用ASP實(shí)現(xiàn)分級(jí)權(quán)限控制
本文實(shí)現(xiàn)的是一個(gè)帳務(wù)管理系統(tǒng)中分級(jí)權(quán)限的控制,程序使用ASP和javascript編寫(xiě),在裝有IIS4.0的win NT服務(wù)器上運(yùn)行,速度快,易維護(hù)。
權(quán)限級(jí)別劃分如下:
①、院長(zhǎng)和財(cái)務(wù)科長(zhǎng):不能輸入,可以無(wú)限制查詢、統(tǒng)計(jì);
②、副院長(zhǎng):不能輸入,可以查詢、統(tǒng)計(jì)其分管部門的帳務(wù);
③、部門領(lǐng)導(dǎo):不能輸入,可以查詢、統(tǒng)計(jì)本部門的帳務(wù);
④、會(huì)計(jì):能輸入各部門的帳務(wù)(一個(gè)會(huì)計(jì)有時(shí)要做幾個(gè)部門的帳),只能查詢、統(tǒng)計(jì)自己輸入的帳務(wù)。
涉及的數(shù)據(jù)庫(kù)和字段如下
①、JK_USER數(shù)據(jù)庫(kù)及字段:id(序列號(hào)),bmid(部門號(hào)),username(用戶名),pwd(口令),right(權(quán)限值);
②、BM數(shù)據(jù)庫(kù)及字段:id(序列號(hào)) ,bmid(部門號(hào));
③、JZPZ數(shù)據(jù)庫(kù)及字段:id(序列號(hào)),bm(部門), zgs(子公司),xmz(項(xiàng)目組),xm(項(xiàng)目),sr(收入),zc(支出),szfx(收支方向),szxs(收支形式),
rq(日期),jbr(經(jīng)辦人),lrr(錄入人),szsm(收支說(shuō)明);
④、ZGS數(shù)據(jù)庫(kù)及字段:id(序列號(hào)),zgs(子公司)name(公司名),bmid(部門編號(hào))。
1.首先進(jìn)行用戶身份合法性驗(yàn)證
將用戶提交的用戶名和口令與數(shù)據(jù)庫(kù)JK_USER中的字段對(duì)照對(duì)照,以確定其合法性,只有合法的用戶(系統(tǒng)管理員為其開(kāi)過(guò)戶)才可以進(jìn)入,合法用戶有
四種權(quán)限級(jí)別,分別賦予“1”、“2”、“3”、“4”四種權(quán)限值。(程序略)。
2.憑證記帳(分級(jí)權(quán)限控制)
憑證記帳功能是專為會(huì)計(jì)人員服務(wù)的,其他人不可以使用,如以非會(huì)計(jì)人員身份進(jìn)入憑證錄入界面時(shí),只有“查詢記帳憑證”功能按鈕可見(jiàn),其它功能
按鈕不可見(jiàn)。錄入的憑證先存放在一個(gè)臨時(shí)表里,稱為“未記帳憑證庫(kù)”,只有運(yùn)行“憑證記帳”功能后才進(jìn)入“憑證庫(kù)”在“未記帳憑證庫(kù)”中的憑證可以
修改。部分程序如下:
'非會(huì)計(jì)人員進(jìn)入,不顯示“憑證記帳”和“保存未記帳憑證”功能按鈕
if (thisPage.firstEntered) then
if session("tright")> "1" then
button1.hide
button2.hide
end if
…………
'自動(dòng)填寫(xiě)時(shí)間和操作人
Textbox7.value=year(date) "-" month(date) "-" day(date)
Textbox9.value =session("username")
set cnn1=server.CreateObject("adodb.connection")
set rst1=server.CreateObject("adodb.recordset")
cnn1.CursorLocation=3
cnn1.ConnectionTimeout =30
cnn1.Open "DSN=jky"
rst1.Open "select * from bm ",cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
RST1.MoveFirst
Id=rst1.Fields("id")
do while not rst1.EOF
Listbox3.addItem rst1.Fields("bmName"),cint(rst1.Fields("id"))
“Response.Write rst1.Fields("bmname") rst1.Fields("id")
rst1.MoveNext
loop
end if
rst1.Close
rst1.Open "select zgsname from zgs where bmid=" id,cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
rst1.MoveFirst
do while not rst1.EOF
Listbox4.addItem cstr(rst1.Fields("zgsname"))
rst1.MoveNext
loop
end if
rst1.Close
cnn1.close
call writerst
end if
end function
………………
'憑證記帳
sub button2_onclick
dim s
s=Listbox1.selectedIndex
Response.Write s
end sub
sub listbox3_onchange
dim id,i
i=Listbox4.getCount()
do while i>-1
call Listbox4.removeItem(i)
i=i-1
loop
id=listbox3.getValue (listbox3.selectedIndex)
set cnn2=server.CreateObject("adodb.connection")
set rst2=server.CreateObject("adodb.recordset")
cnn2.CursorLocation=3
cnn2.ConnectionTimeout =30
cnn2.Open"DSN=jky"
rst2.Open "select zgsName from zgs where bmid=" id,cnn2,1,1,adcmdtext
if rst2.RecordCount >0 then
RST2.MoveFirst
do while not rst2.EOF
Listbox4.addItem cstr(rst2.Fields("zgsName"))
rst2.MoveNext
loop
end if
rst2.Close
cnn2.Close
end sub
sub button2_onclick
set cnn5=server.CreateObject("adodb.connection")
cnn5.CursorLocation=3
