相关记录表admin_id关联当前管理员id

server/app/dice/controller/player/DicePlayerController.php

@@ -6,7 +6,9 @@
 // +----------------------------------------------------------------------
 namespace app\dice\controller\player;
 
+use app\dice\helper\AdminScopeHelper;
 use app\dice\model\lottery_config\DiceLotteryConfig;
+use plugin\saiadmin\app\model\system\SystemUser;
 use plugin\saiadmin\basic\BaseController;
 use app\dice\logic\player\DicePlayerLogic;
 use app\dice\validate\player\DicePlayerValidate;
@@ -44,6 +46,35 @@ class DicePlayerController extends BaseController
         return $this->success($data);
     }
 
+    /**
+     * 获取后台管理员选项（SystemUser.id、username、realname），供 admin_id 下拉使用
+     * 根据当前登录用户权限过滤（超级管理员可见全部，普通管理员按部门）
+     * @param Request $request
+     * @return Response 返回 [ ['id' => int, 'username' => string, 'realname' => string], ... ]
+     */
+    #[Permission('大富翁-玩家列表', 'dice:player:index:index')]
+    public function getSystemUserOptions(Request $request): Response
+    {
+        $query = SystemUser::field('id,username,realname')->where('status', 1)->order('id', 'asc');
+        if (isset($this->adminInfo['id']) && (int) $this->adminInfo['id'] > 1) {
+            $deptList = $this->adminInfo['deptList'] ?? [];
+            if (!empty($deptList)) {
+                $query->auth($deptList);
+            }
+        }
+        $list = $query->select();
+        $data = $list->map(function ($item) {
+            $label = trim((string) ($item['realname'] ?? '')) ?: (string) ($item['username'] ?? '');
+            return [
+                'id' => (int) $item['id'],
+                'username' => (string) ($item['username'] ?? ''),
+                'realname' => (string) ($item['realname'] ?? ''),
+                'label' => $label ?: (string) $item['id'],
+            ];
+        })->toArray();
+        return $this->success($data);
+    }
+
     /**
      * 数据列表
      * @param Request $request
@@ -61,6 +92,7 @@ class DicePlayerController extends BaseController
             ['lottery_config_id', ''],
         ]);
         $query = $this->logic->search($where);
+        AdminScopeHelper::applyAdminScope($query, $this->adminInfo ?? null);
         $query->with(['diceLotteryConfig']);
         $data = $this->logic->getList($query);
         return $this->success($data);
@@ -76,12 +108,15 @@ class DicePlayerController extends BaseController
     {
         $id = $request->input('id', '');
         $model = $this->logic->read($id);
-        if ($model) {
-            $data = is_array($model) ? $model : $model->toArray();
-            return $this->success($data);
-        } else {
+        if (!$model) {
             return $this->fail('未查找到信息');
         }
+        $allowedIds = AdminScopeHelper::getAllowedAdminIds($this->adminInfo ?? null);
+        if ($allowedIds !== null && !in_array((int) ($model->admin_id ?? 0), $allowedIds, true)) {
+            return $this->fail('无权限查看该玩家');
+        }
+        $data = is_array($model) ? $model : $model->toArray();
+        return $this->success($data);
     }
 
     /**
@@ -94,6 +129,10 @@ class DicePlayerController extends BaseController
     {
         $data = $request->post();
         $this->validate('save', $data);
+        // 新增时若未选择管理员，默认使用当前登录用户
+        if (empty($data['admin_id']) && isset($this->adminInfo['id']) && (int) $this->adminInfo['id'] > 0) {
+            $data['admin_id'] = (int) $this->adminInfo['id'];
+        }
         $result = $this->logic->add($data);
         if ($result) {
             return $this->success('添加成功');
@@ -112,6 +151,13 @@ class DicePlayerController extends BaseController
     {
         $data = $request->post();
         $this->validate('update', $data);
+        $model = $this->logic->read($data['id'] ?? 0);
+        if ($model) {
+            $allowedIds = AdminScopeHelper::getAllowedAdminIds($this->adminInfo ?? null);
+            if ($allowedIds !== null && !in_array((int) ($model->admin_id ?? 0), $allowedIds, true)) {
+                return $this->fail('无权限修改该玩家');
+            }
+        }
         $result = $this->logic->edit($data['id'], $data);
         if ($result) {
             return $this->success('修改成功');
@@ -136,6 +182,13 @@ class DicePlayerController extends BaseController
         if ($status === null || $status === '') {
             return $this->fail('缺少 status');
         }
+        $model = $this->logic->read($id);
+        if ($model) {
+            $allowedIds = AdminScopeHelper::getAllowedAdminIds($this->adminInfo ?? null);
+            if ($allowedIds !== null && !in_array((int) ($model->admin_id ?? 0), $allowedIds, true)) {
+                return $this->fail('无权限修改该玩家');
+            }
+        }
         $this->logic->edit($id, ['status' => (int) $status]);
         return $this->success('修改成功');
     }
@@ -152,6 +205,22 @@ class DicePlayerController extends BaseController
         if (empty($ids)) {
             return $this->fail('请选择要删除的数据');
         }
+        $ids = is_array($ids) ? $ids : explode(',', (string) $ids);
+        $allowedIds = AdminScopeHelper::getAllowedAdminIds($this->adminInfo ?? null);
+        if ($allowedIds !== null) {
+            $models = $this->logic->model->whereIn('id', $ids)->column('admin_id', 'id');
+            $validIds = [];
+            foreach ($ids as $id) {
+                $adminId = (int) ($models[$id] ?? 0);
+                if (in_array($adminId, $allowedIds, true)) {
+                    $validIds[] = $id;
+                }
+            }
+            $ids = $validIds;
+            if (empty($ids)) {
+                return $this->fail('无权限删除所选玩家');
+            }
+        }
         $result = $this->logic->destroy($ids);
         if ($result) {
             return $this->success('删除成功');