53.   public Object plugin(Object target) {
    
54.   if (target instanceof StatementHandler) {
    
55.   return Plugin.wrap(target, this);
    
56.   }
    
57.   return target;
    
58.   }
    
59. 
    
60. /**
    
61. 
    
62. * mybatis配置的属性
    
63. *
    
64. * @param properties mybatis配置的属性
    
65.   */
    
66.   @Override
    
67.   public void setProperties(Properties properties) {
    
68. 
    
69. }
    
70. 
    
71. /**
    
72. 
    
73. * 查找参数是否包括DataScope对象
    
74. *
    
75. * @param parameterObj 参数列表
    
76. * @return DataScope
    
77.   */
    
78. 
    
79. //    private DataScope findDataScopeObject(Object parameterObj) {
    
80. //        if (parameterObj instanceof DataScope) {
    
81. //            return (DataScope) parameterObj;
    
82. //        } else if (parameterObj instanceof Map) {
    
83. //            for (Object val : ((Map) parameterObj).values()) {
    
84. //                if (val instanceof DataScope) {
    
85. //                    return (DataScope) val;
    
86. //                }
    
87. //            }
    
88. //        }
    
89. //        return null;
    
90. //    }
    
91. }
    
92. 以下代码添加至mybatisplus配置文件
    
93. 
    
94. /**
    
95.      * 数据权限插件
    
96.      *
    
97.      * @return DataScopeInterceptor
    
98.      */
    
99.     @Bean
    
100.     @ConditionalOnMissingBean
     
101.     public DataScopeInterceptor dataScopeInterceptor(DataSource dataSource) {
     
102.         return new DataScopeInterceptor(dataSource);
     
103.     }

复制代码

添加数据权限过滤监听类

1. import com.baomidou.mybatisplus.core.toolkit.PluginUtils;
   
2. import com.baomidou.mybatisplus.extension.handlers.AbstractSqlParserHandler;
   
3. import org.apache.ibatis.executor.statement.StatementHandler;
   
4. import org.apache.ibatis.mapping.BoundSql;
   
5. import org.apache.ibatis.mapping.MappedStatement;
   
6. import org.apache.ibatis.mapping.SqlCommandType;
   
7. import org.apache.ibatis.plugin.Interceptor;
   
8. import org.apache.ibatis.plugin.Invocation;
   
9. import org.apache.ibatis.plugin.Plugin;
   
10. import org.apache.ibatis.reflection.MetaObject;
    
11. import org.apache.ibatis.reflection.SystemMetaObject;
    
12. 
    
13. import javax.sql.DataSource;
    
14. import java.util.Properties;
    
15. 
    
16. //@Slf4j
    
17. //@AllArgsConstructor
    
18. //@Intercepts({@Signature(type = StatementHandler.class, method = "prepare", args = {Connection.class, Integer.class})})
    
19. //@Component
    
20. public class DataScopeInterceptor  extends AbstractSqlParserHandler implements Interceptor {
    
21. private DataSource dataSource;
    
22. 
    
23. @Override
    
24. public Object intercept(Invocation invocation) throws Throwable {
    
25. StatementHandler statementHandler = PluginUtils.realTarget(invocation.getTarget());
    
26. MetaObject metaObject = SystemMetaObject.forObject(statementHandler);
    
27. this.sqlParser(metaObject);
    
28. // 先判断是不是SELECT操作 不是直接过滤
    
29. MappedStatement mappedStatement = (MappedStatement) metaObject.getValue("delegate.mappedStatement");
    
30. if (!SqlCommandType.SELECT.equals(mappedStatement.getSqlCommandType())) {
    
31. return invocation.proceed();
    
32. }
    
33. BoundSql boundSql = (BoundSql) metaObject.getValue("delegate.boundSql");
    
34. // 执行的SQL语句
    
35. String originalSql = boundSql.getSql();
    
36. // SQL语句的参数
    
37. Object parameterObject = boundSql.getParameterObject();
    
38. 
    
39. originalSql = "select * from (" + originalSql + ") temp_data_scope where temp_data_scope." + 1 + " in (" + 2 + ")";
    
40. metaObject.setValue("delegate.boundSql.sql", originalSql);
    
41. return invocation.proceed();
    
42. 
    
43. }
    
44. 
    
45. /**
    
46. 
    
47. * 生成拦截对象的代理
    
48. *
    
49. * @param target 目标对象
    
50. * @return 代理对象
    
51.   */
    
52.   @Override
    
53.   public Object plugin(Object target) {
    
54.   if (target instanceof StatementHandler) {
    
55.   return Plugin.wrap(target, this);
    
56.   }
    
57.   return target;
    
58.   }
    
59. 
    
60. /**
    
61. 
    
62. * mybatis配置的属性
    
63. *
    
64. * @param properties mybatis配置的属性
    
65.   */
    
66.   @Override
    
67.   public void setProperties(Properties properties) {
    
68. 
    
69. }
    
70. 
    
71. /**
    
72. 
    
73. * 查找参数是否包括DataScope对象
    
74. *
    
75. * @param parameterObj 参数列表
    
76. * @return DataScope
    
77.   */
    
78. 
    
79. //    private DataScope findDataScopeObject(Object parameterObj) {
    
80. //        if (parameterObj instanceof DataScope) {
    
81. //            return (DataScope) parameterObj;
    
82. //        } else if (parameterObj instanceof Map) {
    
83. //            for (Object val : ((Map) parameterObj).values()) {
    
84. //                if (val instanceof DataScope) {
    
85. //                    return (DataScope) val;
    
86. //                }
    
87. //            }
    
88. //        }
    
89. //        return null;
    
90. //    }
    
91. }
    
92. 以下代码添加至mybatisplus配置文件
    
93. 
    
94. /**
    
95.      * 数据权限插件
    
96.      *
    
97.      * @return DataScopeInterceptor
    
98.      */
    
99.     @Bean
    
100.     @ConditionalOnMissingBean
     
101.     public DataScopeInterceptor dataScopeInterceptor(DataSource dataSource) {
     
102.         return new DataScopeInterceptor(dataSource);
     
103.     }

复制代码