commit：同步2.2版本

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/app/util/CaptchaCacheServiceRedisImpl.java

@@ -0,0 +1,52 @@
+package com.orangeforms.webadmin.app.util;
+
+import com.anji.captcha.service.CaptchaCacheService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.data.redis.core.StringRedisTemplate;
+
+import java.util.concurrent.TimeUnit;
+
+/**
+ * 对于分布式部署的应用，我们建议应用自己实现CaptchaCacheService，比如用Redis，参考service/spring-boot代码示例。
+ * 如果应用是单点的，也没有使用redis，那默认使用内存。
+ * 内存缓存只适合单节点部署的应用，否则验证码生产与验证在节点之间信息不同步，导致失败。
+ *
+ * ☆☆☆ SPI： 在resources目录新建META-INF.services文件夹(两层)，参考当前服务resources。
+ * @author lide1202@hotmail.com
+ * @date 2020-05-12
+ */
+public class CaptchaCacheServiceRedisImpl implements CaptchaCacheService {
+
+    @Override
+    public String type() {
+        return "redis";
+    }
+
+    @Autowired
+    private StringRedisTemplate stringRedisTemplate;
+
+    @Override
+    public void set(String key, String value, long expiresInSeconds) {
+        stringRedisTemplate.opsForValue().set(key, value, expiresInSeconds, TimeUnit.SECONDS);
+    }
+
+    @Override
+    public boolean exists(String key) {
+        return stringRedisTemplate.hasKey(key);
+    }
+
+    @Override
+    public void delete(String key) {
+        stringRedisTemplate.delete(key);
+    }
+
+    @Override
+    public String get(String key) {
+        return stringRedisTemplate.opsForValue().get(key);
+    }
+
+    @Override
+    public Long increment(String key, long val) {
+        return stringRedisTemplate.opsForValue().increment(key,val);
+    }
+}

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/app/util/FlowIdentityExtHelper.java

@@ -126,6 +126,22 @@ public class FlowIdentityExtHelper implements BaseFlowIdentityExtHelper {
         return usernameSet;
     }
 
+    @Override
+    public Boolean supprtDataPerm() {
+        return true;
+    }
+
+    @Override
+    public Map<String, String> mapUserShowNameByLoginName(Set<String> loginNameSet) {
+        if (CollUtil.isEmpty(loginNameSet)) {
+            return new HashMap<>(1);
+        }
+        Map<String, String> resultMap = new HashMap<>(loginNameSet.size());
+        List<SysUser> userList = sysUserService.getInList("loginName", loginNameSet);
+        userList.forEach(user -> resultMap.put(user.getLoginName(), user.getShowName()));
+        return resultMap;
+    }
+
     private void extractAndAppendUsernameList(Set<String> resultUsernameList, List<SysUser> userList) {
         List<String> usernameList = userList.stream().map(SysUser::getLoginName).collect(Collectors.toList());
         if (CollUtil.isNotEmpty(usernameList)) {

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/interceptor/AuthenticationInterceptor.java

@@ -62,15 +62,19 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
     public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
             throws Exception {
         String url = request.getRequestURI();
+        String token = request.getHeader(appConfig.getTokenHeaderKey());
+        boolean noLoginUrl = false;
         // 如果接口方法标记NoAuthInterface注解，可以直接跳过Token鉴权验证，这里主要为了测试接口方便
         if (handler instanceof HandlerMethod) {
             HandlerMethod hm = (HandlerMethod) handler;
             if (hm.getBeanType().getAnnotation(NoAuthInterface.class) != null
                     || hm.getMethodAnnotation(NoAuthInterface.class) != null) {
-                return true;
+                noLoginUrl = true;
+                if (StringUtils.isBlank(token)) {
+                    return true;
+                }
             }
         }
-        String token = request.getHeader(appConfig.getTokenHeaderKey());
         if (StringUtils.isBlank(token)) {
             token = request.getParameter(appConfig.getTokenHeaderKey());
         }
@@ -95,8 +99,8 @@ public class AuthenticationInterceptor implements HandlerInterceptor {
             return false;
         }
         TokenData.addToRequest(tokenData);
-        // 如果url在权限资源白名单中，则不需要进行鉴权操作
-        if (Boolean.FALSE.equals(tokenData.getIsAdmin()) && !whitelistPermSet.contains(url)) {
+        // 如果url是免登陆、白名单中，则不需要进行鉴权操作
+        if (!noLoginUrl && Boolean.FALSE.equals(tokenData.getIsAdmin()) && !whitelistPermSet.contains(url)) {
             RSet<String> permSet = redissonClient.getSet(RedisKeyUtil.makeSessionPermIdKey(sessionId));
             if (!permSet.contains(url)) {
                 response.setStatus(HttpServletResponse.SC_FORBIDDEN);

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/controller/LoginController.java

@@ -1,8 +1,14 @@
 package com.orangeforms.webadmin.upms.controller;
 
+import cn.hutool.core.collection.CollUtil;
+import cn.hutool.core.util.StrUtil;
 import com.alibaba.fastjson.JSON;
 import com.alibaba.fastjson.JSONObject;
+import com.alibaba.fastjson.JSONArray;
 import com.alibaba.fastjson.serializer.SerializerFeature;
+import com.anji.captcha.model.common.ResponseModel;
+import com.anji.captcha.model.vo.CaptchaVO;
+import com.anji.captcha.service.CaptchaService;
 import com.github.xiaoymin.knife4j.annotations.ApiSupport;
 import io.swagger.annotations.Api;
 import io.swagger.annotations.ApiImplicitParam;
@@ -25,6 +31,7 @@ import com.orangeforms.common.core.constant.ApplicationConstant;
 import com.orangeforms.common.core.constant.ErrorCodeEnum;
 import com.orangeforms.common.core.object.*;
 import com.orangeforms.common.core.util.*;
+import com.orangeforms.common.core.upload.*;
 import com.orangeforms.common.redis.cache.SessionCacheHelper;
 import org.apache.commons.collections4.CollectionUtils;
 import org.apache.commons.lang3.StringUtils;
@@ -33,7 +40,9 @@ import org.redisson.api.RedissonClient;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.web.bind.annotation.*;
+import org.springframework.web.multipart.MultipartFile;
 
