一个用java编写的功能强大的OA系统

				package com.redmoon.oa.message;																import java.sql.*;				import javax.servlet.http.HttpServletRequest;				import cn.js.fan.db.*;				import cn.js.fan.web.Global;				import org.apache.log4j.Logger;								public class Privilege {				    String connname = Global.defaultDB;								    Logger logger = Logger.getLogger(this.getClass().getName());								    public Privilege() {				    }												    public boolean canSendDraft(HttpServletRequest request, int id) {				        MessageDb md = new MessageDb();				        md = (MessageDb)md.getMessageDb(id);				        if (!md.isDraft())				            return false;				        com.redmoon.oa.pvg.Privilege pvg = new com.redmoon.oa.pvg.Privilege();				        if (md.getSender().equals(pvg.getUser(request)))				            return true;				        else				            return false;				    }								    public boolean canManage(HttpServletRequest request, String[] ids) {				        com.redmoon.oa.pvg.Privilege pvg = new com.redmoon.oa.pvg.Privilege();				        String username = pvg.getUser(request);				        				        boolean isvalid = false;				        int len = ids.length;				        String str = "";				        for (int i = 0; i < len; i++)				            if (str.equals(""))				                str += ids[i];				            else				                str += "," + ids[i];				        str = "(" + str + ")";				        String receiver = null;				        String sql = "select receiver,isDraft,sender from oa_message where id in " + str;				        Conn conn = new Conn(connname);				        try {				            ResultSet rs = conn.executeQuery(sql);				            if (rs != null) {				                while (rs.next()) {				                    receiver = rs.getString(1);				                    boolean isDraft = rs.getInt(2)==1;				                    String sender = rs.getString(3);				                    if (isDraft) {				                        if (!sender.equals(username)) {				                            isvalid = false;				                            break;				                        }				                    }				                    else {				                        if (!receiver.equals(username)) {				                            isvalid = false;				                            break;				                        }				                    }				                    isvalid = true;				                }				            }				        } catch (SQLException e) {				            logger.error("canManage:" + e.getMessage());				        } finally {				            if (conn != null) {				                conn.close();				                conn = null;				            }				        }								        return isvalid;				    }								}