tender_check.js 6.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127
  1. 'use strict';
  2. /**
  3. *
  4. *
  5. * @author Mai
  6. * @date
  7. * @version
  8. */
  9. const auditConst = require('../const/audit').ledger;
  10. const messageType = require('../const/message_type');
  11. const scPermission = require('../const/schedule').permission;
  12. module.exports = options => {
  13. /**
  14. * 标段校验 中间件
  15. * 1. 读取标段数据(包括属性)
  16. * 2. 检验用户是否可见标段(不校验具体权限)
  17. *
  18. * @param {function} next - 中间件继续执行的方法
  19. * @return {void}
  20. */
  21. return function* tenderCheck(next) {
  22. try {
  23. // 读取标段数据
  24. const tender = { id: parseInt(this.params.id) };
  25. if (!tender.id) {
  26. throw '当前未打开标段';
  27. }
  28. tender.data = yield this.service.tender.getTender(tender.id);
  29. if (!tender.data) {
  30. throw '标段数据错误';
  31. }
  32. if (!tender.data.measure_type) {
  33. throw '请先选择计量模式';
  34. }
  35. tender.info = yield this.service.tenderInfo.getTenderInfo(tender.id);
  36. if (!tender.data.ledger_status) {
  37. tender.data.ledger_status = auditConst.status.uncheck;
  38. }
  39. tender.auditLedgerConst = auditConst;
  40. if (!tender.data.ledger_times) {
  41. tender.data.ledger_times = 1;
  42. }
  43. if (tender.data.project_id !== this.session.sessionProject.id) {
  44. throw '您无权查看该项目';
  45. }
  46. const accountId = this.session.sessionUser.accountId;
  47. const advanceAuditors = yield this.service.advanceAudit.getAllAuditors(tender.id);
  48. const advanceAuditorsId = this.helper._.map(advanceAuditors, 'audit_id');
  49. const times = tender.data.ledger_status === auditConst.status.checkNo ? tender.data.ledger_times - 1 : tender.data.ledger_times;
  50. const auditors = yield this.service.ledgerAudit.getAuditors(tender.id, times);
  51. const auditorsId = this.helper._.map(auditors, 'audit_id');
  52. const stageAuditors = yield this.service.stageAudit.getAllAuditors(tender.id);
  53. const stageAuditorsId = this.helper._.map(stageAuditors, 'aid');
  54. const changeAuditors = yield this.service.changeAudit.getAllAuditors(tender.id);
  55. const changeAuditorsId = this.helper._.map(changeAuditors, 'uid');
  56. const reviseAuditors = yield this.service.reviseAudit.getAllAuditors(tender.id);
  57. const reviseAuditorsId = this.helper._.map(reviseAuditors, 'audit_id');
  58. const materialAuditors = yield this.service.materialAudit.getAllAuditors(tender.id);
  59. const materialAuditorsId = this.helper._.map(materialAuditors, 'aid');
  60. const tenderPermission = this.session.sessionUser.permission ? this.session.sessionUser.permission.tender : null;
  61. const isTenderTourist = yield this.service.tenderTourist.getDataByCondition({ tid: tender.id, user_id: accountId });
  62. // 判断访问人是否具有游客身份
  63. tender.isTourist = isTenderTourist;
  64. if (auditorsId.indexOf(accountId) === -1 && tender.data.user_id !== accountId &&
  65. (tenderPermission === null || tenderPermission === undefined || tenderPermission.indexOf('2') === -1) &&
  66. stageAuditorsId.indexOf(accountId) === -1 && changeAuditorsId.indexOf(accountId) === -1 &&
  67. reviseAuditorsId.indexOf(accountId) === -1 && materialAuditorsId.indexOf(accountId) === -1 &&
  68. advanceAuditorsId.indexOf(accountId) === -1 && !this.session.sessionUser.is_admin && !isTenderTourist) {
  69. throw '您无权查看该项目';
  70. }
  71. tender.ledgerReadOnly = this.session.sessionUser.accountId !== tender.data.user_id ||
  72. tender.data.ledger_status === auditConst.status.checking || tender.data.ledger_status === auditConst.status.checked;
  73. tender.advanceAuditorsId = advanceAuditorsId;
  74. tender.ledgerUsers = tender.ledger_status === auditConst.status.uncheck ? [tender.data.user_id] : [tender.data.user_id, ...auditorsId];
  75. this.tender = tender;
  76. this.session.sessionProject.page_show = yield this.service.project.getPageshow(this.session.sessionProject.id);
  77. // 形象进度权限获取
  78. let schedule_permission = scPermission.no;
  79. if (this.session.sessionUser.accountId === tender.data.user_id) {
  80. schedule_permission = scPermission.edit;
  81. } else {
  82. const scheduleUser = yield this.service.scheduleAudit.getDataByCondition({ tid: tender.id, audit_id: this.session.sessionUser.accountId });
  83. if (scheduleUser) {
  84. schedule_permission = scheduleUser.permission;
  85. } else if (tender.isTourist) {
  86. schedule_permission = scPermission.show;
  87. }
  88. }
  89. tender.schedule_permission = schedule_permission;
  90. yield next;
  91. } catch (err) {
  92. // 输出错误到日志
  93. if (err.stack) {
  94. this.logger.error(err);
  95. } else {
  96. this.session.message = {
  97. type: messageType.ERROR,
  98. icon: 'exclamation-circle',
  99. message: err,
  100. };
  101. this.getLogger('fail').info(JSON.stringify({
  102. error: err,
  103. project: this.session.sessionProject,
  104. user: this.session.sessionUser,
  105. body: this.session.body,
  106. }));
  107. }
  108. if (this.helper.isAjax(this.request)) {
  109. if (err.stack) {
  110. this.body = {err: 4, msg: '标段数据未知错误', data: null};
  111. } else {
  112. this.body = {err: 3, msg: err.toString(), data: null};
  113. }
  114. } else {
  115. if (this.helper.isWap(this.request)) {
  116. this.redirect('/wap/list');
  117. } else {
  118. err === '您无权查看该内容' ? this.redirect(this.request.headers.referer) : this.redirect('/list');
  119. }
  120. }
  121. }
  122. };
  123. };