+import javax.servlet.http.HttpServletResponse;
 import java.net.URLDecoder;
 import java.nio.charset.StandardCharsets;
 import java.util.*;
@@ -79,27 +88,51 @@ public class LoginController {
     private SessionCacheHelper cacheHelper;
     @Autowired
     private PasswordEncoder passwordEncoder;
+    @Autowired
+    private CaptchaService captchaService;
+    @Autowired
+    private UpDownloaderFactory upDownloaderFactory;
 
     /**
      * 登录接口。
      *
-     * @param loginName 登录名。
-     * @param password  密码。
+     * @param loginName           登录名。
+     * @param password            密码。
+     * @param captchaVerification 验证码。
      * @return 应答结果对象，其中包括JWT的Token数据，以及菜单列表。
      */
     @ApiImplicitParams({
             // 这里包含密码密文，仅用于方便开发期间的接口测试，集成测试和发布阶段，需要将当前注解去掉。
             // 如果您重新生成了公钥和私钥，请替换password的缺省值。
             @ApiImplicitParam(name = "loginName", defaultValue = "admin"),
-            @ApiImplicitParam(name = "password", defaultValue = "IP3ccke3GhH45iGHB5qP9p7iZw6xUyj28Ju10rnBiPKOI35sc%2BjI7%2FdsjOkHWMfUwGYGfz8ik31HC2Ruk%2Fhkd9f6RPULTHj7VpFdNdde2P9M4mQQnFBAiPM7VT9iW3RyCtPlJexQ3nAiA09OqG%2F0sIf1kcyveSrulxembARDbDo%3D")
+            @ApiImplicitParam(name = "password", defaultValue = "IP3ccke3GhH45iGHB5qP9p7iZw6xUyj28Ju10rnBiPKOI35sc%2BjI7%2FdsjOkHWMfUwGYGfz8ik31HC2Ruk%2Fhkd9f6RPULTHj7VpFdNdde2P9M4mQQnFBAiPM7VT9iW3RyCtPlJexQ3nAiA09OqG%2F0sIf1kcyveSrulxembARDbDo%3D"),
+            @ApiImplicitParam(name = "captchaVerification", defaultValue = "为了方便测试，这里可以修改一下代码，hardcode一个每次都ok的验证码")
     })
     @NoAuthInterface
     @PostMapping("/doLogin")
     public ResponseResult<JSONObject> doLogin(
-            @MyRequestBody String loginName, @MyRequestBody String password) throws Exception {
-        if (MyCommonUtil.existBlankArgument(loginName, password)) {
+            @MyRequestBody String loginName,
+            @MyRequestBody String password,
+            @MyRequestBody String captchaVerification) throws Exception {
+        if (MyCommonUtil.existBlankArgument(loginName, password, captchaVerification)) {
             return ResponseResult.error(ErrorCodeEnum.ARGUMENT_NULL_EXIST);
         }
+        String errorMessage;
+        CaptchaVO captchaVO = new CaptchaVO();
+        captchaVO.setCaptchaVerification(captchaVerification);
+        ResponseModel response = captchaService.verification(captchaVO);
+        if (!response.isSuccess()) {
+            //验证码校验失败，返回信息告诉前端
+            //repCode  0000  无异常，代表成功
+            //repCode  9999  服务器内部异常
+            //repCode  0011  参数不能为空
+            //repCode  6110  验证码已失效，请重新获取
+            //repCode  6111  验证失败
+            //repCode  6112  获取验证码失败,请联系管理员
+            errorMessage = String.format("数据验证失败，验证码错误，错误码 [%s] 错误信息 [%s]",
+            response.getRepCode(), response.getRepMsg());
+            return ResponseResult.error(ErrorCodeEnum.DATA_VALIDATED_FAILED, errorMessage);
+        }
         SysUser user = sysUserService.getSysUserByLoginName(loginName);
         password = URLDecoder.decode(password, StandardCharsets.UTF_8.name());
         // NOTE: 第一次使用时，请务必阅读ApplicationConstant.PRIVATE_KEY的代码注释。
@@ -108,13 +141,10 @@ public class LoginController {
         if (user == null || !passwordEncoder.matches(password, user.getPassword())) {
             return ResponseResult.error(ErrorCodeEnum.INVALID_USERNAME_PASSWORD);
         }
-        String errorMessage;
         if (user.getUserStatus() == SysUserStatus.STATUS_LOCKED) {
             errorMessage = "登录失败，用户账号被锁定！";
             return ResponseResult.error(ErrorCodeEnum.INVALID_USER_STATUS, errorMessage);
         }
-        String patternKey = RedisKeyUtil.getSessionIdPrefix(user.getLoginName(), MyCommonUtil.getDeviceType()) + "*";
-        redissonClient.getKeys().deleteByPatternAsync(patternKey);
         JSONObject jsonData = this.buildLoginData(user);
         return ResponseResult.success(jsonData);
     }
@@ -151,6 +181,9 @@ public class LoginController {
         JSONObject jsonData = new JSONObject();
         jsonData.put("showName", tokenData.getShowName());
         jsonData.put("isAdmin", tokenData.getIsAdmin());
+        if (StrUtil.isNotBlank(tokenData.getHeadImageUrl())) {
+            jsonData.put("headImageUrl", tokenData.getHeadImageUrl());
+        }
         Collection<SysMenu> menuList;
         Collection<String> permCodeList;
         if (tokenData.getIsAdmin()) {
@@ -194,10 +227,72 @@ public class LoginController {
         }
         return ResponseResult.success();
     }
+    
+    /**
+     * 上传并修改用户头像。
+     *
+     * @param uploadFile 上传的头像文件。
+     */
+    @PostMapping("/changeHeadImage")
+    public void changeHeadImage(
+            @RequestParam("uploadFile") MultipartFile uploadFile) throws Exception {
+        String fieldName = "headImageUrl";
+        UploadStoreInfo storeInfo = MyModelUtil.getUploadStoreInfo(SysUser.class, fieldName);
+        BaseUpDownloader upDownloader = upDownloaderFactory.get(storeInfo.getStoreType());
+        UploadResponseInfo responseInfo = upDownloader.doUpload(null,
+                appConfig.getUploadFileBaseDir(), SysUser.class.getSimpleName(), fieldName, true, uploadFile);
+        if (responseInfo.getUploadFailed()) {
+            ResponseResult.output(HttpServletResponse.SC_FORBIDDEN,
+                    ResponseResult.error(ErrorCodeEnum.UPLOAD_FAILED, responseInfo.getErrorMessage()));
+            return;
+        }
+        responseInfo.setDownloadUri("/admin/upms/login/downloadHeadImage");
+        String newHeadImage = JSONArray.toJSONString(CollUtil.newArrayList(responseInfo));
+        if (!sysUserService.changeHeadImage(TokenData.takeFromRequest().getUserId(), newHeadImage)) {
+            ResponseResult.output(HttpServletResponse.SC_FORBIDDEN,
+                    ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST));
+            return;
+        }
+        ResponseResult.output(ResponseResult.success(responseInfo));
+    }
+
+    /**
+     * 下载用户头像。
+     *
+     * @param filename 文件名。如果没有提供该参数，就从当前记录的指定字段中读取。
+     * @param response Http 应答对象。
+     */
+    @GetMapping("/downloadHeadImage")
+    public void downloadHeadImage(String filename, HttpServletResponse response) {
+        try {
+            SysUser user = sysUserService.getById(TokenData.takeFromRequest().getUserId());
+            if (user == null) {
+                ResponseResult.output(HttpServletResponse.SC_NOT_FOUND);
+                return;
+            }
+            if (StrUtil.isBlank(user.getHeadImageUrl())) {
+                ResponseResult.output(HttpServletResponse.SC_BAD_REQUEST);
+                return;
+            }
+            if (!BaseUpDownloader.containFile(user.getHeadImageUrl(), filename)) {
+                ResponseResult.output(HttpServletResponse.SC_FORBIDDEN);
+                return;
+            }
+            String fieldName = "headImageUrl";
+            UploadStoreInfo storeInfo = MyModelUtil.getUploadStoreInfo(SysUser.class, fieldName);
+            BaseUpDownloader upDownloader = upDownloaderFactory.get(storeInfo.getStoreType());
+            upDownloader.doDownload(appConfig.getUploadFileBaseDir(),
+                    SysUser.class.getSimpleName(), fieldName, filename, true, response);
+        } catch (Exception e) {
+            response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
+            log.error(e.getMessage(), e);
+        }
+    }
 
