joungmin/vpd-permission-poc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Developer] #424 support object column row rules

Browse Source 
Refs #424
This commit is contained in:
devmrko
2026-06-23 14:24:00 +09:00
parent 97bb0357f9
commit 09e25a2349
11 changed files with 197 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/main/resources/mapper/PermissionMapper.xml
View File

@@ -35,7 +35,12 @@
o.object_id,
p.target_name AS object_name,
p.action_name AS action,
LISTAGG(pr.rule_type || NVL2(pr.rule_value, ':' || pr.rule_value, ''), ', ')
LISTAGG(
NVL2(pr.rule_column, pr.rule_column || ' ', '') ||
pr.rule_type ||
NVL2(pr.rule_value, ' ' || pr.rule_value, ''),
', '
)
WITHIN GROUP (ORDER BY pr.rule_id) AS rules,
(
SELECT LISTAGG(pc.column_name, ', ') WITHIN GROUP (ORDER BY pc.column_name)
@@ -96,8 +101,14 @@
</delete>
<insert id="insertRule" parameterType="com.cloudhandson.vpdbackoffice.domain.permission.PermissionRule">
INSERT INTO cb_permission_rule (rule_id, perm_id, rule_type, rule_value)
VALUES (#{ruleId}, #{permissionId}, #{ruleType}, #{ruleValue})
INSERT INTO cb_permission_rule (rule_id, perm_id, rule_column, rule_type, rule_value)
VALUES (
#{ruleId,jdbcType=NUMERIC},
#{permissionId,jdbcType=NUMERIC},
#{ruleColumn,jdbcType=VARCHAR},
#{ruleType,jdbcType=VARCHAR},
#{ruleValue,jdbcType=VARCHAR}
)
</insert>
<delete id="deleteVisibleColumns">

18
src/main/resources/static/css/app.css
View File

@@ -168,6 +168,24 @@ body {
padding-bottom: 1rem;
}
.field-block-title {
color: var(--rw-muted);
font-size: .875rem;
font-weight: 700;
margin-bottom: .35rem;
}
.rule-list {
display: grid;
gap: .5rem;
}
.rule-row {
display: grid;
gap: .5rem;
grid-template-columns: 1fr 1fr 1fr auto;
}
.rw-btn,
.btn {
border-radius: 999px;

39
src/main/resources/static/js/app.js
View File

@@ -28,10 +28,49 @@ function filterUserRoleDetail() {
empty.hidden = shown !== 0;
}
function syncRuleColumnOptions() {
const objectSelect = document.querySelector('select[name="objectRef"]');
if (!objectSelect) {
return;
}
const selectedOption = objectSelect.options[objectSelect.selectedIndex];
const columns = (selectedOption?.dataset.columns || '').split(',').filter(Boolean);
document.querySelectorAll('.rule-column-select').forEach((select) => {
const current = select.value;
select.innerHTML = '<option value="">전체 행</option>' + columns
.map((column) => `<option value="${column}">${column}</option>`)
.join('');
if (columns.includes(current)) {
select.value = current;
}
});
}
document.addEventListener('DOMContentLoaded', () => {
const master = document.getElementById('userRoleMaster');
if (master) {
master.addEventListener('change', filterUserRoleDetail);
filterUserRoleDetail();
}
const objectSelect = document.querySelector('select[name="objectRef"]');
if (objectSelect) {
objectSelect.addEventListener('change', syncRuleColumnOptions);
syncRuleColumnOptions();
}
document.querySelectorAll('[data-rule-add]').forEach((button) => {
button.addEventListener('click', () => {
const row = button.closest('.rule-row');
const list = document.getElementById('rowRuleList');
if (!row || !list) {
return;
}
const clone = row.cloneNode(true);
clone.querySelectorAll('input').forEach((input) => input.value = '');
const cloneButton = clone.querySelector('[data-rule-add]');
cloneButton.textContent = '삭제';
cloneButton.addEventListener('click', () => clone.remove());
list.appendChild(clone);
syncRuleColumnOptions();
});
});
});

43
src/main/resources/templates/permissions.html
View File

@@ -27,6 +27,7 @@
<optgroup label="등록된 보호 객체">
<option th:each="object : ${objects}"
th:value="${'protected:' + object.objectId()}"
th:attr="data-columns=${#strings.listJoin(columnsByObject[object.objectId()], ',')}"
th:text="${object.displayName()}"></option>
</optgroup>
<optgroup label="DB 스키마 객체">
@@ -36,23 +37,33 @@
</optgroup>
</select>
</label>
<label>
행 규칙
<select class="form-select" name="ruleType">
<option value="ALL">ALL</option>
<option value="REGION">REGION</option>
<option value="MY_DEPT">MY_DEPT</option>
<option value="SELF">SELF</option>
</select>
</label>
<label>
규칙 값
<input class="form-control" name="ruleValue" placeholder="APAC 또는 HR">
</label>
<label>
NULL 제외 컬럼
<div class="span-2">
<div class="field-block-title">행 규칙</div>
<div id="rowRuleList" class="rule-list">
<div class="rule-row">
<select class="form-select rule-column-select" name="ruleColumn">
<option value="">전체 행</option>
<option value="DEPT_CODE">DEPT_CODE</option>
<option value="OWNER_EMP_NO">OWNER_EMP_NO</option>
<option value="DOC_ID">DOC_ID</option>
<option value="TITLE">TITLE</option>
</select>
<select class="form-select" name="ruleType">
<option value="ALL">ALL</option>
<option value="=">=</option>
<option value="!=">!=</option>
<option value="MY_DEPT">현재 사용자 부서</option>
<option value="SELF">현재 사용자 사번</option>
</select>
<input class="form-control" name="ruleValue" placeholder="비교 값">
<button class="btn btn-outline-secondary" type="button" data-rule-add>추가</button>
</div>
</div>
</div>
<div class="span-2">
<div class="field-block-title">컬럼 NULL 처리 예외</div>
<input class="form-control" name="visibleColumns" placeholder="CONTENTS">
</label>
</div>
<button class="btn btn-primary" type="submit">저장</button>
</form>
</section>