From 762eba0553917215d158eac8575ac0437c3216a7 Mon Sep 17 00:00:00 2001 From: zxl <763096477@qq.com> Date: 星期四, 07 八月 2025 16:47:07 +0800 Subject: [PATCH] 订单敏感信息,以及导出权限控制 --- framework/src/main/java/cn/lili/modules/order/order/serviceimpl/OrderServiceImpl.java | 149 +++++++++++++++++++++++++++++++++++++++++++++++-- 1 files changed, 141 insertions(+), 8 deletions(-) diff --git a/framework/src/main/java/cn/lili/modules/order/order/serviceimpl/OrderServiceImpl.java b/framework/src/main/java/cn/lili/modules/order/order/serviceimpl/OrderServiceImpl.java index 296c304..5c2b8ff 100644 --- a/framework/src/main/java/cn/lili/modules/order/order/serviceimpl/OrderServiceImpl.java +++ b/framework/src/main/java/cn/lili/modules/order/order/serviceimpl/OrderServiceImpl.java @@ -1,6 +1,7 @@ package cn.lili.modules.order.order.serviceimpl; import cn.hutool.core.bean.BeanUtil; +import cn.hutool.core.collection.CollectionUtil; import cn.hutool.core.date.DateUtil; import cn.hutool.core.io.IoUtil; import cn.hutool.core.text.CharSequenceUtil; @@ -15,12 +16,17 @@ import cn.lili.common.event.TransactionCommitSendMQEvent; import cn.lili.common.exception.ServiceException; import cn.lili.common.properties.RocketmqCustomProperties; +import cn.lili.common.security.AuthUser; import cn.lili.common.security.OperationalJudgment; import cn.lili.common.security.context.UserContext; import cn.lili.common.security.enums.UserEnums; import cn.lili.common.utils.CurrencyUtil; import cn.lili.common.utils.SnowFlake; +import cn.lili.common.utils.StringUtils; +import cn.lili.modules.goods.entity.dos.Goods; import cn.lili.modules.goods.entity.dto.GoodsCompleteMessage; +import cn.lili.modules.goods.service.GoodsService; +import cn.lili.modules.lmk.enums.general.AdminRoleEnum; import cn.lili.modules.member.entity.dto.MemberAddressDTO; import cn.lili.modules.order.cart.entity.dto.TradeDTO; import cn.lili.modules.order.cart.entity.enums.DeliveryMethodEnum; @@ -28,15 +34,15 @@ import cn.lili.modules.order.order.entity.dos.*; import cn.lili.modules.order.order.entity.dto.*; import cn.lili.modules.order.order.entity.enums.*; -import cn.lili.modules.order.order.entity.vo.OrderDetailVO; -import cn.lili.modules.order.order.entity.vo.OrderSimpleVO; -import cn.lili.modules.order.order.entity.vo.OrderVO; -import cn.lili.modules.order.order.entity.vo.PaymentLog; +import cn.lili.modules.order.order.entity.vo.*; import cn.lili.modules.order.order.mapper.OrderMapper; import cn.lili.modules.order.order.service.*; import cn.lili.modules.order.trade.entity.dos.OrderLog; import cn.lili.modules.order.trade.service.OrderLogService; import cn.lili.modules.payment.entity.enums.PaymentMethodEnum; +import cn.lili.modules.permission.entity.dos.AdminUser; +import cn.lili.modules.permission.service.AdminUserService; +import cn.lili.modules.permission.service.RoleService; import cn.lili.modules.promotion.entity.dos.Pintuan; import cn.lili.modules.promotion.service.PintuanService; import cn.lili.modules.store.entity.dto.StoreDeliverGoodsAddressDTO; @@ -59,12 +65,15 @@ import cn.lili.trigger.model.TimeExecuteConstant; import cn.lili.trigger.model.TimeTriggerMsg; import cn.lili.trigger.util.DelayQueueTools; +import cn.lili.utils.COSUtil; +import cn.lili.utils.CommonUtil; import com.baomidou.mybatisplus.core.conditions.Wrapper; import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper; import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import com.baomidou.mybatisplus.core.conditions.update.LambdaUpdateWrapper; import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper; import com.baomidou.mybatisplus.core.metadata.IPage; +import com.baomidou.mybatisplus.core.toolkit.Wrappers; import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl; import lombok.extern.slf4j.Slf4j; import org.apache.poi.ss.usermodel.Cell; @@ -85,7 +94,7 @@ import java.net.URLEncoder; import java.util.