     private JSONObject buildLoginData(SysUser user) {
         int deviceType = MyCommonUtil.getDeviceType();
         boolean isAdmin = user.getUserType() == SysUserType.TYPE_ADMIN;
+        String headImageUrl = user.getHeadImageUrl();
         Map<String, Object> claims = new HashMap<>(3);
         String sessionId = user.getLoginName() + "_" + deviceType + "_" + MyCommonUtil.generateUuid();
         claims.put("sessionId", sessionId);
@@ -206,6 +301,9 @@ public class LoginController {
         jsonData.put(TokenData.REQUEST_ATTRIBUTE_NAME, token);
         jsonData.put("showName", user.getShowName());
         jsonData.put("isAdmin", isAdmin);
+        if (StrUtil.isNotBlank(headImageUrl)) {
+            jsonData.put("headImageUrl", headImageUrl);
+        }
         TokenData tokenData = new TokenData();
         tokenData.setSessionId(sessionId);
         tokenData.setUserId(user.getUserId());
@@ -216,6 +314,9 @@ public class LoginController {
         tokenData.setLoginIp(IpUtil.getRemoteIpAddress(ContextUtil.getHttpRequest()));
         tokenData.setLoginTime(new Date());
         tokenData.setDeviceType(deviceType);
+        if (StrUtil.isNotBlank(headImageUrl)) {
+            tokenData.setHeadImageUrl(headImageUrl);
+        }
         List<SysUserPost> userPostList = sysPostService.getSysUserPostListByUserId(user.getUserId());
         if (CollectionUtils.isNotEmpty(userPostList)) {
             Set<Long> deptPostIdSet = userPostList.stream().map(SysUserPost::getDeptPostId).collect(Collectors.toSet());
@@ -303,6 +404,7 @@ public class LoginController {
         // 所以就不能把这个字典列表接口放到数据库的白名单表中。
         permData.permUrlSet.add(onlineProperties.getUrlPrefix() + "/onlineOperation/listDict");
         permData.permUrlSet.add(onlineProperties.getUrlPrefix() + "/onlineForm/render");
+        permData.permUrlSet.add(onlineProperties.getUrlPrefix() + "/onlineForm/view");
         return permData;
     }
 

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/controller/SysDeptController.java

@@ -111,27 +111,7 @@ public class SysDeptController {
         if (MyCommonUtil.existBlankArgument(deptId)) {
             return ResponseResult.error(ErrorCodeEnum.ARGUMENT_NULL_EXIST);
         }
-        // 验证关联Id的数据合法性
-        SysDept originalSysDept = sysDeptService.getById(deptId);
-        if (originalSysDept == null) {
-            // NOTE: 修改下面方括号中的话述
-            errorMessage = "数据验证失败，当前 [对象] 并不存在，请刷新后重试！";
-            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
-        }
-        if (sysDeptService.hasChildren(deptId)) {
-            // NOTE: 修改下面方括号中的话述
-            errorMessage = "数据验证失败，当前 [对象存在子对象] ，请刷新后重试！";
-            return ResponseResult.error(ErrorCodeEnum.HAS_CHILDREN_DATA, errorMessage);
-        }
-        if (sysDeptService.hasChildrenUser(deptId)) {
-            errorMessage = "数据验证失败，请先移除部门用户数据后，再删除当前部门！";
-            return ResponseResult.error(ErrorCodeEnum.HAS_CHILDREN_DATA, errorMessage);
-        }
-        if (!sysDeptService.remove(deptId)) {
-            errorMessage = "数据操作失败，删除的对象不存在，请刷新后重试！";
-            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
-        }
-        return ResponseResult.success();
+        return this.doDelete(deptId);
     }
 
