budget_check.js 1.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152
  1. 'use strict';
  2. /**
  3. *
  4. *
  5. * @author Mai
  6. * @date
  7. * @version
  8. */
  9. module.exports = options => {
  10. /**
  11. * 标段校验 中间件
  12. * 1. 读取标段数据(包括属性)
  13. * 2. 检验用户是否可见标段(不校验具体权限)
  14. *
  15. * @param {function} next - 中间件继续执行的方法
  16. * @return {void}
  17. */
  18. return function* budgetCheck(next) {
  19. try {
  20. if (!this.session.sessionProject.showBudget) {
  21. throw '该功能已关闭或无法查看';
  22. }
  23. // 读取标段数据
  24. const id = parseInt(this.params.id);
  25. if (!id) throw '参数错误';
  26. this.budget = yield this.service.budget.getCurBudget(id);
  27. if (!this.budget) throw '项目不存在';
  28. if (this.budget.pid !== this.session.sessionProject.id) throw '您无权查看该项目';
  29. const subProj = yield this.service.subProject.getDataByCondition({ budget_id: this.budget.id });
  30. if (subProj) this.budget.name = subProj.name || '';
  31. if (this.session.sessionUser.is_admin) {
  32. this.budget.readOnly = false;
  33. } else {
  34. const bp = yield this.service.subProjPermission.getBudgetUserPermission(id);
  35. if (!bp) throw '您无权查看该项目';
  36. this.budget.readOnly = bp.budget_permission.indexOf(this.service.subProjPermission.PermissionConst.budget.edit.value) < 0;
  37. }
  38. yield next;
  39. } catch (err) {
  40. this.log(err);
  41. if (this.helper.isAjax(this.request)) {
  42. this.ajaxErrorBody(err, '概算投资项目未知错误');
  43. } else {
  44. this.postError(err, '概算投资项目未知错误');
  45. err === '该功能已关闭或无法查看' ? this.redirect('/dashboard') : this.redirect(this.request.headers.referer);
  46. }
  47. }
  48. };
  49. };