DS7/DSWeb/Areas/SoftMng/Controllers/AuthController.cs

using System;
using System.Collections;
using System.Collections.Generic;
using System.Linq;
using System.Reflection;
using System.Text;
using System.Text.RegularExpressions;
using System.Web.Mvc;
using System.Web.Script.Serialization;
using System.Xml.Serialization;
using DSWeb.SoftMng.BLL;
using DSWeb.SoftMng.DBUtility;
using DSWeb.SoftMng.Model;
using DSWeb.SoftMng.Filter;
using DSWeb.Areas.CommMng.Models;
using DSWeb.TruckMng.Helper.Repository;
using HcUtility.Comm;
using DSWeb.EntityDA;
using DSWeb.Models;
using Newtonsoft.Json;
using DSWeb.Areas.CommMng.DAL;
using DSWeb.Areas.SysMng.DAL.SysUser;

namespace DSWeb.SoftMng.Controllers
{
    public class AuthController : Controller
    {
        private readonly sys_secCompanyServerBLL _bll = new sys_secCompanyServerBLL();
        private readonly sys_secModuleServerBLL _mbll = new sys_secModuleServerBLL();
        private readonly info_clientServerBLL _cbll = new info_clientServerBLL();
        private readonly sys_moduleServerBLL _ibll = new sys_moduleServerBLL();
        #region View
        /// <summary>
        /// 首页
        /// </summary>
        /// <returns></returns>
        //[ModuleAuthFilter(Name = "secRegist")]//过滤器
        public ActionResult Index()
        {
            if (Session["CODENAME"] == null)
                Response.Redirect("/login.aspx");
            ViewData["CODENAME"] = Session["CODENAME"];
            return View();
        }
        /// <summary>
        /// 角色权限
        /// </summary>
        /// <returns></returns>
        public ActionResult RoleAuth()
        {
            if (Session["CODENAME"] == null)
                Response.Redirect("/login.aspx");
            ViewData["CODENAME"] = Session["CODENAME"];
            return View();
        }
        /// <summary>
        /// 角色权限范围
        /// </summary>
        /// <returns></returns>
        public ActionResult RoleAuthRange()
        {
            if (Session["CODENAME"] == null)
                Response.Redirect("/login.aspx");
            ViewData["CODENAME"] = Session["CODENAME"];
            return View();
        }
        /// <summary>
        /// 用户角色
        /// </summary>
        /// <returns></returns>
        public ActionResult UserRole()
        {
            if (Session["CODENAME"] == null)
                Response.Redirect("/login.aspx");
            ViewData["CODENAME"] = Session["CODENAME"];
            return View();
        }
        #endregion
        #region Handler
        /// <summary>
        /// 获取列表
        /// </summary>
        /// <param name="startIndex">开始索引</param>
        /// <param name="limit">分页大小</param>
        /// <param name="search">搜索框的值</param>
        /// <param name="sortName">排序字段</param>
        /// <param name="sortOrder">排序方式</param>
        /// <returns></returns>
        [SqlKeyWordsFilter(Type = "Action")]//sql 防注入过滤器
        public JsonResult GetList(int startIndex, int limit, string search, string sortName, string sortOrder,string companyId, string opUser, string question,string beginRegCount_1, string beginRegCount_2, string beginDate_1, string beginDate_2)
        {
            StringBuilder where = new StringBuilder();
            where.Append("1=1");
            if (!(String.IsNullOrEmpty(opUser) || String.IsNullOrWhiteSpace(opUser)))
            {
                //search=Common.Common.string_Encrypt(search, "Dw9pVb9r");
                where.Append(string.Format(" And OperUser like '%{0}%'", opUser));
            }
            if (!(String.IsNullOrEmpty(beginDate_1) || String.IsNullOrWhiteSpace(beginDate_1)))
            {
                //search=Common.Common.string_Encrypt(search, "Dw9pVb9r");
                where.Append(string.Format(" And OperTime>='{0}'", beginDate_1));
            }
            if (!(String.IsNullOrEmpty(beginDate_2) || String.IsNullOrWhiteSpace(beginDate_2)))
            {
                //search=Common.Common.string_Encrypt(search, "Dw9pVb9r");
                where.Append(string.Format(" And OperTime<='{0}'", beginDate_2));
            }


            var list = _bll.GetModelList(0, 2000, where.ToString(), String.Format("{0} {1}", sortName, sortOrder));
            var result = from p in list
                         select new
                         {
                             p.GID,
                             CecrietStr = new JavaScriptSerializer().Deserialize<CecrietStr>(Common.Common.string_Decrypt(p.CompanySecretKey, "Dw9pVb9r")),
                             p.OperUser,
                             p.OperTime
                         };
            if (!(String.IsNullOrEmpty(search) || String.IsNullOrWhiteSpace(search)))
            {
                result = result.Where(p=>p.CecrietStr.Name.Contains(search));
            }
            if (!(String.IsNullOrEmpty(beginRegCount_1) || String.IsNullOrWhiteSpace(beginRegCount_1)))
            {
                result = result.Where(p => p.CecrietStr.Times>=Convert.ToInt32(beginRegCount_1));
            }
            if (!(String.IsNullOrEmpty(beginRegCount_2) || String.IsNullOrWhiteSpace(beginRegCount_2)))
            {
                result = result.Where(p => p.CecrietStr.Times <= Convert.ToInt32(beginRegCount_2));
            }
            if (!(String.IsNullOrEmpty(question) || String.IsNullOrWhiteSpace(question)))
            {
                result = result.Where(p => p.CecrietStr.ModHistory!=null&&p.CecrietStr.ModHistory.Contains(question));
            }
            var count = result.Count();//总数
            result = result.Skip(startIndex).Take(limit);
            return Json(new { total = count, rows = result });
        }
        /// <summary>
        /// 详细列表
        /// </summary>
        /// <returns></returns>
        public JsonResult GetDetailList(string parentId, string companyId, bool isroot)
        {
            StringBuilder where = new StringBuilder();
            if (isroot)
                where.Append("(PARENTID='0' or PARENTID='1') and TYPE<>1 ");
            else
                where.Append(string.Format("PARENTID='{0}'", parentId));

            var list = _ibll.GetModelList(where.ToString());
            var result = from p in list
                         select new
                         {
                             p.GID,
                             Name = p.DESCRIPTION,
                             Code = p.NAME,
                             Data = GetsecModel(p.GID, companyId),
                             p.PARENTID,
                             HasChild = _ibll.GetRecordCount(string.Format("PARENTID='{0}'", p.GID)) > 0
                         };
            return Json(new { total = list.Count, rows = result });
        }

