sub_project_check.js 2.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667
  1. 'use strict';
  2. /**
  3. *
  4. *
  5. * @author Mai
  6. * @date
  7. * @version
  8. */
  9. module.exports = options => {
  10. /**
  11. * 标段校验 中间件
  12. * 1. 读取标段数据(包括属性)
  13. * 2. 检验用户是否可见标段(不校验具体权限)
  14. *
  15. * @param {function} next - 中间件继续执行的方法
  16. * @return {void}
  17. */
  18. return function* subProjectCheck(next) {
  19. try {
  20. // 读取标段数据
  21. const id = this.tender ? this.tender.data.spid : this.params.id || this.query.id;
  22. if (!id) throw '参数错误';
  23. this.subProject = yield this.service.subProject.getDataById(id);
  24. if (this.subProject.project_id !== this.session.sessionProject.id) throw '您无权查看该项目';
  25. if (!this.subProject) throw '项目不存在';
  26. // 解析属性并加载默认值
  27. this.subProject.page_show = this.service.subProject.getPageShow(this.subProject.page_show);
  28. this.subProject.fun_set = this.service.subProject.getFunSet(this.subProject.fun_set);
  29. this.subProject.fun_rela = this.service.subProject.getFunRela(this.subProject);
  30. if (this.session.sessionUser.is_admin) {
  31. this.subProject.readOnly = false;
  32. this.subProject.permission = this.service.subProjPermission.adminPermission;
  33. } else {
  34. const bp = yield this.service.subProjPermission.getSubProjectUserPermission(id, this.session.sessionUser.accountId);
  35. if (!bp) throw '您无权查看该项目';
  36. this.subProject.permission = bp;
  37. }
  38. const financialPermission = yield this.service.subProjPermission.getFinancailPermission(this.subProject.permission.fund_trans_permission, this.subProject.permission.fund_pay_permission);
  39. if (financialPermission.transfer_show) {
  40. this.subProject.financialToUrl = 'transfer';
  41. } else if (financialPermission.pay_show) {
  42. this.subProject.financialToUrl = 'pay';
  43. } else if (!financialPermission.transfer_show && !financialPermission.pay_show) {
  44. this.subProject.financialToUrl = 'transfer';
  45. }
  46. if (this.helper.isAjax(this.request) || this.method === 'POST' || this.service.subProjPermission.checkViewPermission(this)) {
  47. yield next;
  48. } else {
  49. this.redirect(`/sp/${this.subProject.id}/nop/${this.controllerName}`);
  50. }
  51. } catch (err) {
  52. this.log(err);
  53. if (this.helper.isAjax(this.request)) {
  54. this.ajaxErrorBody(err, '未知错误');
  55. } else {
  56. this.postError(err, '未知错误');
  57. err === '该功能已关闭或无法查看' ? this.redirect('/dashboard') : this.redirect(this.request.headers.referer);
  58. }
  59. }
  60. };
  61. };