cnn5.ConnectionTimeout =30
cnn5.Open"DSN=jky"
cnn5.Execute "insert into jzpz(bm,zgs,xmz,xm,sr,zc,szfx,szxs,rq,jbr,lrr,szsm) select bm,zgs,xmz,xm,sr,zc,szfx,szxs,rq,jbr,
lrr,szsm from wjzpz where lrr=“" session("username") "“"
cnn5.Execute "delete from wjzpz where lrr=“" session("username") "“"
end sub
3.數(shù)據(jù)查詢(分級(jí)權(quán)限控制)
以憑證的字段為條件進(jìn)行查詢,在供選條件前有一方框供打“√”,其中“部門“條件必選(程序自動(dòng)加上),部門內(nèi)容由程序根據(jù)用戶的權(quán)限自動(dòng)
從數(shù)據(jù)庫(kù)中調(diào)用相應(yīng)值,分公司內(nèi)容根據(jù)所屬部門自動(dòng)調(diào)整,部分程序如下:
……………
'根據(jù)權(quán)限值進(jìn)入相應(yīng)的查詢界面
……………
function thisPage_onenter()
set cnn1=server.CreateObject("adodb.connection")
set rst1=server.CreateObject("adodb.recordset")
cnn1.CursorLocation=3
cnn1.ConnectionTimeout =30
cnn1.Open "dsn=jky"
select case session("Tright")
case "3"“副院長(zhǎng)
rst1.Open "select bm.bmName from jk_user ,bm where JK_user.bmid=bm.id and jk_user.username =“" session("username")
"“",cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
RST1.MoveFirst
do while not rst1.EOF
Listbox1.addItem cstr(rst1.Fields("bmName"))
rst1.MoveNext
loop
end if
rst1.Close
rst1.Open "select zgsname from zgs ",cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
rst1.MoveFirst
do while not rst1.EOF
Listbox2.addItem cstr(rst1.Fields("zgsname"))
rst1.MoveNext
loop
end if
rst1.Close
cnn1.close
Checkbox1.setChecked (true)
case "2"“部門經(jīng)理
Listbox1.addItem session("bm")
rst1.Open "select zgsname from zgs where bmid=" session("bmid"),cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
rst1.MoveFirst
do while not rst1.EOF
Listbox2.addItem cstr(rst1.Fields("zgsname"))
rst1.MoveNext
loop
end if
rst1.Close
cnn1.close
Checkbox1.setChecked (true)
“Checkbox1.0
case "1"“會(huì)計(jì)
rst1.Open "select bmName from bm ",cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
RST1.MoveFirst
do while not rst1.EOF
Listbox1.addItem cstr(rst1.Fields("bmName"))
rst1.MoveNext
loop
end if
rst1.Close
rst1.Open "select zgsname from zgs ",cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
rst1.MoveFirst
do while not rst1.EOF
Listbox2.addItem cstr(rst1.Fields("zgsname"))
rst1.MoveNext
loop
end if
rst1.Close
cnn1.close
case "4"“院長(zhǎng)
rst1.Open "select bmName from bm ",cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
RST1.MoveFirst
do while not rst1.EOF
Listbox1.addItem cstr(rst1.Fields("bmName"))
rst1.MoveNext
loop
end if
rst1.Close
rst1.Open "select zgsname from zgs ",cnn1,1,1,adcmdtext
if rst1.RecordCount >0 then
rst1.MoveFirst
do while not rst1.EOF
Listbox2.addItem cstr(rst1.Fields("zgsname"))
rst1.MoveNext
loop
end if
rst1.Close
cnn1.close
end select
end if
…………
end function
'按照權(quán)限查詢憑證
sub button1_onclick
dim rst2,cnn2,str,i
dim bm(1),zgs(1),xmz(1),xm(1),szfx(1),szxs(1),rq(2),jbr(1)
bm(0)=Checkbox1.getChecked()
if bm(0) then
bm(1)=Listbox1.getText(Listbox1.selectedIndex )
str=" and bm=“" bm(1) "“"
end if
zgs(0)=Checkbox2.getChecked()
if zgs(0) then
zgs(1)=Listbox2.getText(Listbox2.selectedIndex )
str=str " and zgs =“" zgs(1) "“"
end if
xmz(0)=Checkbox3.getChecked()