     /**
@@ -372,4 +352,29 @@ public class SysDeptController {
         return ResponseResult.success(BeanQuery.select(
                 "parentId as parentId", "deptId as id", "deptName as name").executeFrom(resultList));
     }
+
+    private ResponseResult<Void> doDelete(Long deptId) {
+        String errorMessage;
+        // 验证关联Id的数据合法性
+        SysDept originalSysDept = sysDeptService.getById(deptId);
+        if (originalSysDept == null) {
+            // NOTE: 修改下面方括号中的话述
+            errorMessage = "数据验证失败，当前 [对象] 并不存在，请刷新后重试！";
+            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
+        }
+        if (sysDeptService.hasChildren(deptId)) {
+            // NOTE: 修改下面方括号中的话述
+            errorMessage = "数据验证失败，当前 [对象存在子对象] ，请刷新后重试！";
+            return ResponseResult.error(ErrorCodeEnum.HAS_CHILDREN_DATA, errorMessage);
+        }
+        if (sysDeptService.hasChildrenUser(deptId)) {
+            errorMessage = "数据验证失败，请先移除部门用户数据后，再删除当前部门！";
+            return ResponseResult.error(ErrorCodeEnum.HAS_CHILDREN_DATA, errorMessage);
+        }
+        if (!sysDeptService.remove(deptId)) {
+            errorMessage = "数据操作失败，删除的对象不存在，请刷新后重试！";
+            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
+        }
+        return ResponseResult.success();
+    }
 }

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/controller/SysUserController.java

@@ -1,6 +1,11 @@
 package com.orangeforms.webadmin.upms.controller;
 
 import com.alibaba.fastjson.TypeReference;
+import cn.hutool.core.util.ReflectUtil;
+import com.orangeforms.common.core.upload.BaseUpDownloader;
+import com.orangeforms.common.core.upload.UpDownloaderFactory;
+import com.orangeforms.common.core.upload.UploadResponseInfo;
+import com.orangeforms.common.core.upload.UploadStoreInfo;
 import com.github.pagehelper.page.PageMethod;
 import com.orangeforms.webadmin.upms.vo.*;
 import com.orangeforms.webadmin.upms.dto.*;
@@ -10,6 +15,7 @@ import com.orangeforms.common.core.object.*;
 import com.orangeforms.common.core.util.*;
 import com.orangeforms.common.core.constant.*;
 import com.orangeforms.common.core.annotation.MyRequestBody;
+import com.orangeforms.common.redis.cache.SessionCacheHelper;
 import com.orangeforms.webadmin.config.ApplicationConfig;
 import com.github.xiaoymin.knife4j.annotations.ApiOperationSupport;
 import io.swagger.annotations.Api;
@@ -17,7 +23,9 @@ import lombok.extern.slf4j.Slf4j;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.*;
+import org.springframework.web.multipart.MultipartFile;
 
+import javax.servlet.http.HttpServletResponse;
 import java.util.*;
 
 /**
@@ -38,6 +46,10 @@ public class SysUserController {
     private PasswordEncoder passwordEncoder;
     @Autowired
     private ApplicationConfig appConfig;
+    @Autowired
+    private SessionCacheHelper cacheHelper;
+    @Autowired
+    private UpDownloaderFactory upDownloaderFactory;
 
     /**
      * 新增用户操作。
@@ -145,18 +157,7 @@ public class SysUserController {
         if (MyCommonUtil.existBlankArgument(userId)) {
             return ResponseResult.error(ErrorCodeEnum.ARGUMENT_NULL_EXIST);
         }
-        // 验证关联Id的数据合法性
-        SysUser originalSysUser = sysUserService.getById(userId);
-        if (originalSysUser == null) {
-            // NOTE: 修改下面方括号中的话述
-            errorMessage = "数据验证失败，当前 [对象] 并不存在，请刷新后重试！";
-            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
-        }
-        if (!sysUserService.remove(userId)) {
-            errorMessage = "数据操作失败，删除的对象不存在，请刷新后重试！";
-            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
-        }
-        return ResponseResult.success();
+        return this.doDelete(userId);
     }
 
     /**
@@ -201,6 +202,99 @@ public class SysUserController {
         return ResponseResult.success(sysUserVo);
     }
 
