kang
0841fbed32
- 在多个控制器中引入 agent_node_id，以支持基于代理节点的权限和数据过滤。 - 更新 AdminRole 和 AdminUser 模型，新增角色范围和代理节点相关功能，提升角色管理的灵活性。 - 在请求验证中添加 agent_node_id 字段，确保 API 接口支持代理节点的相关操作。 - 优化 LotterySettings 服务，支持批量写入设置，提升配置管理的效率。 - 更新仪表板和报告服务，增强数据统计功能，确保管理员能够获取更全面的统计信息。
99 lines
3.3 KiB
PHP
99 lines
3.3 KiB
PHP
<?php
|
|
|
|
namespace App\Services\Agent;
|
|
|
|
use App\Models\AdminUser;
|
|
use App\Models\AgentNode;
|
|
use App\Support\AgentDelegationAuthorization;
|
|
use Illuminate\Support\Carbon;
|
|
use Illuminate\Support\Facades\DB;
|
|
|
|
final class AgentDelegationService
|
|
{
|
|
/**
|
|
* @return list<array{
|
|
* menu_action_id: int,
|
|
* permission_code: string,
|
|
* name: string,
|
|
* can_delegate: bool
|
|
* }>
|
|
*/
|
|
public function listForChild(AgentNode $child, ?AdminUser $actor = null): array
|
|
{
|
|
$rows = DB::table('agent_delegation_grants as g')
|
|
->join('admin_menu_actions as ma', 'ma.id', '=', 'g.menu_action_id')
|
|
->where('g.child_agent_id', $child->id)
|
|
->where('ma.status', 1)
|
|
->orderBy('ma.permission_code')
|
|
->get(['g.menu_action_id', 'g.can_delegate', 'ma.permission_code', 'ma.name']);
|
|
|
|
if ($rows->isNotEmpty()) {
|
|
return $rows->map(static fn ($row): array => [
|
|
'menu_action_id' => (int) $row->menu_action_id,
|
|
'permission_code' => (string) $row->permission_code,
|
|
'name' => (string) $row->name,
|
|
'can_delegate' => (bool) $row->can_delegate,
|
|
])->all();
|
|
}
|
|
|
|
if ($actor === null) {
|
|
return [];
|
|
}
|
|
|
|
$codes = $actor->effectiveMenuActionPermissionCodes();
|
|
if ($codes === []) {
|
|
return [];
|
|
}
|
|
|
|
return DB::table('admin_menu_actions')
|
|
->where('status', 1)
|
|
->whereIn('permission_code', $codes)
|
|
->orderBy('permission_code')
|
|
->get(['id', 'permission_code', 'name'])
|
|
->map(static fn ($row): array => [
|
|
'menu_action_id' => (int) $row->id,
|
|
'permission_code' => (string) $row->permission_code,
|
|
'name' => (string) $row->name,
|
|
'can_delegate' => false,
|
|
])
|
|
->all();
|
|
}
|
|
|
|
/**
|
|
* @param list<array{menu_action_id: int, can_delegate?: bool}> $grants
|
|
* @return list<array{menu_action_id: int, permission_code: string, name: string, can_delegate: bool}>
|
|
*/
|
|
public function syncGrants(AdminUser $actor, AgentNode $child, array $grants): array
|
|
{
|
|
AgentDelegationAuthorization::assertGrantsAllowed($actor, $child, $grants);
|
|
|
|
$parentId = (int) ($child->parent_id ?? 0);
|
|
if ($parentId <= 0) {
|
|
throw new \InvalidArgumentException('Child agent must have parent.');
|
|
}
|
|
|
|
$now = Carbon::now();
|
|
|
|
DB::transaction(function () use ($actor, $child, $grants, $parentId, $now): void {
|
|
DB::table('agent_delegation_grants')
|
|
->where('child_agent_id', $child->id)
|
|
->delete();
|
|
|
|
foreach ($grants as $grant) {
|
|
DB::table('agent_delegation_grants')->insert([
|
|
'parent_agent_id' => $parentId,
|
|
'child_agent_id' => $child->id,
|
|
'menu_action_id' => (int) $grant['menu_action_id'],
|
|
'can_delegate' => ! empty($grant['can_delegate']),
|
|
'granted_by' => $actor->id,
|
|
'granted_at' => $now,
|
|
'created_at' => $now,
|
|
'updated_at' => $now,
|
|
]);
|
|
}
|
|
});
|
|
|
|
return $this->listForChild($child->fresh());
|
|
}
|
|
}
|