Files
lotteryLaravel/app/Support/AdminPermissionInheritance.php
kang 0527c7c392 feat: 增强管理员权限与角色管理功能
- 在 SyncAdminAuthorizationCommand 中新增对代理和抽奖菜单操作的同步功能,确保缺失的菜单操作行能够被创建。
- 更新多个控制器中的权限检查逻辑,使用 hasPermissionCode 替代原有的权限验证方式,提升权限管理的灵活性。
- 引入 ApiMessage 统一错误响应格式,确保在权限不足时返回一致的错误信息。
- 更新 AdminRole 和 AdminUser 模型,增强角色与用户的权限管理功能,支持更细粒度的权限控制。
2026-06-03 10:56:36 +08:00

62 lines
1.8 KiB
PHP

<?php
namespace App\Support;
final class AdminPermissionInheritance
{
/**
* @var array<string, list<string>>
*/
private const IMPLIED_BY_SLUG = [
'prd.agent.manage' => ['prd.agent.view'],
'prd.agent.role.manage' => ['prd.agent.role.view', 'prd.agent.view'],
'prd.agent.user.manage' => ['prd.agent.user.view', 'prd.agent.view'],
'prd.integration.manage' => ['prd.integration.view'],
'prd.wallet_reconcile.manage' => ['prd.wallet_reconcile.view'],
'prd.draw_result.manage' => ['prd.draw_result.view'],
'prd.odds.manage' => ['prd.odds.view'],
'prd.risk_cap.manage' => ['prd.risk_cap.view'],
'prd.rebate.manage' => ['prd.rebate.view'],
'prd.jackpot.manage' => ['prd.jackpot.view'],
'prd.payout.manage' => ['prd.payout.view'],
'prd.payout.review' => ['prd.payout.view'],
'prd.report.export' => ['prd.report.view'],
'prd.risk.manage' => ['prd.risk.view'],
];
/**
* @param list<string> $permissionSlugs
* @return list<string>
*/
public static function expand(array $permissionSlugs): array
{
$expanded = [];
foreach ($permissionSlugs as $slug) {
if (! is_string($slug) || $slug === '') {
continue;
}
self::appendWithImplications($expanded, $slug);
}
return array_values(array_keys($expanded));
}
/**
* @param array<string, true> $accumulator
*/
private static function appendWithImplications(array &$accumulator, string $slug): void
{
if (isset($accumulator[$slug])) {
return;
}
$accumulator[$slug] = true;
foreach (self::IMPLIED_BY_SLUG[$slug] ?? [] as $implied) {
self::appendWithImplications($accumulator, $implied);
}
}
}