        public object GetsecModel(string gid, string companyid)
        {
            var model = _mbll.GetModelList("IdenSecretkey='" + Common.Common.string_Encrypt(gid, "2cP46Gox") + "' AND PID='" + companyid + "'").FirstOrDefault();
            if (model != null)
                return Json(new
                {
                    SecModel = model,
                    SecrietStr = new JavaScriptSerializer().Deserialize<SecrietStr>(Common.Common.string_Decrypt(model.ModuleSecretkey, "2cP46Gox"))
                }).Data;
            return Json(new
            {
                SecModel = new sys_secModule(),
                SecrietStr = new SecrietStr()
                {
                    Id = null,
                    Name = null,
                    Times = null,
                    Enabled = null
                }
            }).Data;
        }
        /// <summary>
        /// 保存
        /// </summary>
        /// <param name="model"></param>
        /// <returns></returns>
        public JsonResult Save(Model.sys_secCompany model)
        {
            bool result;
            //加密算法{公司主键,公司名称，允许在线人数，是否启用}
            CecrietStr smodel = new CecrietStr();
            Regex reg = new Regex(@"(?<=Key:')[\w-]+(?=')");
            smodel.Id = reg.Match(Request["Name"]).Value;
            reg = new Regex(@"(?<=Value:').+(?=')");
            smodel.Name = reg.Match(Request["Name"]).Value;
            smodel.Times = Convert.ToInt32(Request["Times"]);
            smodel.Enabled = Request["Enabled"] != "0";
            smodel.MenuControl = Request["MenuControl"] != "0";
            if (String.IsNullOrEmpty(model.GID))
            {
                var toEncrypt = new JavaScriptSerializer().Serialize(smodel);
                var secretKey = Common.Common.string_Encrypt(toEncrypt, "Dw9pVb9r");

                model.GID = Guid.NewGuid().ToString();
                model.CompanySecretKey = secretKey;
                model.OperUser = Session["SHOWNAME"].ToString();
                model.OperTime = DateTime.Now;
                result = _bll.Add(model) > 0;
            } //新增
            else
            {
                //获取原数据
                var oldModel = _bll.GetModel(model.GID);
                smodel.ModHistory = new JavaScriptSerializer().Deserialize<CecrietStr>(Common.Common.string_Decrypt(oldModel.CompanySecretKey, "Dw9pVb9r")).ModHistory;
                var toEncrypt = new JavaScriptSerializer().Serialize(smodel);
                var secretKey = Common.Common.string_Encrypt(toEncrypt, "Dw9pVb9r");
                //类反射
                Type type = typeof(Model.sys_secCompany);
                PropertyInfo[] piArr = type.GetProperties();
                foreach (var pi in piArr)
                {
                    if (Array.IndexOf(Request.Params.AllKeys, pi.Name) < 0)
                        pi.SetValue(model, pi.GetValue(oldModel, null), null);
                }
                model.CompanySecretKey = secretKey;
                model.OperUser = Session["SHOWNAME"].ToString();
                model.OperTime = DateTime.Now;
                result = _bll.Update(model) > 0;

                //try
                //{

                //    var operUser = Session["SHOWNAME"].ToString();
                //    var list = _ibll.GetModelList("MODTYPE=0");//获取配置下的模块
                //    foreach (var item in list)
                //    {

                //        SecrietStr pmodel = new SecrietStr();
                //        pmodel.Id = item.GID;
                //        pmodel.Name = item.DESCRIPTION;
                //        pmodel.Times = smodel.Times;
                //        pmodel.Enabled =true;
                //        toEncrypt = new JavaScriptSerializer().Serialize(pmodel);
                //        secretKey = Common.Common.string_Encrypt(toEncrypt, "2cP46Gox");

                //        sys_secModule detailmodel = new sys_secModule();
                //        detailmodel.GID = Guid.NewGuid().ToString();
                //        detailmodel.ModuleSecretkey = secretKey;
                //        detailmodel.OperUser = operUser;
                //        detailmodel.OperTime = DateTime.Now;
                //        detailmodel.IdenSecretkey = Common.Common.string_Encrypt(pmodel.Id, "2cP46Gox");
                //        detailmodel.PID = model.GID;
                //        var ymodel = _mbll.GetModelList("IdenSecretkey='" +
                //                                        Common.Common.string_Encrypt(pmodel.Id, "2cP46Gox") + "' AND PID='" +
                //                                        model.GID + "'").FirstOrDefault();
                //        if (ymodel != null)
                //        {
                //            detailmodel.GID = ymodel.GID;
                //            _mbll.Update(detailmodel);
                //        }
                //        else
                //            _mbll.Add(detailmodel);
                //    }

                //}
                //catch (Exception e)
                //{
                //    result = false;
                //}


            } //修改
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        /// <summary>
        /// 保存从实例
        /// </summary>
        /// <param name="model"></param>
        /// <returns></returns>
        public JsonResult SaveDetail(Model.sys_secModule model)
        {
            bool result;
            //加密算法{模块主键，模块名称，允许使用人数，是否启用}
            SecrietStr smodel = new SecrietStr();
            smodel.Id = Request["SecId"];
            smodel.Name = Request["Name"];
            smodel.Times = Convert.ToInt32(Request["Times"]);
            smodel.Enabled = Request["Enabled"] != "0";
            var toEncrypt = new JavaScriptSerializer().Serialize(smodel);
            var secretKey = Common.Common.string_Encrypt(toEncrypt, "2cP46Gox");
            if (String.IsNullOrEmpty(model.GID))
            {
                model.GID = Guid.NewGuid().ToString();
                model.ModuleSecretkey = secretKey;
                model.OperUser = Session["SHOWNAME"].ToString();
                model.OperTime = DateTime.Now;
                model.IdenSecretkey = Common.Common.string_Encrypt(smodel.Id, "2cP46Gox");
                result = _mbll.Add(model) > 0;
            } //新增
            else
            {
                //获取原数据
                var oldModel = _mbll.GetModel(model.GID);
                //类反射
                Type type = typeof(Model.sys_secModule);
                PropertyInfo[] piArr = type.GetProperties();
                foreach (var pi in piArr)
                {
                    if (Array.IndexOf(Request.Params.AllKeys, pi.Name) < 0)
                        pi.SetValue(model, pi.GetValue(oldModel, null), null);
                }
                model.ModuleSecretkey = secretKey;
                model.IdenSecretkey = Common.Common.string_Encrypt(smodel.Id, "2cP46Gox");
                model.OperUser = Session["SHOWNAME"].ToString();
                model.OperTime = DateTime.Now;
                result = _mbll.Update(model) > 0;
            } //修改
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        /// <summary>
        /// 删除
        /// </summary>
        /// <param name="ids"></param>
        /// <returns></returns>
        public JsonResult Delete(string ids)
        {
            bool result = _bll.DeleteListWhere(string.Format("GID in({0})", ids)) > 0;
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        /// <summary>
        /// 删除
        /// </summary>
        /// <param name="ids"></param>
        /// <returns></returns>
        public JsonResult DeleteDetail(string ids)
        {
            bool result = _mbll.DeleteListWhere(string.Format("GID in({0})", ids)) > 0;
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        /// <summary>
        /// 懒加载公司信息
        /// </summary>
        /// <param name="pageIndex"></param>
        /// <param name="pageSize"></param>
        /// <param name="query"></param>
        /// <returns></returns>
        public JsonResult GetCompanyList(int pageIndex, int pageSize, string query)
        {
            StringBuilder where = new StringBuilder();
            if (!String.IsNullOrEmpty(query))
                where.Append(string.Format("SHORTNAME LIKE '%{0}%' OR CODENAME LIKE '%{0}%' OR DESCRIPTION LIKE '%{0}%'", query));
            var list = _cbll.GetModelList(pageIndex, pageSize, where.ToString(), "SHORTNAME collate Chinese_PRC_CS_AS_KS_WS");
            var total = _cbll.GetRecordCount(where.ToString());
            var result = from p in list
                         select new
                         {
                             id = "{Key:'" + p.GID + "', Value:'" + p.SHORTNAME + "'}",
                             text = p.SHORTNAME
                         };
            return Json(new { data = result, total }, JsonRequestBehavior.AllowGet);
        }
        /// <summary>
        /// 获取角色权限范围列表
        /// </summary>
        /// <returns></returns>
        public JsonResult GetAuthRangeList(string roleid, string sortOrder, string sortName, string search)
        {
            user_authority_infoBLL ibll = new user_authority_infoBLL();
            StringBuilder where = new StringBuilder();
            where.Append("ISDELETE=0");
            if (!(String.IsNullOrEmpty(search) || String.IsNullOrWhiteSpace(search)))
                where.Append(string.Format(" And DESCRIPTION like '%{0}%'", search));