+    /**
+     * 附件文件下载。
+     * 这里将图片和其他类型的附件文件放到不同的父目录下，主要为了便于今后图片文件的迁移。
+     *
+     * @param userId 附件所在记录的主键Id。
+     * @param fieldName 附件所属的字段名。
+     * @param filename  文件名。如果没有提供该参数，就从当前记录的指定字段中读取。
+     * @param asImage   下载文件是否为图片。
+     * @param response  Http 应答对象。
+     */
+    @GetMapping("/download")
+    public void download(
+            @RequestParam(required = false) Long userId,
+            @RequestParam String fieldName,
+            @RequestParam String filename,
+            @RequestParam Boolean asImage,
+            HttpServletResponse response) {
+        if (MyCommonUtil.existBlankArgument(fieldName, filename, asImage)) {
+            response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
+            return;
+        }
+        // 使用try来捕获异常，是为了保证一旦出现异常可以返回500的错误状态，便于调试。
+        // 否则有可能给前端返回的是200的错误码。
+        try {
+            // 如果请求参数中没有包含主键Id，就判断该文件是否为当前session上传的。
+            if (userId == null) {
+                if (!cacheHelper.existSessionUploadFile(filename)) {
+                    ResponseResult.output(HttpServletResponse.SC_FORBIDDEN);
+                    return;
+                }
+            } else {
+                SysUser sysUser = sysUserService.getById(userId);
+                if (sysUser == null) {
+                    ResponseResult.output(HttpServletResponse.SC_NOT_FOUND);
+                    return;
+                }
+                String fieldJsonData = (String) ReflectUtil.getFieldValue(sysUser, fieldName);
+                if (fieldJsonData == null) {
+                    ResponseResult.output(HttpServletResponse.SC_BAD_REQUEST);
+                    return;
+                }
+                if (!BaseUpDownloader.containFile(fieldJsonData, filename)) {
+                    ResponseResult.output(HttpServletResponse.SC_FORBIDDEN);
+                    return;
+                }
+            }
+            UploadStoreInfo storeInfo = MyModelUtil.getUploadStoreInfo(SysUser.class, fieldName);
+            if (!storeInfo.isSupportUpload()) {
+                ResponseResult.output(HttpServletResponse.SC_NOT_IMPLEMENTED,
+                        ResponseResult.error(ErrorCodeEnum.INVALID_UPLOAD_FIELD));
+                return;
+            }
+            BaseUpDownloader upDownloader = upDownloaderFactory.get(storeInfo.getStoreType());
+            upDownloader.doDownload(appConfig.getUploadFileBaseDir(),
+                    SysUser.class.getSimpleName(), fieldName, filename, asImage, response);
+        } catch (Exception e) {
+            response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
+            log.error(e.getMessage(), e);
+        }
+    }
+
+    /**
+     * 文件上传操作。
+     *
+     * @param fieldName  上传文件名。
+     * @param asImage    是否作为图片上传。如果是图片，今后下载的时候无需权限验证。否则就是附件上传，下载时需要权限验证。
+     * @param uploadFile 上传文件对象。
+     */
+    @PostMapping("/upload")
+    public void upload(
+            @RequestParam String fieldName,
+            @RequestParam Boolean asImage,
+            @RequestParam("uploadFile") MultipartFile uploadFile) throws Exception {
+        UploadStoreInfo storeInfo = MyModelUtil.getUploadStoreInfo(SysUser.class, fieldName);
+        // 这里就会判断参数中指定的字段，是否支持上传操作。
+        if (!storeInfo.isSupportUpload()) {
+            ResponseResult.output(HttpServletResponse.SC_FORBIDDEN,
+                    ResponseResult.error(ErrorCodeEnum.INVALID_UPLOAD_FIELD));
+            return;
+        }
+        // 根据字段注解中的存储类型，通过工厂方法获取匹配的上传下载实现类，从而解耦。
+        BaseUpDownloader upDownloader = upDownloaderFactory.get(storeInfo.getStoreType());
+        UploadResponseInfo responseInfo = upDownloader.doUpload(null,
+                appConfig.getUploadFileBaseDir(), SysUser.class.getSimpleName(), fieldName, asImage, uploadFile);
+        if (responseInfo.getUploadFailed()) {
+            ResponseResult.output(HttpServletResponse.SC_FORBIDDEN,
+                    ResponseResult.error(ErrorCodeEnum.UPLOAD_FAILED, responseInfo.getErrorMessage()));
+            return;
+        }
+        cacheHelper.putSessionUploadFile(responseInfo.getFilename());
+        ResponseResult.output(ResponseResult.success(responseInfo));
+    }
+
     /**
      * 查询用户的权限资源地址列表。同时返回详细的分配路径。
      *
@@ -245,4 +339,20 @@ public class SysUserController {
         }
         return ResponseResult.success(sysUserService.getSysMenuListWithDetail(userId, menuName));
     }
+
+    private ResponseResult<Void> doDelete(Long userId) {
+        String errorMessage;
+        // 验证关联Id的数据合法性
+        SysUser originalSysUser = sysUserService.getById(userId);
+        if (originalSysUser == null) {
+            // NOTE: 修改下面方括号中的话述
+            errorMessage = "数据验证失败，当前 [对象] 并不存在，请刷新后重试！";
+            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
+        }
+        if (!sysUserService.remove(userId)) {
+            errorMessage = "数据操作失败，删除的对象不存在，请刷新后重试！";
+            return ResponseResult.error(ErrorCodeEnum.DATA_NOT_EXIST, errorMessage);
+        }
+        return ResponseResult.success();
+    }
 }

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/model/SysUser.java

@@ -3,6 +3,7 @@ package com.orangeforms.webadmin.upms.model;
 import com.baomidou.mybatisplus.annotation.*;
 import com.orangeforms.webadmin.upms.model.constant.SysUserType;
 import com.orangeforms.webadmin.upms.model.constant.SysUserStatus;
+import com.orangeforms.common.core.upload.UploadStoreTypeEnum;
 import com.orangeforms.common.core.annotation.*;
 import com.orangeforms.common.core.base.mapper.BaseModelMapper;
 import com.orangeforms.webadmin.upms.vo.SysUserVo;
@@ -62,6 +63,7 @@ public class SysUser {
     /**
      * 用户头像的Url。
      */
+    @UploadFlagColumn(storeType = UploadStoreTypeEnum.LOCAL_SYSTEM)
     @TableField(value = "head_image_url")
     private String headImageUrl;
 

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/service/SysPermService.java

@@ -1,7 +1,6 @@
 package com.orangeforms.webadmin.upms.service;
 
 import com.orangeforms.common.core.base.service.IBaseService;
-import com.orangeforms.common.core.object.CallResult;
 import com.orangeforms.webadmin.upms.model.SysPerm;
 
 import java.util.*;

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/service/SysUserService.java

@@ -53,6 +53,15 @@ public interface SysUserService extends IBaseService<SysUser, Long> {
      */
     boolean changePassword(Long userId, String newPass);
 
+    /**
+     * 修改用户头像。
+     *
+     * @param userId  用户主键Id。
+     * @param newHeadImage 新的头像信息。
+     * @return 成功返回true，否则false。
+     */
+    boolean changeHeadImage(Long userId, String newHeadImage);
+
     /**
      * 删除指定数据。
      *

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/service/impl/SysDeptServiceImpl.java

@@ -1,7 +1,6 @@
 package com.orangeforms.webadmin.upms.service.impl;
 
-import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
-import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.baomidou.mybatisplus.core.conditions.query.*;
 import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper;
 import com.orangeforms.webadmin.upms.service.*;
 import com.orangeforms.webadmin.upms.dao.*;

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/java/com/orangeforms/webadmin/upms/service/impl/SysUserServiceImpl.java

@@ -1,8 +1,8 @@
 package com.orangeforms.webadmin.upms.service.impl;
 
-import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
-import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper;
 import com.alibaba.fastjson.JSONObject;
+import com.baomidou.mybatisplus.core.conditions.query.*;
+import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper;
 import com.orangeforms.webadmin.upms.service.*;
 import com.orangeforms.webadmin.upms.dao.*;
 import com.orangeforms.webadmin.upms.model.*;
@@ -203,6 +203,15 @@ public class SysUserServiceImpl extends BaseService<SysUser, Long> implements Sy
         return sysUserMapper.updateById(updatedUser) == 1;
     }
 
