feat: 增强管理员功能与数据处理
- 在多个控制器中引入 agent_node_id,以支持基于代理节点的权限和数据过滤。 - 更新 AdminRole 和 AdminUser 模型,新增角色范围和代理节点相关功能,提升角色管理的灵活性。 - 在请求验证中添加 agent_node_id 字段,确保 API 接口支持代理节点的相关操作。 - 优化 LotterySettings 服务,支持批量写入设置,提升配置管理的效率。 - 更新仪表板和报告服务,增强数据统计功能,确保管理员能够获取更全面的统计信息。
This commit is contained in:
@@ -78,6 +78,78 @@ final class AdminUser extends Authenticatable
|
||||
*
|
||||
* @param list<string> $slugs
|
||||
*/
|
||||
/**
|
||||
* @param list<int> $roleIds
|
||||
*/
|
||||
public function syncAgentRoleIds(int $agentNodeId, array $roleIds): void
|
||||
{
|
||||
$roleIds = array_values(array_unique(array_map(static fn ($id): int => (int) $id, $roleIds)));
|
||||
|
||||
DB::transaction(function () use ($agentNodeId, $roleIds): void {
|
||||
DB::table('admin_user_agent_roles')
|
||||
->where('admin_user_id', $this->id)
|
||||
->where('agent_node_id', $agentNodeId)
|
||||
->delete();
|
||||
|
||||
$now = now();
|
||||
foreach ($roleIds as $roleId) {
|
||||
DB::table('admin_user_agent_roles')->insert([
|
||||
'admin_user_id' => $this->id,
|
||||
'agent_node_id' => $agentNodeId,
|
||||
'role_id' => $roleId,
|
||||
'granted_at' => $now,
|
||||
]);
|
||||
}
|
||||
|
||||
$siteId = (int) (AgentNode::query()->where('id', $agentNodeId)->value('admin_site_id') ?? 0);
|
||||
if ($siteId > 0) {
|
||||
DB::table('admin_user_site_roles')
|
||||
->where('admin_user_id', $this->id)
|
||||
->where('site_id', $siteId)
|
||||
->delete();
|
||||
|
||||
foreach ($roleIds as $roleId) {
|
||||
DB::table('admin_user_site_roles')->insert([
|
||||
'admin_user_id' => $this->id,
|
||||
'site_id' => $siteId,
|
||||
'role_id' => $roleId,
|
||||
'granted_at' => $now,
|
||||
]);
|
||||
}
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
/**
|
||||
* @return list<string>
|
||||
*/
|
||||
private function roleMenuActionPermissionCodes(): array
|
||||
{
|
||||
$agentId = $this->primaryAgentNodeId();
|
||||
if ($agentId !== null) {
|
||||
$fromAgent = DB::table('admin_user_agent_roles as uar')
|
||||
->join('admin_role_menu_actions as rma', 'rma.role_id', '=', 'uar.role_id')
|
||||
->join('admin_menu_actions as ma', 'ma.id', '=', 'rma.menu_action_id')
|
||||
->where('uar.admin_user_id', $this->id)
|
||||
->where('uar.agent_node_id', $agentId)
|
||||
->where('ma.status', 1)
|
||||
->pluck('ma.permission_code')
|
||||
->all();
|
||||
|
||||
if ($fromAgent !== []) {
|
||||
return $fromAgent;
|
||||
}
|
||||
}
|
||||
|
||||
return DB::table('admin_user_site_roles as usr')
|
||||
->join('admin_role_menu_actions as rma', 'rma.role_id', '=', 'usr.role_id')
|
||||
->join('admin_menu_actions as ma', 'ma.id', '=', 'rma.menu_action_id')
|
||||
->where('usr.admin_user_id', $this->id)
|
||||
->where('ma.status', 1)
|
||||
->pluck('ma.permission_code')
|
||||
->all();
|
||||
}
|
||||
|
||||
public function syncRoleSlugsForDefaultSite(array $slugs): void
|
||||
{
|
||||
$siteId = self::defaultAdminSiteId();
|
||||
@@ -114,6 +186,25 @@ final class AdminUser extends Authenticatable
|
||||
return $this->roles()->where('admin_roles.slug', self::ROLE_SUPER_ADMIN)->exists();
|
||||
}
|
||||
|
||||
public function primaryAgentNodeId(): ?int
|
||||
{
|
||||
$id = DB::table('admin_user_agents')
|
||||
->where('admin_user_id', $this->id)
|
||||
->value('agent_node_id');
|
||||
|
||||
return $id !== null ? (int) $id : null;
|
||||
}
|
||||
|
||||
public function primaryAgentNode(): ?AgentNode
|
||||
{
|
||||
$id = $this->primaryAgentNodeId();
|
||||
if ($id === null) {
|
||||
return null;
|
||||
}
|
||||
|
||||
return AgentNode::query()->find($id);
|
||||
}
|
||||
|
||||
/**
|
||||
* 可访问的 admin_sites.id 列表;`null` 表示不限制(超管)。
|
||||
*
|
||||
@@ -125,6 +216,11 @@ final class AdminUser extends Authenticatable
|
||||
return null;
|
||||
}
|
||||
|
||||
$agent = $this->primaryAgentNode();
|
||||
if ($agent !== null) {
|
||||
return [(int) $agent->admin_site_id];
|
||||
}
|
||||
|
||||
$ids = DB::table('admin_user_site_roles')
|
||||
->where('admin_user_id', $this->id)
|
||||
->distinct()
|
||||
@@ -193,13 +289,7 @@ final class AdminUser extends Authenticatable
|
||||
return array_keys($out);
|
||||
}
|
||||
|
||||
$fromRoles = DB::table('admin_user_site_roles as usr')
|
||||
->join('admin_role_menu_actions as rma', 'rma.role_id', '=', 'usr.role_id')
|
||||
->join('admin_menu_actions as ma', 'ma.id', '=', 'rma.menu_action_id')
|
||||
->where('usr.admin_user_id', $this->id)
|
||||
->where('ma.status', 1)
|
||||
->pluck('ma.permission_code')
|
||||
->all();
|
||||
$fromRoles = $this->roleMenuActionPermissionCodes();
|
||||
|
||||
$merged = [];
|
||||
foreach (array_merge($fromRoles, $this->directMenuActionPermissionCodes()) as $c) {
|
||||
|
||||
Reference in New Issue
Block a user