            var list = ibll.GetModelList(0,9999,where.ToString(), String.Format("{0} {1}", sortName, sortOrder));

            //var list = ibll.GetModelList(string.Format(where + " ORDER BY {0} {1}", sortName, sortOrder));
            var result = from p in list
                         select new
                         {
                             AUTHORITYID = p.GID,
                             NAME = p.DESCRIPTION,
                             VISIBLERANGE = 4,
                             OPERATERANGE = 4
                         };
            if (!string.IsNullOrEmpty(roleid))
            {
                user_authority_rangeBLL rbll = new user_authority_rangeBLL();
                var list1 = rbll.GetModelList("USERID='" + roleid + "'");
                var update = from p in list1
                             select new
                             {
                                 p.GID,
                                 p.AUTHORITYID,
                                 p.VISIBLERANGE,
                                 p.OPERATERANGE,
                                 VISIBLERELATION = GetRelation(p.VISIBLERANGE, p.AUTHORITYID, roleid,"vs"),
                                 OPERATERELATION = GetRelation(p.OPERATERANGE, p.AUTHORITYID, roleid,"op")
                             };
                return Json(new { result, update });
            }
            return Json(new { result, update = new ArrayList() });
        }
        private string GetRelation(int? type, string authority, string roleid,string rangtype)
        {
            var israngstr = " and OPERATERANGE=1 ";
            if (rangtype =="vs") israngstr = " and VISIBLERANGE=1 ";

            JavaScriptSerializer json = new JavaScriptSerializer();
            user_authority_range_companyBLL rcbll = new user_authority_range_companyBLL();
            user_authority_range_opBLL robll = new user_authority_range_opBLL();
            var obj = new Object();
            if (type == 5)
            {
                obj = from q in rcbll.GetModelList("USERID='" + roleid + "' AND AUTHORITYID='" + authority + "'"+ israngstr)
                      select new
                      {
                          id = q.COMPANYID,
                          name = "comp"
                      };
            }
            if (type == 6)
            {
                obj = from q in robll.GetModelList("USERID='" + roleid + "' AND AUTHORITYID='" + authority + "'"+ israngstr)
                      select new
                      {
                          id = q.OPID,
                          name = "user"
                      };
            }
            return json.Serialize(obj);
        }
        /// <summary>
        /// 获取角色下的权限
        /// </summary>
        /// <param name="pid"></param>
        /// <returns></returns>
        public JsonResult GetRoleModuleList(string pid)
        {
            sys_moduleBLL bll = new sys_moduleBLL();
            StringBuilder where = new StringBuilder();
            var list = bll.GetModelList("GID IN (SELECT AuthorityID FROM sys_roleauth WHERE PID='" + pid + "' AND TYPE=1)");
            var result = from p in list
                         select new
                         {
                             id = p.GID,
                             name = p.DESCRIPTION,
                             pId = p.PARENTID
                         };
            return Json(result);
        }
        /// <summary>
        /// 批量配置模块
        /// </summary>
        /// <param name="companyid"></param>
        /// <param name="modtype"></param>
        /// <param name="enabled"></param>
        /// <returns></returns>
        public JsonResult SetMod(string companyid, int modtype, bool enabled)
        {
            var result = true;
            try
            {
                var cmodel = _bll.GetModel(companyid);
                CecrietStr cModel = new JavaScriptSerializer().Deserialize<CecrietStr>(
                    Common.Common.string_Decrypt(cmodel.CompanySecretKey, "Dw9pVb9r"));
                var operUser = Session["SHOWNAME"].ToString();
                var list = _ibll.GetModelList("MODTYPE=" + modtype);//获取配置下的模块
                foreach (var item in list)
                {

                    SecrietStr pmodel = new SecrietStr();
                    pmodel.Id = item.GID;
                    pmodel.Name = item.DESCRIPTION;
                    pmodel.Times = cModel.Times;
                    pmodel.Enabled = enabled;
                    var toEncrypt = new JavaScriptSerializer().Serialize(pmodel);
                    var secretKey = Common.Common.string_Encrypt(toEncrypt, "2cP46Gox");

                    sys_secModule model = new sys_secModule();
                    model.GID = Guid.NewGuid().ToString();
                    model.ModuleSecretkey = secretKey;
                    model.OperUser = operUser;
                    model.OperTime = DateTime.Now;
                    model.IdenSecretkey = Common.Common.string_Encrypt(pmodel.Id, "2cP46Gox");
                    model.PID = companyid;
                    var ymodel = _mbll.GetModelList("IdenSecretkey='" +
                                                    Common.Common.string_Encrypt(pmodel.Id, "2cP46Gox") + "' AND PID='" +
                                                    companyid + "'").FirstOrDefault();
                    if (ymodel != null)
                    {
                        model.GID = ymodel.GID;
                        _mbll.Update(model);
                    }
                    else
                        _mbll.Add(model);
                }
                //设置模块历史
                var hisList = cModel.ModHistory;
                List<string> modHis = new List<string>();
                if (!string.IsNullOrEmpty(hisList))
                    modHis = hisList.Split(',').ToList();
                if (enabled)
                {
                    if (!modHis.Contains(modtype.ToString()))
                        modHis.Add(modtype.ToString());
                }
                else
                    modHis.Remove(modtype.ToString());