+    @Transactional(rollbackFor = Exception.class)
+    @Override
+    public boolean changeHeadImage(Long userId, String newHeadImage) {
+        SysUser updatedUser = new SysUser();
+        updatedUser.setUserId(userId);
+        updatedUser.setHeadImageUrl(newHeadImage);
+        return sysUserMapper.updateById(updatedUser) == 1;
+    }
+
     /**
      * 删除指定数据。
      *

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/resources/META-INF/services/com.anji.captcha.service.CaptchaCacheService

@@ -0,0 +1 @@
+com.orangeforms.webadmin.app.util.CaptchaCacheServiceRedisImpl

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/resources/application.yml

@@ -94,6 +94,8 @@ redis:
       minIdle: 5
 
 common-online:
+  # 可选值为 mysql / postgresql
+  datasourceType: mysql
   # 注意不要以反斜杠(/)结尾。
   operationUrlPrefix: /admin/online
   # 在线表单业务数据上传资源路径
@@ -169,10 +171,53 @@ management:
     servlet:
       context-path: "/"
 
+aj:
+  captcha:
+    # 缓存local/redis..
+    cache-type: redis
+    # 验证码类型default两种都实例化。
+    type: default
+    # 右下角水印文字(我的水印)
+    water-mark: 我的水印
+    #点选字体样式 默认Font.BOLD
+    font-style: 1
+    #点选字体字体大小
+    font-size: 25
+    # 支持项目路径,以classpath:开头,取resource目录下路径,例：classpath:images/jigsaw
+    jigsaw: classpath:images/jigsaw
+    # 支持项目路径,以classpath:开头,取resource目录下路径,例：classpath:images/pic-click
+    pic-click: classpath:images/pic-click
+    history-data-clear-enable: false
+    # 接口请求次数一分钟限制是否开启 true|false
+    req-frequency-limit-enable: false
+    # 验证失败5次，get接口锁定
+    req-get-lock-limit: 5
+    # 验证失败后，锁定时间间隔,s
+    req-get-lock-seconds: 360
+    # get接口一分钟内请求数限制
+    req-get-minute-limit: 30
+    # check接口一分钟内请求数限制
+    req-check-minute-limit: 30
+    # verify接口一分钟内请求数限制
+    req-verify-minute-limit: 60
+    # 校验滑动拼图允许误差偏移量(默认5像素)
+    slip-offset: 5
+    # aes加密坐标开启或者禁用(true|false)
+    aes-status: true
+    # 滑动干扰项(0/1/2)
+    interference-options: 2
+
 # 开发数据库相关配置
 ---
 spring:
   profiles: dev
+  # aj-captcha 对redis缓存的依赖。
+  redis:
+    database: 2
+    host: localhost
+    port: 6379
+    password: ''
+    timeout: 60000
   datasource:
     type: com.alibaba.druid.pool.DruidDataSource
     druid:
@@ -233,6 +278,13 @@ sequence:
 ---
 spring:
   profiles: product
+  # aj-captcha 对redis缓存的依赖。
+  redis:
+    database: 2
+    host: localhost
+    port: 6379
+    password: ''
+    timeout: 60000
   datasource:
     type: com.alibaba.druid.pool.DruidDataSource
     druid:

orange-demo-flowable/orange-demo-flowable-service/application-webadmin/src/main/resources/template/views/print_error.ftl

