kang
0841fbed32
- 在多个控制器中引入 agent_node_id，以支持基于代理节点的权限和数据过滤。 - 更新 AdminRole 和 AdminUser 模型，新增角色范围和代理节点相关功能，提升角色管理的灵活性。 - 在请求验证中添加 agent_node_id 字段，确保 API 接口支持代理节点的相关操作。 - 优化 LotterySettings 服务，支持批量写入设置，提升配置管理的效率。 - 更新仪表板和报告服务，增强数据统计功能，确保管理员能够获取更全面的统计信息。
73 lines
2.1 KiB
PHP
73 lines
2.1 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\V1\Admin\Agent;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Requests\Admin\AgentDelegationGrantSyncRequest;
|
|
use App\Models\AgentNode;
|
|
use App\Services\Agent\AgentDelegationService;
|
|
use App\Services\AuditLogger;
|
|
use App\Support\AdminAgentNodeAccess;
|
|
use App\Support\AgentDelegationAuthorization;
|
|
use App\Support\ApiMessage;
|
|
use App\Support\ApiResponse;
|
|
use App\Lottery\ErrorCode;
|
|
use Illuminate\Http\JsonResponse;
|
|
|
|
final class AgentNodeDelegationGrantSyncController extends Controller
|
|
{
|
|
public function __invoke(
|
|
AgentDelegationGrantSyncRequest $request,
|
|
AgentNode $agent_node,
|
|
AgentDelegationService $service,
|
|
): JsonResponse {
|
|
$admin = $request->lotteryAdmin();
|
|
abort_if($admin === null, 401);
|
|
|
|
$denied = AdminAgentNodeAccess::denyUnlessNodeVisible($admin, $agent_node);
|
|
if ($denied !== null) {
|
|
return $denied;
|
|
}
|
|
|
|
if ($agent_node->isRoot()) {
|
|
return ApiMessage::errorResponse(
|
|
$request,
|
|
'admin.agent_delegation_root_denied',
|
|
ErrorCode::ValidationFailed->value,
|
|
null,
|
|
422,
|
|
);
|
|
}
|
|
|
|
if (! AgentDelegationAuthorization::childIsManageableBy($admin, $agent_node)) {
|
|
return ApiMessage::errorResponse(
|
|
$request,
|
|
'admin.agent_delegation_manage_denied',
|
|
ErrorCode::AdminForbidden->value,
|
|
null,
|
|
403,
|
|
);
|
|
}
|
|
|
|
$before = $service->listForChild($agent_node);
|
|
$grants = $request->validated('grants');
|
|
$after = $service->syncGrants($admin, $agent_node, $grants);
|
|
|
|
AuditLogger::recordForAdmin(
|
|
$admin,
|
|
$request,
|
|
'agent',
|
|
'agent.delegation.sync',
|
|
'agent_node',
|
|
(string) $agent_node->id,
|
|
['grants' => $before],
|
|
['grants' => $after],
|
|
);
|
|
|
|
return ApiResponse::success([
|
|
'child_agent_id' => (int) $agent_node->id,
|
|
'grants' => $after,
|
|
]);
|
|
}
|
|
}
|