                cModel.ModHistory = modHis.Count > 0 ? string.Join(",", modHis) : "";
                var cecretKey = new JavaScriptSerializer().Serialize(cModel);
                cmodel.CompanySecretKey = Common.Common.string_Encrypt(cecretKey, "Dw9pVb9r");
                _bll.Update(cmodel);
            }
            catch (Exception e)
            {
                result = false;
            }
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        /// <summary>
        /// 获取导出sql
        /// </summary>
        /// <param name="ids"></param>
        /// <returns></returns>
        public JsonResult GetSql(string ids)
        {
            var list = _bll.GetModelList(string.Format("GID in({0})", ids));
            return Json(list);
        }
        /// <summary>
        /// 懒加载权限信息
        /// </summary>
        /// <param name="pageIndex"></param>
        /// <param name="pageSize"></param>
        /// <param name="query"></param>
        /// <returns></returns>
        public JsonResult GetAuthList(int pageIndex, int pageSize, string query)
        {
            sys_moduleBLL ibll = new sys_moduleBLL();
            StringBuilder where = new StringBuilder();
            if (!String.IsNullOrEmpty(query))
                where.Append(string.Format("NAME LIKE '%{0}%' OR DESCRIPTION LIKE '%{0}%'", query));
            var list = ibll.GetModelList(pageIndex, pageSize, where.ToString(), "DESCRIPTION collate Chinese_PRC_CS_AS_KS_WS");
            var total = ibll.GetRecordCount(where.ToString());
            var result = from p in list
                         select new
                         {
                             id = p.GID,
                             text = p.DESCRIPTION
                         };
            return Json(new { data = result, total }, JsonRequestBehavior.AllowGet);
        }
        /// <summary>
        /// 获取角色列表
        /// </summary>
        /// <param name="startIndex"></param>
        /// <param name="limit"></param>
        /// <param name="search"></param>
        /// <param name="sortName"></param>
        /// <param name="sortOrder"></param>
        /// <returns></returns>
        public JsonResult GetRoleList(int startIndex, int limit, string search, string sortName, string sortOrder)
        {
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            StringBuilder where = new StringBuilder();
            where.Append("Type=0");
            if (!(String.IsNullOrEmpty(search) || String.IsNullOrWhiteSpace(search)))
                where.Append(string.Format(" And Name like '%{0}%'", search));


             var list = mbll.GetModelList(startIndex, limit, where.ToString(), String.Format("{0} {1}", sortName, sortOrder));
            var count = mbll.GetRecordCount(where.ToString());//总数
            return Json(new { total = count, rows = list });
        }
        /// <summary>
        /// 保存角色
        /// </summary>
        /// <param name="model"></param>
        /// <returns></returns>
        public JsonResult SaveRole(sys_roleauth model)
        {
            bool result;
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            if (String.IsNullOrEmpty(model.GID))
            {
                model.GID = Guid.NewGuid().ToString();
                result = mbll.Add(model) > 0;
            } //新增
            else
            {
                //获取原数据
                var oldModel = mbll.GetModel(model.GID);
                //类反射
                Type type = typeof(Model.sys_roleauth);
                PropertyInfo[] piArr = type.GetProperties();
                foreach (var pi in piArr)
                {
                    if (Array.IndexOf(Request.Params.AllKeys, pi.Name) < 0)
                        pi.SetValue(model, pi.GetValue(oldModel, null), null);
                }
                result = mbll.Update(model) > 0;
            } //修改

            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        /// <summary>
        /// 删除角色
        /// </summary>
        /// <param name="ids"></param>
        /// <returns></returns>
        public JsonResult RoleAuthDelete(string ids)
        {
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            user_authority_rangeBLL rbll = new user_authority_rangeBLL();
            user_authority_range_companyBLL rcbll = new user_authority_range_companyBLL();
            user_authority_range_opBLL robll = new user_authority_range_opBLL();
            bool result = mbll.DeleteListWhere(string.Format("GID in({0})", ids)) > 0;
            user_roleBLL ubll = new user_roleBLL();
            //删除关系表数据
            bool result1 = ubll.DeleteListWhere(string.Format("ROLEID in({0})", ids)) > 0;
            //删除权限范围角色权限关系数据
            bool result2 = rbll.DeleteListWhere(string.Format("USERID in({0})", ids)) > 0;
            //删除公司关联表数据
            bool result3 = rcbll.DeleteListWhere(string.Format("USERID in({0})", ids)) > 0;
            //删除人员关联表数据
            bool result4 = robll.DeleteListWhere(string.Format("USERID in({0})", ids)) > 0;
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }

        /// <summary>
        /// 复制新建角色
        /// </summary>
        /// <param name="ids"></param>
        /// <param name="newname"></param>
        /// <returns></returns>
        public JsonResult CopyRole(sys_roleauth model)
        {
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            user_authority_rangeBLL rbll = new user_authority_rangeBLL();
            user_authority_range_companyBLL rcbll = new user_authority_range_companyBLL();
            user_authority_range_opBLL robll = new user_authority_range_opBLL();

            bool result = false;

            var role = mbll.GetModel(model.GID); ;
            role.GID = Guid.NewGuid().ToString();
            role.Name = model.Name;
            //return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
            
            //复制新增一条角色信息
            result=mbll.Add(role)>0;

            var oldroleid = model.GID;
            if (result)
            {
                var rolelist = mbll.GetModelList(string.Format("PID= '{0}' ", oldroleid));
                foreach (var item in rolelist)
                {
                    item.GID = Guid.NewGuid().ToString();
                    item.PID = role.GID;
                    result = mbll.Add(item) > 0;
                    if (!result) break;
                }
            }

            if (result)
            {
                //复制增加 权限范围角色权限关系数据
                var authority_rangelist = rbll.GetModelList(string.Format("USERID in('{0}')", oldroleid));
                foreach (var item in authority_rangelist)
                {
                    item.GID = Guid.NewGuid().ToString();
                    item.USERID = role.GID;
                    result=rbll.Add(item)> 0;
                    if (!result) break;
                }
            }
            
            //公司关联表数据
            if (result)
            {
                var user_authority_range_companylist = rcbll.GetModelList(string.Format("USERID in('{0}')", oldroleid));
                foreach (var item in user_authority_range_companylist)
                {
                    item.GID = Guid.NewGuid().ToString();
                    item.USERID = role.GID;
                    result = rcbll.Add(item)>0;
                    if (!result) break;
                }
            }
            

            //人员关联表数据
            if (result)
            {
                var user_authority_range_oplist = robll.GetModelList(string.Format("USERID in('{0}')", oldroleid));
                foreach (var item in user_authority_range_oplist)
                {
                    item.GID = Guid.NewGuid().ToString();
                    item.USERID = role.GID;
                    result = robll.Add(item)>0;
                    if (!result) break;
                }
            }

