public String relatedRightForward() {
   this.logger.debug("enter relatedRight");
   Map<String, Object> map =
       EcsideUtil.getQurey(this.request, "", new Boolean(false).booleanValue());
   QueryConditions qc = getQueryConditions(map);
   String userId = this.request.getParameter("userId");
   User user = this.userService.loadUserById(userId, false, true, false);
   String logonIdString = AclCtrl.getLogonID(this.request);
   User logonUser = this.userService.loadUserById(logonIdString, false, true, false);
   boolean flag = false;
   for (Role role : logonUser.getRoleSet()) {
     if (role.getType().equals(ActionConstant.DEF_SUPERADMIN)) {
       flag = true;
     }
   }
   if (!flag) {
     this.request.setAttribute("roleList", logonUser.getOperateRoleSet());
   } else {
     qc.addCondition(
         "primary.memberNo",
         "=",
         this.request.getSession().getAttribute(ActionConstant.REGISTERID));
     List<Role> roleList = this.roleService.getList(qc, null);
     this.request.setAttribute("roleList", roleList);
   }
   this.request.setAttribute("user", user);
   this.request.setAttribute(
       "ISSUPTERADMIN", this.request.getSession().getAttribute("ISSUPERADMIN"));
   return getReturnValue();
 }
  public String commonUserLogon() throws Exception {
    this.logger.debug("//--[CommonUserController]--enter commonUserLogon()---//");

    User user = new User();
    user.setUserId(this.request.getParameter("username"));

    List<User> userlist =
        this.userService.getList(
            new QueryConditions("primary.userId", "=", this.request.getParameter("username")),
            null);
    if (userlist.size() != 0) {
      List<MemberInfo> memberlist =
          this.memberInfoService.getList(
              new QueryConditions("primary.id", "=", ((User) userlist.get(0)).getMemberNo()), null);
      if (!((MemberInfo) memberlist.get(0)).getStatus().equals("D")) {
        user.setPassword(this.request.getParameter("pwd"));

        String randNumSys = (String) this.request.getSession().getAttribute("RANDOMICITYNUM");
        String randNumInput = this.request.getParameter("randNumInput");
        String resultMsg = this.userService.authenticateUser(user, randNumSys, randNumInput);
        if ("default,gray".contains(resultMsg)) {
          this.request.getSession().invalidate();
          ActiveUserManager au = new ActiveUserManager();
          long sessionId = au.logon(user.getUserId(), this.request.getRemoteAddr());
          User u = this.userService.loadUserById(user.getUserId(), true, true, true);
          u.setSessionId(sessionId);
          this.request.getSession().setAttribute("LOGINIDS", sessionId);
          this.request.getSession().setAttribute("CURRENUSER", u);
          this.request
              .getSession()
              .setAttribute(ActionConstant.REGISTERID, u.getMemberInfo().getId());
          String organizationNoString = "";
          if (u.getOrganization() != null) {
            organizationNoString = u.getOrganization().getOrganizationNO();
          }
          boolean flag = false;
          for (Role role : u.getRoleSet()) {
            if ("DEFAULT_SUPER_ADMIN".equals(role.getType())) {
              flag = true;
            }
          }
          this.request.getSession().setAttribute("ISSUPERADMIN", Boolean.valueOf(flag));
          this.request
              .getSession()
              .setAttribute(ActionConstant.ORGANIZATIONID, organizationNoString);
          this.request.getSession().setAttribute("CURRENUSERID", user.getUserId());
          this.request.getSession().setAttribute("CURRENUSERNAME", u.getName());
          this.request.getSession().setAttribute("skinstyle", resultMsg);
          this.request.getSession().setAttribute("useKey", "Y");
          Map<String, Integer> sessionMap = (Map) SpringContextHelper.getBean("sessionMap");
          Integer sessionTime = (Integer) sessionMap.get("session");
          this.request.getSession().setMaxInactiveInterval(sessionTime.intValue() * 60);
          OperateLog operateLog = new OperateLog();
          operateLog.setOperator(u.getId());
          operateLog.setOperateDate(new Date());
          operateLog.setMark(
              (String) this.request.getSession().getAttribute(ActionConstant.REGISTERID));
          operateLog.setOperateIp(this.request.getRemoteAddr());
          operateLog.setOperateContent("综合会员端" + u.getId() + "登录了!");
          operateLog.setOperateLogType(3000);
          operateLog.setOperatorType(LogConstant.OPERATORTYPE);
          this.operateLogService.add(operateLog);
          return "success";
        }
        OperateLog operateLog = new OperateLog();
        User u = this.userService.loadUserById(user.getUserId(), true, true, true);
        if (u != null) {
          operateLog.setMark(u.getMemberInfo().getMemberNo());
        }
        String id = this.request.getParameter("username");
        operateLog.setOperator(id);
        operateLog.setOperateDate(new Date());
        operateLog.setOperateIp(this.request.getRemoteAddr());
        int num = resultMsg.indexOf(',');
        String resultStr = resultMsg.substring(0, num);
        operateLog.setOperateContent("综合会员端" + id + "由于" + resultStr + "而登录失败!");
        operateLog.setOperateLogType(3000);
        operateLog.setOperatorType(LogConstant.OPERATORTYPE);
        this.operateLogService.add(operateLog);
        this.request.getSession().setAttribute(ActionConstant.RESULTMSG, resultMsg);
        this.request.getSession().setAttribute(ActionConstant.RESULTVAULE, Integer.valueOf(-1));
        this.request.setAttribute("name", this.request.getParameter("username"));
        return "error";
      }
      this.request.getSession().setAttribute(ActionConstant.RESULTMSG, "会员状态异常,无法登录!");
      this.request.getSession().setAttribute(ActionConstant.RESULTVAULE, Integer.valueOf(-1));
      this.request.setAttribute("name", this.request.getParameter("username"));
      return "error";
    }
    this.request.getSession().setAttribute(ActionConstant.RESULTMSG, "用户名不存在,无法登录!");
    this.request.getSession().setAttribute(ActionConstant.RESULTVAULE, Integer.valueOf(-1));
    this.request.setAttribute("name", this.request.getParameter("username"));
    return "error";
  }