if xmz(0) then
xmz(1)=trim(txtxmz.value )
str=str " and xmz like “%" xmz(1) "%“"
end if
xm(0)=Checkbox4.getChecked()
if xm(0) then
xm(1)=trim(tztxm.value )
str=str " and xm like “%" xm(1) "%“"
end if
szfx(0)=Checkbox5.getChecked()
if szfx(0) then
szfx(1)=Listbox3.getText(Listbox3.selectedIndex )
str =str " and szfx =“" szfx(1) "“"
end if
szxs(0)=Checkbox6.getChecked()
if szxs(0) then
szxs(1)=Listbox4.getText(Listbox4.selectedIndex )
str =str " and szxs =“" szxs(1) "“"
end if
jbr(0)=Checkbox8.getChecked()
if jbr(0) then
jbr(1)=trim(txtjbr.value )
str =str " and jbr like “%" jbr(1) "%“"
end if
set cnn2=server.CreateObject("adodb.connection")
set rst2=server.CreateObject("adodb.recordset")
cnn2.CursorLocation=3
cnn2.ConnectionTimeout =30
cnn2.Open "dsn=jky"
Response.Write "table border=“1“ cellPadding=0 cellSpacing=0 width=“650“ height=“33“ >"
Response.Write "tr>"
Response.Write "td width=“100%“ colspan=“6“ height=“44“ align=“middle“ bgcolor=lightblue>"
Response.Write "p align=“center“>b>font color=“#000084“>記 帳 憑 證 列 表"
Response.Write "/font>/b>/p>/td>/tr> "
Response.Write "tr>"
Response.Write "td width=“15%“ bgcolor=lightsteelblue>"
Response.Write "部 門/td>"
Response.Write "td width=“20%“bgcolor=lightsteelblue>"
Response.Write "子公司/td>"
Response.Write "td width=“15%“ bgcolor=lightsteelblue>"
Response.Write "項(xiàng)目組/td>"
Response.Write "td width=“15%“ bgcolor=lightsteelblue>"
Response.Write "項(xiàng)目名/合同號(hào)/td>"
Response.Write "td width=“15%“ bgcolor=lightsteelblue>"
Response.Write "收入金額(萬(wàn)元)/td>"
Response.Write "td width=“15%“ bgcolor=lightsteelblue>"
Response.Write "支出金額(萬(wàn)元)/td>/tr>"
if session("Tright")="1" then
“Response.Write "AAAAAAAA"
rst2.Open "select * from jzpz where id>0 and lrr=“" session("username") "“" str ,cnn2,1,1,adcmdtext
else
“Response.Write "FFFFFFFFFFFFF"
rst2.Open "select * from jzpz where id>0 " str ,cnn2,1,1,adcmdtext
end if
if rst2.RecordCount >0 then
rst2.MoveFirst
rst2.PageSize =20
rst2.AbsolutePage =1
i=0
do while not rst2.EOF and i rst2.PageSize
Response.Write "tr>"
Response.Write "td width=“15%“ bgcolor=lightgrey>" rst2.Fields("bm") "/td>"
Response.Write "td width=“15%“ bgcolor=lightgrey>" rst2.Fields("zgs") "/td>"
Response.Write "td width=“15%“ bgcolor=lightgrey>" rst2.Fields("xmz") "/td>"
Response.Write "td width=“15%“ bgcolor=lightgrey>a href=“FMjz1.asp?Id=" rst2.Fields("id") "“
target=“_blank“>" rst2.Fields("xm") "/a>/td>"
Response.Write "td width=“5%“ bgcolor=lightgrey>" rst2.Fields("sr") "/td>"
Response.Write "td width=“5%“ bgcolor=lightgrey>" rst2.Fields("zc") "/td>"
Response.Write "/tr>"
i=i+1
rst2.MoveNext
loop
end if
Response.Write "/table>"
Response.Write "/div>"
j= rst2.PageCount
Response.Write "P align=center>b>共有頁(yè)數(shù): "
for i=1 to j
Response.Write "a href=“Fmjzpzck1.asp?ID=" i "“ target=“_blank“>" i "/a>" " "
if j mod 10= 0 then
Response.Write "br>"
end if
next
Response.Write "/b>/p>"
rst2.Close
cnn2.Close
…………
end sub
應(yīng)用以上程序,可以根據(jù)用戶的權(quán)限,按照用戶的要求實(shí)行訂制查詢,該系統(tǒng)在win NT、IIS4.0和win98、PWS上運(yùn)行通過(guò)。