            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }

        /// <summary>
        /// 删除权限
        /// </summary>
        /// <param name="ids"></param>
        /// <returns></returns>
        public JsonResult RoleAuthDelete2(string roleid, string ids)
        {
            var module = new Modules.ModuleGridSource();
            user_roleBLL ubll = new user_roleBLL();
            sys_roleauthBLL mbll = new sys_roleauthBLL();

            bool result = mbll.DeleteListWhere(string.Format("PID ='{0}' AND AuthorityID IN({1})", roleid, ids)) > 0;
            //所有拥有此角色的人员删除该权限
            var list = ubll.GetModelList("ROLEID='" + roleid + "'");
            string[] delItems = ids.Split(',');
            foreach (var item in delItems)
            {
                foreach (var p in list)
                    module.RemoveUserModule(p.USERID, item.Replace("\'", ""));
            }
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        /// <summary>
        /// 获取人员树型
        /// </summary>
        /// <returns></returns>
        public JsonResult GetUsertreeView()
        {
            StringBuilder userBuilder = new StringBuilder();
            IList<CompanyEntity> companyEntities = new List<CompanyEntity>();
            CompanyDA companyDA = new CompanyDA();

            companyEntities = companyDA.GetAllCompany();
            if (companyEntities.Count > 0)
            {
                userBuilder.Append("[");
                for (int k = 0; k < companyEntities.Count; k++)
                {
                    if (k == 0)
                    {
                        userBuilder.Append("{id:\"" + companyEntities[k].GID + "\",");
                    }
                    else
                    {
                        userBuilder.Append(",{id:\"" + companyEntities[k].GID + "\",");
                    }
                    userBuilder.Append("name:\"" + companyEntities[k].NAME + "\",nocheck:false");
                    IList<SysDeptEntity> sysDeptEntities = new List<SysDeptEntity>();

                    sysDeptEntities = new SysDeptDA().GetDepartmentByCompanyID(companyEntities[k].GID);

                    if (sysDeptEntities.Count > 0)
                    {
                        userBuilder.Append(",childred:[");
                        for (int j = 0; j < sysDeptEntities.Count; j++)
                        {
                            userBuilder.Append("{id:\"" + sysDeptEntities[j].GID + "\",");
                            userBuilder.Append("name:\"" + sysDeptEntities[j].DEPTNAME + "\",nocheck:false");
                            IList<UserEntity> userEntities = new List<UserEntity>();

                            userEntities = new UserDA().GetUserByCompanyAndDept(companyEntities[k].GID, sysDeptEntities[j].DEPTNAME);

                            if (userEntities.Count > 0)
                            {
                                userBuilder.Append(",childred:[");
                                for (int i = 0; i < userEntities.Count; i++)
                                {
                                    userBuilder.Append("{id:\"" + userEntities[i].Gid + "\",");
                                    userBuilder.Append("name:\"" + userEntities[i].ShowName + "\"");

                                    if (i == userEntities.Count - 1)
                                    {
                                        userBuilder.Append("}");
                                    }
                                    else
                                    {
                                        userBuilder.Append("},");
                                    }

                                }
                                userBuilder.Append("]");
                            }

                            if (j == sysDeptEntities.Count - 1)
                            {
                                userBuilder.Append("}");
                            }
                            else
                            {
                                userBuilder.Append("},");
                            }
                        }
                        userBuilder.Append("]");
                    }
                    userBuilder.Append("}");

                }
                userBuilder.Append("]");
            }
            return Json(userBuilder.ToString());
        }
        /// <summary>
        /// 设置角色
        /// </summary>
        /// <param name="userid"></param>
        /// <param name="roleid"></param>
        /// <param name="type"></param>
        /// <returns></returns>
        public JsonResult SetRole(string userid, string roleid, int type)
        {
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            var authlist = mbll.GetModelList("Type=1 And PID ='" + roleid + "'");
            var module = new Modules.ModuleGridSource();
            string msg = "";
            try
            {
                foreach (var item in authlist)
                {
                    if (type == 0)
                    {
                        var m = module.RemoveUserModule(userid, item.AuthorityID);
                        if (m != "1") msg += m + "<br/>";
                    }
                    else
                    {
                        var m = module.AddUserModule(userid, item.AuthorityID);
                        if (m != "1") msg += m + "<br/>";
                    }
                }
                //绑定用户角色表
                //dosomething
                return Json(msg);
            }
            catch (Exception se)
            {
                return Json(se.Message);
            }
        }
        /// <summary>
        /// 设置权限范围
        /// </summary>
        /// <param name="userid"></param>
        /// <param name="roleid"></param>
        /// <param name="type"></param>
        /// <param name="view"></param>
        /// <param name="opera"></param>
        /// <param name="view_check"></param>
        /// <param name="opera_check"></param>
        /// <returns></returns>
        public void SetRange(string userid, string roleid, int type)
        {
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            user_authority_rangeBLL arbll = new user_authority_rangeBLL();
            user_authority_range_companyBLL rcbll = new user_authority_range_companyBLL();
            user_authority_range_opBLL robll = new user_authority_range_opBLL();
            arbll.DeleteListWhere("USERID='" + userid + "' ");
            //删除之前的配置（公司）
            rcbll.DeleteListWhere("USERID='" + userid + "' ");
            //删除之前的配置（人员）
            robll.DeleteListWhere("USERID='" + userid + "' ");
            user_roleBLL ubll = new user_roleBLL();
            var listrole = ubll.GetModelList("USERID='" + userid + "'");
            foreach (var role in listrole)
            {
                var list = arbll.GetModelList("USERID='" + role.ROLEID + "'");
                foreach (var item in list)
                {
                    SetAuthRange(userid, item.AUTHORITYID, item.VISIBLERANGE, item.OPERATERANGE, role.ROLEID);
                }
            }


            //if (type == 0) //移除角色
            //{
            //    //删除权限范围 type=0
            //    arbll.DeleteListWhere("USERID='" + userid + "' AND AUTHORITYID in (SELECT AUTHORITYID FROM user_authority_range WHERE USERID='" + roleid + "')");
            //    //删除之前的配置（公司）
            //    rcbll.DeleteListWhere("USERID='" + userid + "' AND AUTHORITYID in (SELECT AUTHORITYID FROM user_authority_range WHERE USERID='" + roleid + "')");
            //    //删除之前的配置（人员）
            //    robll.DeleteListWhere("USERID='" + userid + "' AND AUTHORITYID in (SELECT AUTHORITYID FROM user_authority_range WHERE USERID='" + roleid + "')");
            //    user_roleBLL ubll = new user_roleBLL();
            //    var listrole = ubll.GetModelList("USERID='" + userid + "'");
            //    foreach (var role in listrole)
            //    {
            //        var list = arbll.GetModelList("USERID='" + role.ROLEID + "'");
            //        foreach (var item in list)
            //        {
            //            SetAuthRange(userid, item.AUTHORITYID, item.VISIBLERANGE, item.OPERATERANGE, roleid);
            //        }
            //    }

