Calculation/app/middleware/change_project_check.js

'use strict';

/**
 *
 *
 * @author Ellisran
 * @date 2020/10/15
 * @version
 */

const status = require('../const/audit').changeProject.status;
const _ = require('lodash');

module.exports = options => {
    /**
     * 标段校验 中间件
     * 1. 读取标段数据（包括属性）
     * 2. 检验用户是否可见标段（不校验具体权限）
     *
     * @param {function} next - 中间件继续执行的方法
     * @return {void}
     */
    return function* changeProjectCheck(next) {
        try {
            // 获取revise
            if (!this.subProject.page_show.openChangeProject) {
                throw '该功能已关闭';
            }
            const cpid = this.params.cpid || this.request.body.cpid;
            if (!cpid) {
                throw '您访问的变更立项不存在';
            }
            const change = yield this.service.changeProject.getDataById(cpid);
            if (!change) throw '变更立项数据有误';
            // 读取原报、审核人数据
            yield this.service.changeProject.loadChangeUser(change);
            // change.auditors = yield this.service.changeProjectAudit.getAuditors(change.id, change.times);
            // change.curAuditor = yield this.service.changeProjectAudit.getCurAuditor(change.id, change.times);
            change.xsAuditors = yield this.service.changeProjectXsAudit.getAuditList(change.id);
            // 权限相关
            // todo 校验权限 （标段参与人、分享）
            const accountId = this.session.sessionUser.accountId,
                xsAuditorIds = _.map(change.xsAuditors, 'aid'),
                shareIds = [];
            const permission = this.session.sessionUser.permission;
            if (accountId === change.uid) { // 原报
                change.curTimes = change.times;
                change.filePermission = true;
            } else if (change.auditorIds.indexOf(accountId) !== -1 || xsAuditorIds.indexOf(accountId) !== -1) { // 审批人或者协审人
                if (change.status === status.uncheck) {
                    throw '您无权查看该数据';
                }
                change.curTimes = change.status === status.back || change.status === status.revise ? change.times - 1 : change.times;
                change.filePermission = true;
            } else if ((change.status === status.back || change.status === status.revise) && change.uid !== accountId) {
                const preAuditors = yield this.service.changeProjectAudit.getAuditors(change.id, change.times - 1);
                const preAuditorIds = _.map(preAuditors, 'aid');
                if (preAuditorIds.indexOf(accountId) === -1) {
                    throw '您无权查看该数据';
                }
                change.filePermission = true;
            } else if (this.tender.isTourist || this.session.sessionUser.is_admin) {
                change.curTimes = change.times;
                change.filePermission = this.tender.touristPermission.file || change.auditorIds.indexOf(accountId) !== -1;
            } else if (shareIds.indexOf(accountId) !== -1 || (permission !== null && permission.tender !== undefined && permission.tender.indexOf('2') !== -1)) { // 分享人
                if (change.status === status.uncheck) {
                    throw '您无权查看该数据';
                }
                change.curTimes = change.status === status.back || change.status === status.revise ? change.times - 1 : change.times;
                change.filePermission = false;
            } else { // 其他不可见
                throw '您无权查看该数据';
            }
            // 调差的readOnly 指表格和页面只能看不能改，和审批无关
            change.readOnly = !((change.status === status.uncheck || change.status === status.back || change.status === status.revise) && accountId === change.uid);
            this.change = change;
            yield this.service.changeProject.doCheckChangeCanCancel(this.change);
            yield next;
        } catch (err) {
            console.log(err);
            // 输出错误到日志
            if (err.stack) {
                this.logger.error(err);
            } else {
                this.getLogger('fail').info(JSON.stringify({
                    error: err,
                    project: this.session.sessionProject,
                    user: this.session.sessionUser,
                    body: this.session.body,
                }));
            }
            // 重定向值标段管理
            this.redirect(this.request.headers.referer);
        }
    };
};