*; import java.util.stream.Collectors; - +import cn.lili.modules.permission.entity.dos.Role; /** * 瀛愯鍗曚笟鍔″眰瀹炵幇 * @@ -168,6 +177,15 @@ @Autowired private SettingService settingService; + @Autowired + private GoodsService goodsService; + @Autowired + private COSUtil cosUtil; + @Autowired + private AdminUserService adminUserService; + @Autowired + private RoleService roleService; + @Override @Transactional(rollbackFor = Exception.class) @@ -198,6 +216,12 @@ UserContext.getCurrentUser().getUsername(), message)); item.getCheckedSkuList().forEach( sku -> { +// OrderItem e = new OrderItem(sku, item, tradeDTO); +// String goodsId = e.getGoodsId(); +// Goods goods = goodsService.getById(goodsId); +// item.getPriceDetailDTO().setPlatFormCommissionPoint(Double.valueOf(goods.getCommission().toString())); +// e.setPriceDetailDTO(item.getPriceDetailDTO()); +// orderItems.add(e); orderItems.add(new OrderItem(sku, item, tradeDTO)); currentOrderItems.add(new OrderItem(sku, item, tradeDTO)); } @@ -221,7 +245,89 @@ QueryWrapper queryWrapper = orderSearchParams.queryWrapper(); queryWrapper.groupBy("o.id"); queryWrapper.orderByDesc("o.id"); - return this.baseMapper.queryByParams(PageUtil.initPage(orderSearchParams), queryWrapper); + IPage<OrderSimpleVO> page = this.baseMapper.queryByParams(PageUtil.initPage(orderSearchParams), queryWrapper); + + if (!adminUserService.havePermissionRole(AdminRoleEnum.ORDER_INFO_PERMISSION)){ + for (OrderSimpleVO vo : page.getRecords()){ + vo.setConsigneeName(CommonUtil.maskName(vo.getConsigneeName())); + vo.setConsigneeMobile(CommonUtil.maskMobile(vo.getConsigneeMobile())); + } + } + return page; + } + + + + @Override + public IPage<OrderSimpleXcxVO> queryByXcxParams(OrderSearchXcxParams orderSearchParams) { + QueryWrapper queryWrapper = orderSearchParams.queryWrapper(); + queryWrapper.groupBy("o.id"); + queryWrapper.orderByDesc("o.id"); + IPage<OrderSimpleXcxVO> iPage = this.baseMapper.queryByXcxParams(PageUtil.initPage(orderSearchParams), queryWrapper); + Set<String> goodsIds = new HashSet<>(); + for (OrderSimpleXcxVO orderSimpleVO : iPage.getRecords()) { + orderSimpleVO.setOrderItems(orderSimpleVO.initOrderItems()); + String groupGoodsId = orderSimpleVO.getGroupGoodsId(); + if (StringUtils.isNotBlank(groupGoodsId)) { + goodsIds.addAll(Arrays.asList(groupGoodsId.split(","))); + } + } + if (CollectionUtil.isNotEmpty(goodsIds)) { + List<Goods> list = goodsService.list(Wrappers.<Goods>lambdaQuery().in(Goods::getId, goodsIds)); + Map<String, String> goodsVideos = list + .stream().collect(Collectors.toMap(Goods::getId, g-> + StringUtils.isNotBlank(g.getGoodsVideo())?g.getGoodsVideo():"" + )); + iPage.getRecords().forEach(orderSimpleVO -> { + orderSimpleVO.getOrderItems().forEach(orderItem -> { + String videoUrl = goodsVideos.get(orderItem.getGoodsId()); + if (StringUtils.isNotBlank(videoUrl)&&!videoUrl.contains("http")) { + orderItem.setVideo(cosUtil.getPreviewUrl(videoUrl)); + } + String image = orderItem.getImage(); + if (StringUtils.isNotBlank(image)&&!image.contains("http")) { + orderItem.setImage(cosUtil.getPreviewUrl(image)); + } + }); + }); + } + return iPage; + } + + @Override + public IPage<OrderSimpleXcxVO> querySupplierOrderParams(SupplierOrderSearchParams orderSearchParams) { + QueryWrapper queryWrapper = orderSearchParams.queryWrapper(); + queryWrapper.groupBy("o.id"); + queryWrapper.orderByDesc("o.id"); + IPage<OrderSimpleXcxVO> iPage = this.baseMapper.querySupplierOrderParams(PageUtil.initPage(orderSearchParams), queryWrapper); + Set<String> goodsIds = new HashSet<>(); + for (OrderSimpleXcxVO orderSimpleVO : iPage.getRecords()) { + orderSimpleVO.setOrderItems(orderSimpleVO.initOrderItems()); + String groupGoodsId = orderSimpleVO.getGroupGoodsId(); + if (StringUtils.isNotBlank(groupGoodsId)) { + goodsIds.addAll(Arrays.asList(groupGoodsId.split(","))); + } + } + if (CollectionUtil.isNotEmpty(goodsIds)) { + List<Goods> list = goodsService.list(Wrappers.<Goods>lambdaQuery().in(Goods::getId, goodsIds)); + Map<String, String> goodsVideos = list + .stream().collect(Collectors.toMap(Goods::getId, g-> + StringUtils.isNotBlank(g.getGoodsVideo())?g.getGoodsVideo():"" + )); + iPage.getRecords().forEach(orderSimpleVO -> { + orderSimpleVO.getOrderItems().forEach(orderItem -> { + String videoUrl = goodsVideos.get(orderItem.getGoodsId()); + if (StringUtils.isNotBlank(videoUrl)&&!videoUrl.contains("http")) { + orderItem.setVideo(cosUtil.getPreviewUrl(videoUrl)); + } + String image = orderItem.getImage(); + if (StringUtils.isNotBlank(image)&&!image.contains("http")) { + orderItem.setImage(cosUtil.getPreviewUrl(image)); + } + }); + }); + } + return iPage; } /** @@ -292,8 +398,17 @@ @Override public void queryExportOrder(HttpServletResponse response, OrderSearchParams orderSearchParams) { + List<OrderExportDTO> orderExportDTOS = this.baseMapper.queryExportOrder(orderSearchParams.queryWrapper()); - XSSFWorkbook workbook = initOrderExportData(this.baseMapper.queryExportOrder(orderSearchParams.queryWrapper())); + if (!adminUserService.havePermissionRole(AdminRoleEnum.ORDER_INFO_PERMISSION)){ + for (OrderExportDTO vo : orderExportDTOS){ + vo.setConsigneeName(CommonUtil.maskName(vo.getConsigneeName())); + vo.setConsigneeMobile(CommonUtil.maskMobile(vo.getConsigneeMobile())); + } + } + + + XSSFWorkbook workbook = initOrderExportData(orderExportDTOS); try { // 璁剧疆鍝嶅簲澶� String fileName = URLEncoder.encode("璁㈠崟鍒楄〃", "UTF-8"); @@ -411,7 +526,25 @@ //璁板綍搴楅摵璁㈠崟鏀粯娴佹按 storeFlowService.payOrder(orderSn); - + //todo 鐢熸垚璁㈠崟璁板綍琛� +// //鑾峰彇瀛愯鍗曟暟鎹� +// List<OrderItem> orderItems = orderItemService.getByOrderSn(orderSn); +// List<String> goodsIds = orderItems.stream().map(OrderItem::getGoodsId).distinct().collect(Collectors.toList()); +// +// Map<String, OrderItem> orderItem = orderItems.stream() +// .collect(Collectors.toMap(OrderItem::getGoodsId, Function.identity() +// ,(oldValue, newValue) -> oldValue)); +// //鏍规嵁璁㈠崟item椤瑰垱寤烘娊鎴愭祦姘磋鍗� +// List<CommissionRecord> commissionRecords = new ArrayList<>(); +// CommissionRecord commissionRecord; +// for (OrderItem item : orderItems) { +// commissionRecord = new CommissionRecord(); +// commissionRecord.setSn(item.getSn()); +// BigDecimal commission = item.getCommission(); +// commissionRecord.setCommission(commission); +// commissionRecord.setCommissionPrice(); +// +// } //鍙戦�佽鍗曞凡浠樻娑堟伅 OrderMessage orderMessage = new OrderMessage(); orderMessage.setOrderSn(order.getSn()); -- Gitblit v1.8.0