            //}
            //if (type == 1)//添加角色
            //{
            //    //增加权限范围
            //    var list = arbll.GetModelList("USERID='" + roleid + "'");
            //    foreach (var item in list)
            //    {
            //        SetAuthRange(userid, item.AUTHORITYID, item.VISIBLERANGE, item.OPERATERANGE, roleid);
            //    }
            //}
        }
        /// <summary>
        /// 设置单独权限的范围
        /// </summary>
        private void SetAuthRange(string userid, string authority, int? view, int? opera, string roleid)
        {
            user_authority_rangeBLL arbll = new user_authority_rangeBLL();
            var model = arbll.GetModelList("USERID='" + userid + "' AND AUTHORITYID='" + authority + "'").FirstOrDefault();
            if (model != null)
            {
                if (model.VISIBLERANGE == 5 || view == 5)
                    model.VISIBLERANGE = 5;
                else if (model.VISIBLERANGE == 6 || view == 6)
                    model.VISIBLERANGE = 6;
                else if (model.VISIBLERANGE >= view)
                    model.VISIBLERANGE = view;

                if (model.OPERATERANGE == 5 || opera == 5)
                    model.OPERATERANGE = 5;
                else if (model.OPERATERANGE == 6 || opera == 6)
                    model.OPERATERANGE = 6;
                else if (model.OPERATERANGE >= opera)
                    model.OPERATERANGE = opera;
                model.MODIFIEDTIME = DateTime.Now;
                model.MODIFIEDUSER = Session["USERID"].ToString();
                arbll.Update(model);
            }
            else
            {
                model = new user_authority_range();
                model.GID = Guid.NewGuid().ToString();
                model.USERID = userid;
                model.AUTHORITYID = authority;
                model.VISIBLERANGE = view;
                model.OPERATERANGE = opera;
                model.CREATEUSER = Session["USERID"].ToString();
                model.CREATETIME = DateTime.Now;
                arbll.Add(model);
            }
            var data_view = GetRelation(model.VISIBLERANGE, model.AUTHORITYID, roleid,"vs");
            var data_opera = GetRelation(model.OPERATERANGE, model.AUTHORITYID, roleid,"op");
            SetCompUser(model.VISIBLERANGE, model.OPERATERANGE, model.AUTHORITYID, model.USERID, data_view, data_opera);
        }
        public void SetCompanyRange(string authorityid, string userid, int type, string list)
        {
            //var israngstr = " and OPERATERANGE=1 ";
            //if (type == 0) israngstr = " and VISIBLERANGE=1 ";
            user_authority_range_companyBLL rcbll = new user_authority_range_companyBLL();
            var plist = new JavaScriptSerializer().Deserialize<List<modeuleClass>>(list);
            foreach (var p in plist)
            {
                var umodel = rcbll.GetModelList("USERID='" + userid + "' AND AUTHORITYID='" + authorityid + "' AND COMPANYID='" + p.id + "'").FirstOrDefault();
                if (umodel != null)
                {
                    if (type == 0)
                        umodel.VISIBLERANGE = 1;
                    else
                        umodel.OPERATERANGE = 1;
                    umodel.MODIFIEDTIME = DateTime.Now;
                    umodel.MODIFIEDUSER = Session["USERID"].ToString();
                    rcbll.Update(umodel);
                }
                else
                {
                    umodel = new user_authority_range_company();
                    umodel.GID = Guid.NewGuid().ToString();
                    umodel.USERID = userid;
                    umodel.AUTHORITYID = authorityid;
                    umodel.COMPANYID = p.id;
                    if (type == 0)
                    {
                        umodel.VISIBLERANGE = 1;
                        umodel.OPERATERANGE = 0;
                    }
                    else
                    {
                        umodel.VISIBLERANGE = 0;
                        umodel.OPERATERANGE = 1;
                    }
                    umodel.CREATETIME = DateTime.Now;
                    umodel.CREATEUSER = Session["USERID"].ToString();
                    rcbll.Add(umodel);
                }

            }
        }
        /// <summary>
        /// 保存角色权限配置   
        /// </summary>
        /// type:0 - 角色权限  1：角色权限范围
        /// <returns></returns> 
        public void SetUserRange(string authorityid, string userid, int type, string list)
        {
            //var sqlstr = " update user_authority_range_op set OPERATERANGE=0 where USERID = '" + userid + "' AND AUTHORITYID = '" + authorityid + "'";
            //if (type == 0) sqlstr = " update user_authority_range_op set VISIBLERANGE=0 where USERID = '" + userid + "' AND AUTHORITYID = '" + authorityid + "'";

            //var _r = BasicDataRefDAL.ExecSql(sqlstr);
            user_authority_range_opBLL robll = new user_authority_range_opBLL();

            var omodellist = robll.GetModelList("USERID='" + userid + "' AND AUTHORITYID='" + authorityid + "'");
            var qlist = new JavaScriptSerializer().Deserialize<List<modeuleClass>>(list);
            foreach (var p in qlist)
            {
                var omodel = omodellist.Find(t => t.OPID == p.id);
                if (omodel != null)
                {
                    if (type == 0)
                        omodel.VISIBLERANGE = 1;
                    else
                        omodel.OPERATERANGE = 1;
                    omodel.MODIFIEDTIME = DateTime.Now;
                    omodel.MODIFIEDUSER = Session["USERID"].ToString();
                    robll.Update(omodel);
                }
                else
                {
                    omodel = new user_authority_range_op();
                    omodel.GID = Guid.NewGuid().ToString();
                    omodel.USERID = userid;
                    omodel.AUTHORITYID = authorityid;
                    omodel.OPID = p.id;
                    if (type == 0)
                    {
                        omodel.VISIBLERANGE = 1;
                        omodel.OPERATERANGE = 0;
                    }
                    else
                    {
                        omodel.VISIBLERANGE = 0;
                        omodel.OPERATERANGE = 1;
                    }
                    omodel.CREATETIME = DateTime.Now;
                    omodel.CREATEUSER = Session["USERID"].ToString();
                    robll.Add(omodel);
                }

            }
        }


        /// <summary>
        /// 角色添加权限
        /// </summary>
        /// <param name="roleid"></param>
        /// <param name="modulelist"></param>
        /// <returns></returns>
        public JsonResult SaveRoleAuth(string roleid, string modulelist)
        {
            var module = new Modules.ModuleGridSource();
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            user_roleBLL ubll = new user_roleBLL();
            try
            {
                var data = new JavaScriptSerializer().Deserialize<List<modeuleClass>>(modulelist);
                var list = ubll.GetModelList("ROLEID='" + roleid + "'");