@@ -1,329 +0,0 @@
-<html>
-<head>
-    <META http-equiv="Content-Type" content="text/html; charset=UTF-8">
-    <style type="text/css">
-        .b1{white-space-collapsing:preserve;}
-        .t1{border-collapse:collapse;border-spacing:0;}
-        .r1{height:23.25pt;}
-        .r2{height:18.75pt;}
-        .r3{height:17.25pt;}
-        .r4{height:15.0pt;}
-        .r5{height:14.25pt;}
-        .r6{height:21.0pt;}
-        .r7{height:18.0pt;}
-        .r8{height:15.75pt;}
-        .r9{height:19.5pt;}
-        .r10{height:17.0pt;}
-        .r11{height:20.25pt;}
-        .r12{height:28.5pt;}
-        .c1{white-space:pre-wrap;text-align:center;border-bottom:thin solid black;font-weight:bold;color: #dd0806; font-size:18pt;}
-        .c2{white-space:pre-wrap;text-align:center;background-color:#ffff00;border-top:thin solid black;border-left:thin solid black;color: #dd0806; font-size:12pt;}
-        .c3{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-left:thin solid black;color: #dd0806; font-size:12pt;}
-        .c4{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;color: #dd0806; font-size:12pt;}
-        .c5{white-space:pre-wrap;text-align:center;color: #dd0806; font-size:10pt;}
-        .c6{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;color: #dd0806; font-size:10pt;}
-        .c7{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;color: #dd0806; font-size:10pt;}
-        .c8{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:9pt;}
-        .c9{white-space:pre-wrap;text-align:center;background-color:#ffff00;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;color: #dd0806; font-size:11pt;}
-        .c10{white-space:pre-wrap;text-align:center;border-right:thin solid black;border-left:thin solid black;font-size:10pt;}
-        .c11{white-space:pre-wrap;text-align:center;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:10pt;}
-        .c12{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-left:thin solid black;font-size:10pt;}
-        .c13{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:8pt;}
-        .c14{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-left:thin solid black;font-size:8pt;}
-        .c15{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:10pt;}
-        .c16{white-space:pre-wrap;text-align:center;background-color:#ffff00;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:11pt;}
-        .c17{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:11pt;}
-        .c18{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:6pt;}
-        .c19{white-space:pre-wrap;text-align:center;border-right:thin solid black;border-bottom:thin solid black;border-left:thin solid black;font-size:6pt;}
-        .c20{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-left:thin solid black;font-weight:bold;font-size:6pt;}
-        .c21{white-space:pre-wrap;text-align:center;border-top:thin solid black;border-right:thin solid black;border-left:thin solid black;font-weight:bold;font-size:8pt;}
-        .c22{white-space:pre-wrap;text-align:left;border-top:thin solid black;font-weight:bold;font-size:9pt;}
-    </style>
-</head>
-<body class="b1">
-<table class="t1">
-    <colgroup>
-        <col width="40">
-        <col width="40">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-        <col width="56">
-        <col width="59">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-        <col width="57">
-    </colgroup>
-    <tbody>
-    <tr class="r1">
-        <td class="c1" colspan="16">天津公安警官职业学院2017—2018学年度第一学期课程表</td>
-    </tr>
-    <tr class="r1">
-        <td class="c2" colspan="2" rowspan="2">班   级</td>
-        <td class="c3" colspan="3">星期一</td>
-        <td class="c4" colspan="3">星期二</td>
-        <td class="c4" colspan="3">星期三</td>
-        <td class="c4" colspan="3">星期四</td>
-        <td class="c4" colspan="2">星期五</td>
-    </tr>
-    <tr class="r2">
-        <td class="c5">第1节</td>
-        <td class="c5">第2节</td>
-        <td class="c5">第3节</td>
-        <td class="c6">第1节</td>
-        <td class="c7">第2节</td>
-        <td class="c7">第3节</td>
-        <td class="c7">第1节</td>
-        <td class="c7">第2节</td>
-        <td class="c7">第3节</td>
-        <td class="c7">第1节</td>
-        <td class="c7">第2节</td>
-        <td class="c7">第3节</td>
-        <td class="c7">第1节</td>
-        <td class="c7">第2节</td>
-    </tr>
-    <tr class="r2">
-        <td class="c8" rowspan="6">16    级     刑    事    技    术    班      </td>
-        <td class="c9" rowspan="2">课程</td>
-        <td class="c10" rowspan="2">刑法</td>
-        <td class="c10" rowspan="6">自习</td>
-        <td class="c11">刑事图像</td>
-        <td class="c12" rowspan="2">民  法（选修）</td>
-        <td class="c13">派出所工作</td>
-        <td class="c12" rowspan="2">刑事图像</td>
-        <td class="c12" rowspan="2">法医学</td>
-        <td class="c14" rowspan="2">派出所工作</td>
-        <td class="c15">法医学</td>
-        <td class="c12" rowspan="2">国内安全保卫</td>
-        <td class="c12" rowspan="2">体能</td>
-        <td class="c12" rowspan="6">自习</td>
-        <td class="c12" rowspan="2">刑事技术总论</td>
-        <td class="c12" rowspan="2">刑法</td>
-    </tr>
-    <tr class="r3">
-        <td class="c11">自习</td>
-        <td class="c11">自习</td>
-        <td class="c11">自习</td>
-    </tr>
-    <tr class="r3">
-        <td class="c16" rowspan="2">教师</td>
-        <td class="c12" rowspan="2">曾岚</td>
-        <td class="c15">陈磊</td>
-        <td class="c12" rowspan="2">邵刚</td>
-        <td class="c15">杨丽伟</td>
-        <td class="c12" rowspan="2">陈磊</td>
-        <td class="c12" rowspan="2">于辉</td>
-        <td class="c12" rowspan="2">杨丽伟</td>
-        <td class="c15">于辉</td>
-        <td class="c12" rowspan="2">朱学强</td>
-        <td class="c12" rowspan="2">张付海</td>
-        <td class="c12" rowspan="2">王  伟（刑技）</td>
-        <td class="c12" rowspan="2">曾岚</td>
-    </tr>
-    <tr class="r3">
-        <td class="c11"> </td>
-        <td class="c11"> </td>
-        <td class="c11"> </td>
-    </tr>
-    <tr class="r3">
-        <td class="c16" rowspan="2">教室</td>
-        <td class="c15" rowspan="2">206</td>
-        <td class="c15">206</td>
-        <td class="c15" rowspan="2">206</td>
-        <td class="c15">206</td>
-        <td class="c15" rowspan="2">206</td>
-        <td class="c15" rowspan="2">206</td>
-        <td class="c15" rowspan="2">206</td>
-        <td class="c15">206</td>
-        <td class="c15" rowspan="2">206</td>
-        <td class="c15" rowspan="2">操场</td>
