审批时判断角色是否有权限

yd-api/src/main/java/com/yd/api/agms/service/impl/AgmsHiringServiceImpl.java

@@ -202,6 +202,40 @@ public class AgmsHiringServiceImpl implements AgmsHiringService {
         Long hiringBasicInfoId = requestVO.getHiringBasicInfoId();
         Long hiringBasicInfoId = requestVO.getHiringBasicInfoId();
         //查询审批流程
         //查询审批流程
         List<MdPractitionerHiringApproveSteps> hiringApproveStepsList = systemConfigService.findHiringApproveStepsAll();
         List<MdPractitionerHiringApproveSteps> hiringApproveStepsList = systemConfigService.findHiringApproveStepsAll();
+        //判断当前操作人是否具有当前流程的审批权限
+        Integer currentStepSeq = requestVO.getHiringApproveStepsSeq();
+        if (currentStepSeq == null) {
+            responseVO.setCommonResult(new CommonResult(true, "审批已结束"));
+            return;
+        }
+        BeanPropertyValueEqualsPredicate predicate = new BeanPropertyValueEqualsPredicate("stepSeq", currentStepSeq);
+        List<MdPractitionerHiringApproveSteps> steps = (List<MdPractitionerHiringApproveSteps>) CollectionUtils.select(hiringApproveStepsList, predicate);
+        MdPractitionerHiringApproveSteps step = steps.get(0);
+
+        if (StringUtils.isNotEmpty(step.getAppointedApprovePractitioners())) {
+            //团队长之后的环节
+            String[] appointedMobileNos = step.getAppointedApprovePractitioners().split(",");
+            if (!Arrays.asList(appointedMobileNos).contains(mobileNo)) {
+                responseVO.setCommonResult(new CommonResult(true, "无此流程的审批权限"));
+                return;
+            }
+        } else {
+            //辅导人或团队长
+            String approveRole = step.getApproveRole();
+            AclPractitionerHiringMembership membership = membershipMapper.selectByHiringBasicInfoId(hiringBasicInfoId);
+            if ("subsystemOwner".equals(approveRole)) {
+                if (!practitionerId.equals(membership.getSubsystemOwnerId())) {
+                    responseVO.setCommonResult(new CommonResult(true, "无此流程的审批权限"));
+                    return;
+                }
+            } else {
+                if (!practitionerId.equals(membership.getMentorPractitionerId())) {
+                    responseVO.setCommonResult(new CommonResult(true, "无此流程的审批权限"));
+                    return;
+                }
+            }
+        }
+
         //保存审批结果
         //保存审批结果
         saveRecords(practitionerId, mobileNo, hiringApproveStepsList, requestVO, responseVO);
         saveRecords(practitionerId, mobileNo, hiringApproveStepsList, requestVO, responseVO);