                //20200225 首先检查拥有该角色的所有人 能否获得该权限范围
                var useridlist = "";
                foreach (var user in list) {
                    if (useridlist != "") useridlist += ",";
                    useridlist += user.GID;
                }

                var checkresult = SysUserDAL.CheckOPRange(data, useridlist);
                if (!checkresult.Success) {
                    return Json(new { success = false, msg = checkresult.Message });
                }

                foreach (var item in data)
                {
                    sys_roleauth model = new sys_roleauth();
                    model.GID = Guid.NewGuid().ToString();
                    model.AuthorityID = item.id;//模块id
                    model.Name = item.name;
                    model.PID = roleid;
                    model.Type = 1;//一般权限
                    mbll.Add(model);
                    //所有拥有此角色的人员添加该权限
                    
                    foreach (var p in list)
                        module.AddUserModule(p.USERID, item.id);
                }
                return Json(new { success = true });
            }
            catch (Exception se)
            {
                return Json(new { success = false, msg = se.Message });
            }
        }
        //获取全部角色
        public JsonResult GetRoleView()
        {
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            StringBuilder where = new StringBuilder();
            where.Append("Type=0");
            var list = mbll.GetModelList(where.ToString());
            var result = from p in list
                         select new
                         {
                             id = p.GID,
                             name = p.Name
                         };
            return Json(result);
        }
        /// <summary>
        /// 获取人员对应的角色
        /// </summary>
        /// <param name="userid"></param>
        /// <returns></returns>
        public JsonResult GetUserRoleChecked(string userid)
        {
            sys_roleauthBLL mbll = new sys_roleauthBLL();
            StringBuilder where = new StringBuilder();
            where.Append(string.Format("Type=0 and GID in (SELECT ROLEID FROM USER_ROLE WHERE USERID ='{0}')", userid));
            var list = mbll.GetModelList(where.ToString());
            var result = from p in list
                         select new
                         {
                             id = p.GID,
                             name = p.Name
                         };
            return Json(result);
        }
        /// <summary>
        /// 保存用户角色
        /// </summary>
        /// <param name="userid"></param>
        /// <param name="rolelist"></param>
        /// <returns></returns>
        public JsonResult SaveUserRole(string userid, string rolelist, int type)
        {
            user_roleBLL ubll = new user_roleBLL();
            try
            {
                var data = new JavaScriptSerializer().Deserialize<List<modeuleClass>>(rolelist);
                foreach (var item in data)
                {
                    user_role model = new user_role();
                    model.GID = Guid.NewGuid().ToString();
                    model.ROLEID = item.id;
                    model.USERID = userid;
                    switch (type)
                    {
                        case 1://添加角色
                            ubll.Add(model);
                            //加权限
                            SetRole(userid, item.id, 1);
                            ////修改权限范围
                            //SetRange(userid, item.id, 1);
                            break;
                        case 0://移除角色
                            ubll.DeleteListWhere(string.Format("USERID='{0}' AND ROLEID='{1}'", userid, item.id));
                            ////移除权限
                            SetRole(userid, item.id, 0);
                            ////恢复默认权限范围
                            //SetRange(userid, item.id, 0);
                            break;

                    }
                }



                SetRange(userid,"", 1);
                return Json(new { success = true });
            }
            catch (Exception se)
            {
                return Json(new { success = false, msg = se.Message });
            }
        }
        /// <summary>
        /// 获取公司列表
        /// </summary>
        /// <returns></returns>
        public JsonResult GetCompanyList1()
        {
            companyBLL cbll = new companyBLL();
            var result = from p in cbll.GetModelList("")
                         select new
                         {
                             id = p.GID,
                             name = p.NAME
                         };
            return Json(result);
        }
        /// <summary>
        /// 保存权限范围 
        /// </summary>
        /// <returns></returns>
        public JsonResult SaveAuthByRole(user_authority_range model)
        {
            user_authority_rangeBLL rbll = new user_authority_rangeBLL();
            bool result;
            if (String.IsNullOrEmpty(model.GID))
            {
                model.GID = Guid.NewGuid().ToString();
                model.CREATEUSER = Session["SHOWNAME"].ToString();
                model.CREATETIME = DateTime.Now;
                result = rbll.Add(model) > 0;
            } //新增
            else
            {
                //获取原数据
                var oldModel = rbll.GetModel(model.GID);
                //类反射
                Type type = typeof(Model.user_authority_range);
                PropertyInfo[] piArr = type.GetProperties();
                foreach (var pi in piArr)
                {
                    if (Array.IndexOf(Request.Params.AllKeys, pi.Name) < 0)
                        pi.SetValue(model, pi.GetValue(oldModel, null), null);
                }
                model.MODIFIEDUSER = Session["SHOWNAME"].ToString();
                model.MODIFIEDTIME = DateTime.Now;
                result = rbll.Update(model) > 0;
            } //修改
            //设置角色对应的权限范围
            var data_view = Request["VISIBLERELATION"];
            var data_opera = Request["OPERATERELATION"];
            SetCompUser(model.VISIBLERANGE, model.OPERATERANGE, model.AUTHORITYID, model.USERID, data_view, data_opera);
            //获取该角色下的人员并修改权限范围
            user_roleBLL bll = new user_roleBLL();
            var list = bll.GetModelList("ROLEID='" + model.USERID + "'");
            foreach (var item in list)
                SetAuthRange(item.USERID, model.AUTHORITYID, model.VISIBLERANGE, model.OPERATERANGE, model.USERID);
            return Json(new { success = result, message = result ? "操作成功" : "操作失败" });
        }
        private void SetCompUser(int? view, int? opera, string authority, string userid, string data_view, string data_opera)
        {
            //可视范围(保存人员)
            if (view == 5)
                SetCompanyRange(authority, userid, 0, data_view);
            if (view == 6)
                SetUserRange(authority, userid, 0, data_view);
            //操作范围(保存人员)
            if (opera == 5)
                SetCompanyRange(authority, userid, 1, data_opera);
            if (opera == 6)
                SetUserRange(authority, userid, 1, data_opera);
        }
        /// <summary>
        /// 保存权限范围
        /// </summary>
        /// <returns></returns>
        public JsonResult SaveAuthByRoleMulti(string jsonStr)
        {
            var jsonObj = JsonConvert.DeserializeObject<List<user_authority_range_multi_set>>(jsonStr);

