package?nm;

import?java.util.Vector;

import?javax.servlet.ServletContext;
import?javax.servlet.http.HttpServletRequest;
import?javax.servlet.http.HttpServletResponse;
import?javax.servlet.http.HttpSession;
import?javax.sql.DataSource;


import?org.apache.struts.action.Action;
import?org.apache.struts.action.ActionForm;
import?org.apache.struts.action.ActionForward;
import?org.apache.struts.action.ActionMapping;
import?org.apache.struts.action.ActionMessage;
import?org.apache.struts.action.ActionMessages;

public?final?class?CheckPowerAction?extends?Action?{
	public?ActionForward?execute（ActionMapping?mapping?ActionForm?form
			HttpServletRequest?request?HttpServletResponse?response）
			throws?Exception?{

		String?functiontype?=?request.getParameter（“functiontype“）;

		ServletContext?context?=?servlet.getServletContext（）;
		DataSource?dataSource?=?（DataSource）?context
				.getAttribute（Constants.DATASOURCE_KEY）;
		DB?db?=?new?DB（dataSource）;

		HttpSession?session?=?request.getSession（）;
		ActionMessages?errors?=?new?ActionMessages（）;
		String?pageForward?=?“ToErrorPage“;
		User?loginuser?=?（User）?session.getAttribute（Constants.LOGIN_USER_KEY）;

		if?（functiontype.equals（“newuser“））?{
			if?（loginuser.getGrade（）.equals（“admin“））?{
				pageForward?=?“ToNewUser“;
			}?else?{
				errors.add（ActionMessages.GLOBAL_MESSAGE?new?ActionMessage（
						“error.power.newuser.notadmin“））;
				if?（!errors.isEmpty（））?{
				//	saveErrors（request?errors）;
					this.saveMessages（request?errors）;
				}
			}
		}?else?if?（functiontype.equals（“useredit“））?{
			if?（loginuser.getGrade（）.equals（“admin“））?{
				String?username?=?request.getParameter（“username“）;
				User?curUser?=?（User）?User.search（db?username）.get（0）;
				session.setAttribute（Constants.CUR_USER_KEY?curUser）;
				pageForward?=?“ToUserEdit“;
			}?else?{
				errors.add（ActionMessages.GLOBAL_MESSAGE?new?ActionMessage（
						“error.power.edit.notadmin“））;
				if?（!errors.isEmpty（））?{
//					saveErrors（request?errors）;
					this.saveMessages（request?errors）;
				}
			}
		}?else?if?（functiontype.equals（“userdelete“））?{
			if?（loginuser.getGrade（）.equals（“admin“））?{
				String?username?=?request.getParameter（“username“）;
				if?（User.delete（db?username））?{
					Vector?users?=?new?Vector（）;
					users?=?User.search（db?““）;
					session.setAttribute（Constants.USER_LIST_KEY?users）;
					pageForward?=?“ToUserList“;
				}?else?{
					errors.add（ActionMessages.GLOBAL_MESSAGE
							new?ActionMessage（“error.delete.failed“））;
					if?（!errors.isEmpty（））?{
//						saveErrors（request?errors）;
						this.saveMessages（request?errors）;
					}
				}
			}?else?{
				errors.add（ActionMessages.GLOBAL_MESSAGE?new?ActionMessage（
						“error.power.delete.notadmin“））;
				if?（!errors.isEmpty（））?{
//					saveErrors（request?errors）;
					this.saveMessages（request?errors）;
				}
			}
		}?else?if?（functiontype.equals（“noticedelete“