webman-buildadmin/app/admin/controller/game/RewardConfig.php

<?php

namespace app\admin\controller\game;

use Throwable;
use app\common\controller\Backend;
use support\think\Db;
use support\Response;
use Webman\Http\Request as WebmanRequest;

/**
 * 游戏奖励配置
 */
class RewardConfig extends Backend
{
    /**
     * GameRewardConfig模型对象
     * @var object|null
     * @phpstan-var \app\common\model\GameRewardConfig|null
     */
    protected ?object $model = null;

    /**
     * 数据范围：非超管仅本人 + 下级管理员负责的渠道
     */
    protected bool|string|int $dataLimit = 'parent';

    /**
     * 列表/删除按渠道字段限制（实际值为渠道 ID）
     */
    protected string $dataLimitField = 'game_channel_id';

    /**
     * 表无 admin_id，勿自动写入
     */
    protected bool $dataLimitFieldAutoFill = false;

    protected array|string $preExcludeFields = ['id', 'create_time', 'update_time'];

    protected array $withJoinTable = ['gameChannel'];

    protected string|array $quickSearchField = ['id'];

    protected function initController(WebmanRequest $request): ?Response
    {
        $this->model = new \app\common\model\GameRewardConfig();
        return null;
    }

    /**
     * 将可访问管理员 ID 转换为可访问渠道 ID
     *
     * @return list<int|string>
     */
    protected function getDataLimitAdminIds(): array
    {
        if (!$this->dataLimit || !$this->auth || $this->auth->isSuperAdmin()) {
            return [];
        }
        $adminIds = parent::getDataLimitAdminIds();
        if ($adminIds === []) {
            return [];
        }
        $channelIds = Db::name('game_channel')->where('admin_id', 'in', $adminIds)->column('id');
        if ($channelIds === []) {
            return [-1];
        }
        return array_values(array_unique($channelIds));
    }

    /**
     * 新增：非超管仅可写入权限内渠道
     * @throws Throwable
     */
    protected function _add(): Response
    {
        if ($this->request && $this->request->method() === 'POST' && !$this->auth->isSuperAdmin()) {
            $allowedChannelIds = $this->getDataLimitAdminIds();
            $cid = $this->request->post('game_channel_id');
            if ($cid === null || $cid === '' || ($allowedChannelIds !== [] && !in_array($cid, $allowedChannelIds))) {
                return $this->error(__('You have no permission'));
            }
        }
        return parent::_add();
    }

    /**
     * 编辑：非超管锁定渠道，不允许跨渠道改写
     * @throws Throwable
     */
    protected function _edit(): Response
    {
        $pk = $this->model->getPk();
        $id = $this->request ? ($this->request->post($pk) ?? $this->request->get($pk)) : null;
        $row = $this->model->find($id);
        if (!$row) {
            return $this->error(__('Record not found'));
        }

        $dataLimitAdminIds = $this->getDataLimitAdminIds();
        if ($dataLimitAdminIds && !in_array($row[$this->dataLimitField], $dataLimitAdminIds)) {
            return $this->error(__('You have no permission'));
        }

        if ($this->request && $this->request->method() === 'POST') {
            $data = $this->request->post();
            if (!$data) {
                return $this->error(__('Parameter %s can not be empty', ['']));
            }

            $data = $this->applyInputFilter($data);
            $data = $this->excludeFields($data);

            if (!$this->auth->isSuperAdmin()) {
                $data[$this->dataLimitField] = $row[$this->dataLimitField];
            }

            $result = false;
            $this->model->startTrans();
            try {
                if ($this->modelValidate) {
                    $validate = str_replace("\\model\\", "\\validate\\", get_class($this->model));
                    if (class_exists($validate)) {
                        $validate = new $validate();
                        if ($this->modelSceneValidate) {
                            $validate->scene('edit');
                        }
                        $data[$pk] = $row[$pk];
                        $validate->check($data);
                    }
                }
                $result = $row->save($data);
                $this->model->commit();
            } catch (Throwable $e) {
                $this->model->rollback();
                return $this->error($e->getMessage());
            }
            if ($result !== false) {
                return $this->success(__('Update successful'));
            }
            return $this->error(__('No rows updated'));
        }

        return $this->success('', ['row' => $row]);
    }

    /**
     * 查看
     * @throws Throwable
     */
    protected function _index(): Response
    {
        // 如果是 select 则转发到 select 方法，若未重写该方法，其实还是继续执行 index
        if ($this->request && $this->request->get('select')) {
            return $this->select($this->request);
        }

        /**
         * 1. withJoin 不可使用 alias 方法设置表别名，别名将自动使用关联模型名称（小写下划线命名规则）
         * 2. 以下的别名设置了主表别名，同时便于拼接查询参数等
         * 3. paginate 数据集可使用链式操作 each(function($item, $key) {}) 遍历处理
         */
        list($where, $alias, $limit, $order) = $this->queryBuilder();
        $res = $this->model
            ->withJoin($this->withJoinTable, $this->withJoinType)
            ->with($this->withJoinTable)
            ->visible(['gameChannel' => ['name']])
            ->alias($alias)
            ->where($where)
            ->order($order)
            ->paginate($limit);

        return $this->success('', [
            'list'   => $res->items(),
            'total'  => $res->total(),
            'remark' => get_route_remark(),
        ]);
    }

    /**
     * 若需重写查看、编辑、删除等方法，请复制 @see \app\admin\library\traits\Backend 中对应的方法至此进行重写
     */
}