            user_authority_rangeBLL rbll = new user_authority_rangeBLL();
            bool result;
            foreach (var model in jsonObj)
            {
                if (String.IsNullOrEmpty(model.GID))
                {
                    model.GID = Guid.NewGuid().ToString();
                    model.CREATEUSER = Session["SHOWNAME"].ToString();
                    model.CREATETIME = DateTime.Now;
                    result = rbll.Add(model) > 0;
                } //新增
                else
                {
                    //获取原数据
                    var oldModel = rbll.GetModel(model.GID);
                    ////类反射
                    //Type type = typeof(Model.user_authority_range);
                    //PropertyInfo[] piArr = type.GetProperties();
                    //foreach (var pi in piArr)
                    //{
                    //    if (Array.IndexOf(Request.Params.AllKeys, pi.Name) < 0)
                    //        pi.SetValue(model, pi.GetValue(oldModel, null), null);
                    //}
                    model.CREATETIME = oldModel.CREATETIME;
                    model.CREATEUSER = oldModel.CREATEUSER;
                    model.MODIFIEDUSER = Session["SHOWNAME"].ToString();
                    model.MODIFIEDTIME = DateTime.Now;
                    result = rbll.Update(model) > 0;
                } //修改
                  //设置角色对应的权限范围
                var data_view = model.VISIBLERELATION;
                var data_opera = model.OPERATERELATION;
                SetCompUser(model.VISIBLERANGE, model.OPERATERANGE, model.AUTHORITYID, model.USERID, data_view, data_opera);
                //获取该角色下的人员并修改权限范围
                user_roleBLL bll = new user_roleBLL();
                var list = bll.GetModelList("ROLEID='" + model.USERID + "'");
                foreach (var item in list)
                    SetAuthRange(item.USERID, model.AUTHORITYID, model.VISIBLERANGE, model.OPERATERANGE, model.USERID);
            }

            return Json(new { success = true, message = "操作成功" });
        }
        #endregion


        public bool SetRoleAuthRange()
        {
            var result = true;


            return result;
        }

        public ContentResult CopyAuth(string FromUSERID, string ToUSERIDLIST)
        {
            DBResult result = new DBResult();

            if (string.IsNullOrWhiteSpace(FromUSERID) || string.IsNullOrWhiteSpace(ToUSERIDLIST))
            {
                var jsonRespose1 = new MvcShipping.Helper.JsonResponse
                {
                    Success = false,
                    Message = "请正确选择权限来源用户和目标用户",
                    Data = ""
                };
                return new ContentResult() { Content = MvcShipping.Helper.JsonConvert.Serialize(jsonRespose1) };
            }

            var useridlist = ToUSERIDLIST.Split(',');

            //20200221 首先获取来源用户的所有模块ID列表
            var useractionbll = new user_actionBLL();
            var useractionlist = useractionbll.GetModelList(" userid='"+ FromUSERID + "' and exists(select 1 from [action] where gid=ACTIONID)");

            var checkcando = new DBResult(true, "", null);

            //逐个权限进行判断 看这次能否添加得上
            foreach (var module in useractionlist) {
                checkcando = SysUserDAL.CheckOPRangeByActionID(module.ACTIONID, ToUSERIDLIST);
                if (!checkcando.Success) {
                    result.SetErrorInfo(checkcando.Message);
                }
            }
            //如不能 则返回所有引起错误的信息
            if (!string.IsNullOrWhiteSpace(result.Message) && !result.Success) {
                var jsonRespose1 = new MvcShipping.Helper.JsonResponse
                {
                    Success = false,
                    Message = result.Message,
                    Data = ""
                };
                return new ContentResult() { Content = MvcShipping.Helper.JsonConvert.Serialize(jsonRespose1) };
            }

            //对权限进行设置

            StringBuilder sqlstrbase = new StringBuilder();
            sqlstrbase.Append("declare @USERID varchar(50) ");
            sqlstrbase.Append("declare @CREATEUSER  varchar(50) ");
            sqlstrbase.Append("declare @FROMUSER  varchar(50) ");
            sqlstrbase.Append("set @USERID='{0}' ");
            sqlstrbase.Append("set @CREATEUSER='{1}' ");
            sqlstrbase.Append("set @FROMUSER = '{2}' ");

            sqlstrbase.Append("delete from user_action where USERID=@USERID ");
            sqlstrbase.Append("insert into user_action (GID,ACTIONID,USERID,CREATEUSER,CREATETIME,MODIFIEDUSER,MODIFIEDTIME) ");
            sqlstrbase.Append("select newid(),actionid,@USERID,@CREATEUSER,getdate(),@CREATEUSER,getdate() from user_action where userid = @FROMUSER ");

            sqlstrbase.Append("delete from user_authority_range where USERID=@USERID ");
            sqlstrbase.Append("insert into user_authority_range (GID,USERID,AUTHORITYID,VISIBLERANGE,OPERATERANGE,CREATEUSER,CREATETIME,MODIFIEDUSER,MODIFIEDTIME)  ");
            sqlstrbase.Append("select newid(),@USERID,AUTHORITYID,VISIBLERANGE,OPERATERANGE,@CREATEUSER,getdate(),@CREATEUSER,getdate() from user_authority_range where userid = @FROMUSER ");

            sqlstrbase.Append("delete from user_authority_range_op where USERID=@USERID ");
            sqlstrbase.Append("insert into user_authority_range_op (GID,USERID,AUTHORITYID,OPID,OPNAME,VISIBLERANGE,OPERATERANGE,CREATEUSER,CREATETIME,MODIFIEDUSER,MODIFIEDTIME)  ");
            sqlstrbase.Append("select newid(),@USERID,AUTHORITYID,OPID,OPNAME,VISIBLERANGE,OPERATERANGE,@CREATEUSER,getdate(),@CREATEUSER,getdate() from user_authority_range_op where userid = @FROMUSER ");

            sqlstrbase.Append("delete from user_authority_range_company where USERID=@USERID ");
            sqlstrbase.Append("insert into user_authority_range_company (GID,USERID,AUTHORITYID,COMPANYID,VISIBLERANGE,OPERATERANGE,CREATEUSER,CREATETIME,MODIFIEDUSER,MODIFIEDTIME)  ");
            sqlstrbase.Append("select newid(),@USERID,AUTHORITYID,COMPANYID,VISIBLERANGE,OPERATERANGE,@CREATEUSER,getdate(),@CREATEUSER,getdate() from user_authority_range_company where userid = @FROMUSER ");


            foreach (var userid in useridlist) {
                string sqlstr = string.Format(sqlstrbase.ToString(), userid,Session["USERID"].ToString(), FromUSERID);
                var _r = BasicDataRefDAL.ExecSql(sqlstr);
                if (_r == -1) {
                    var jsonRespose2 = new MvcShipping.Helper.JsonResponse
                    {
                        Success = true,
                        Message = "设置错误，请联系管理员！",
                        Data = ""
                    };
                    return new ContentResult() { Content = MvcShipping.Helper.JsonConvert.Serialize(jsonRespose2) };
                }
            }

            var jsonRespose = new MvcShipping.Helper.JsonResponse
            {
                Success = true,
                Message = "设置完成",
                Data = ""
            };
            return new ContentResult() { Content = MvcShipping.Helper.JsonConvert.Serialize(jsonRespose) };

            
        }
    }
    public class modeuleClass
    {
        public string id { get; set; }
        public string name { get; set; }
    }

}