-        <td class="c15" rowspan="2">206</td>
-        <td class="c15" rowspan="2">206</td>
-    </tr>
-    <tr class="r4">
-        <td class="c15"> </td>
-        <td class="c11"> </td>
-        <td class="c11"> </td>
-    </tr>
-    <tr class="r2">
-        <td class="c8" rowspan="6">16    级     刑    事      侦    查            </td>
-        <td class="c17" rowspan="2">课程</td>
-        <td class="c12" rowspan="6">自习</td>
-        <td class="c12" rowspan="2">侦查措施</td>
-        <td class="c12" rowspan="2">经济案件侦查</td>
-        <td class="c14" rowspan="2">公安信息化</td>
-        <td class="c14" rowspan="2">公安信息化</td>
-        <td class="c12" rowspan="2">刑法</td>
-        <td class="c12" rowspan="2">体能</td>
-        <td class="c12" rowspan="6">自习</td>
-        <td class="c12" rowspan="2">痕迹检验</td>
-        <td class="c12" rowspan="2">刑法</td>
-        <td class="c12" rowspan="2">国内安全保卫</td>
-        <td class="c18">经济案件侦查</td>
-        <td class="c12" rowspan="2">痕迹检验</td>
-        <td class="c12" rowspan="2">民  法（选修）</td>
-    </tr>
-    <tr class="r3">
-        <td class="c11">侦查措施</td>
-    </tr>
-    <tr class="r3">
-        <td class="c17" rowspan="2">教师</td>
-        <td class="c12" rowspan="2">徐宏涛</td>
-        <td class="c12" rowspan="2">张静</td>
-        <td class="c12" rowspan="2">赵晓松</td>
-        <td class="c12" rowspan="2">赵晓松</td>
-        <td class="c12" rowspan="2">王骏强</td>
-        <td class="c12" rowspan="2">张付海</td>
-        <td class="c12" rowspan="2">郭海川</td>
-        <td class="c12" rowspan="2">王骏强</td>
-        <td class="c12" rowspan="2">朱学强</td>
-        <td class="c15">张静</td>
-        <td class="c12" rowspan="2">郭海川</td>
-        <td class="c12" rowspan="2">邵刚</td>
-    </tr>
-    <tr class="r3">
-        <td class="c11">徐宏涛</td>
-    </tr>
-    <tr class="r3">
-        <td class="c17" rowspan="2">教室</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">3号机房</td>
-        <td class="c15" rowspan="2">3号机房</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">操场</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">202</td>
-        <td class="c15" rowspan="2">202</td>
-    </tr>
-    <tr class="r5">
-    </tr>
-    <tr class="r2">
-        <td class="c8" rowspan="6">16    级        治    安    管    理             班    </td>
-        <td class="c17" rowspan="2">课程</td>
-        <td class="c12" rowspan="2">刑事技术</td>
-        <td class="c12" rowspan="2">体能</td>
-        <td class="c12" rowspan="2">刑事技术</td>
-        <td class="c12" rowspan="2">治安秩序管理</td>
-        <td class="c12" rowspan="2">刑事侦查概论</td>
-        <td class="c12" rowspan="2">刑法</td>
-        <td class="c18">群众工作与纠纷调解</td>
-        <td class="c12" rowspan="2">群众工作与纠纷调解</td>
-        <td class="c12" rowspan="2">公共关系（选修）</td>
-        <td class="c12" rowspan="2">刑事侦查概论</td>
-        <td class="c12" rowspan="2">刑法</td>
-        <td class="c12" rowspan="6">自习</td>
-        <td class="c12" rowspan="6">自习</td>
-        <td class="c12" rowspan="6">自习</td>
-    </tr>
-    <tr class="r6">
-        <td class="c19">q</td>
-    </tr>
-    <tr class="r7">
-        <td class="c17" rowspan="2">教师</td>
-        <td class="c12" rowspan="2">郭海川  韩易浦</td>
-        <td class="c12" rowspan="2">张付海</td>
-        <td class="c12" rowspan="2">郭海川  韩易浦</td>
-        <td class="c12" rowspan="2">翟政亮</td>
-        <td class="c12" rowspan="2">邵妍</td>
-        <td class="c12" rowspan="2">薛强</td>
-        <td class="c15">刘晓鹏</td>
-        <td class="c12" rowspan="2">刘晓鹏</td>
-        <td class="c12" rowspan="2">尚欣</td>
-        <td class="c12" rowspan="2">邵妍</td>
-        <td class="c12" rowspan="2">薛强</td>
-    </tr>
-    <tr class="r7">
-        <td class="c11">翟政亮</td>
-    </tr>
-    <tr class="r3">
-        <td class="c17" rowspan="2">教室</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">操场</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-        <td class="c15" rowspan="2">218</td>
-    </tr>
-    <tr class="r8">
-    </tr>
-    <tr class="r2">
-        <td class="c13" rowspan="6">16        网    络       安     全    监    察     1     班</td>
-        <td class="c17" rowspan="2">课程</td>
-        <td class="c12" rowspan="2">应用写作</td>
-        <td class="c14" rowspan="2">数据库系统应用</td>
-        <td class="c20" rowspan="2">周二中午：计算机安全管理及实用技术</td>
-        <td class="c13">刑事诉讼法</td>
-        <td class="c21" rowspan="2">周一中午：数据库系统应用</td>
-        <td class="c12" rowspan="2">民法</td>
-        <td class="c12" rowspan="2">体育</td>
-        <td class="c12" rowspan="2">VB语言程序设计</td>
-        <td class="c12" rowspan="6">选修</td>
-        <td class="c12" rowspan="2">VB语言程序设计</td>
-        <td class="c12" rowspan="2">刑事诉讼法</td>
-        <td class="c12" rowspan="6">选修</td>
-        <td class="c15">应用写作</td>
-        <td class="c12" rowspan="2">犯罪心理</td>
-    </tr>
-    <tr class="r2">
-        <td class="c11">民法</td>
-        <td class="c11">犯罪心理</td>
-    </tr>
-    <tr class="r9">
-        <td class="c17" rowspan="2">教师</td>
-        <td class="c12" rowspan="2">关利</td>
-        <td class="c12" rowspan="2">杨斌</td>
-        <td class="c12" rowspan="2">赵晓松</td>
-        <td class="c15">王伟</td>
-        <td class="c12" rowspan="2">杨斌</td>
-        <td class="c12" rowspan="2">李静</td>
-        <td class="c12" rowspan="2">程军</td>
-        <td class="c12" rowspan="2">赵伟</td>
-        <td class="c12" rowspan="2">赵伟</td>
-        <td class="c12" rowspan="2">王伟</td>
-        <td class="c15">关利</td>
-        <td class="c12" rowspan="2">张学林</td>
-    </tr>
-    <tr class="r10">
-        <td class="c11">李静</td>
-        <td class="c11">张学林</td>
-    </tr>
-    <tr class="r3">
-        <td class="c17" rowspan="2">教室</td>
-        <td class="c15" rowspan="2">东阶梯</td>
-        <td class="c15" rowspan="2">2号机房</td>
-        <td class="c15" rowspan="2">主楼201</td>
-        <td class="c15" rowspan="2">101</td>
-        <td class="c15" rowspan="2">2号机房</td>
-        <td class="c15" rowspan="2">101</td>
-        <td class="c15" rowspan="2">操场</td>
-        <td class="c15" rowspan="2">3号机房</td>
-        <td class="c15" rowspan="2">3号机房</td>
-        <td class="c15" rowspan="2">101</td>
-        <td class="c15">东阶梯</td>
-        <td class="c15" rowspan="2">主楼201</td>
-    </tr>
-    <tr class="r11">
-        <td class="c11">主楼201</td>
-    </tr>
-    <tr class="r12">
-        <td class="c22" colspan="16">注:1、课程一栏中有两科次的，上面的课程单周上课，下面的课程双周上课。2、每天上课时间：上午第1节8:30至9:55；第2节10:15至11:40；中午上课时间12:30至13:55；下午第3节14:00至15:25。</td>
-    </tr>
-    </tbody>
-</table>
-</body>
-</html>