kang
1d31f9e872
- 新增后台 RBAC 相关文档，提供权限目录与维护命令说明。 - 移除不必要的角色资源同步检查，简化权限审计命令。 - 更新权限描述与同步逻辑，确保一致性与可维护性。 - 统一权限注册表，替换过时的权限别名，增强代码可读性。
110 lines
3.0 KiB
PHP
110 lines
3.0 KiB
PHP
<?php
|
|
|
|
namespace App\Support;
|
|
|
|
final class AdminPermissionBridge
|
|
{
|
|
/** @var array<string, string> */
|
|
private const DEPRECATED_LEGACY_SLUG_ALIASES = [
|
|
'prd.audit.all' => 'prd.audit.view',
|
|
'prd.audit.self' => 'prd.audit.view',
|
|
'prd.audit.finance' => 'prd.audit.view',
|
|
'prd.report.all' => 'prd.report.view',
|
|
'prd.report.risk' => 'prd.report.view',
|
|
'prd.report.finance' => 'prd.report.view',
|
|
'prd.report.player' => 'prd.report.view',
|
|
];
|
|
|
|
/**
|
|
* 将请求或历史数据中的 `prd.*` 归一为当前 Registry 目录中的 slug。
|
|
*
|
|
* @param list<string> $slugs
|
|
* @return list<string>
|
|
*/
|
|
public static function normalizeCanonicalLegacySlugs(array $slugs): array
|
|
{
|
|
$canonical = [];
|
|
$known = array_fill_keys(self::allLegacySlugs(), true);
|
|
|
|
foreach ($slugs as $slug) {
|
|
if (! is_string($slug) || $slug === '') {
|
|
continue;
|
|
}
|
|
|
|
if (isset(self::DEPRECATED_LEGACY_SLUG_ALIASES[$slug])) {
|
|
$slug = self::DEPRECATED_LEGACY_SLUG_ALIASES[$slug];
|
|
}
|
|
|
|
if (isset($known[$slug])) {
|
|
$canonical[$slug] = true;
|
|
}
|
|
}
|
|
|
|
$keys = array_keys($canonical);
|
|
sort($keys);
|
|
|
|
return $keys;
|
|
}
|
|
|
|
/** @return array<string, list<string>> */
|
|
public static function legacyMap(): array
|
|
{
|
|
/** @var array<string, list<string>> */
|
|
return config('admin_permissions.legacy_map', []);
|
|
}
|
|
|
|
/** @return list<string> */
|
|
public static function allLegacySlugs(): array
|
|
{
|
|
$keys = array_keys(self::legacyMap());
|
|
sort($keys);
|
|
|
|
return $keys;
|
|
}
|
|
|
|
/** @return list<string> */
|
|
public static function menuActionCodesForLegacy(string $legacySlug): array
|
|
{
|
|
return array_values(array_unique(self::legacyMap()[$legacySlug] ?? []));
|
|
}
|
|
|
|
/**
|
|
* 若管理员拥有的任意 menu_action.permission_code 落在某 `prd.*` 映射集合内，则视为拥有该 `prd.*`
|
|
*（与路由中间件「满足其一」及 Next 侧栏 `requiredAny` 语义一致）。
|
|
*
|
|
* @param list<string> $menuActionCodes
|
|
* @return list<string>
|
|
*/
|
|
public static function legacySlugsGrantedByMenuActionCodes(array $menuActionCodes): array
|
|
{
|
|
if ($menuActionCodes === []) {
|
|
return [];
|
|
}
|
|
|
|
$set = [];
|
|
foreach ($menuActionCodes as $code) {
|
|
if (is_string($code) && $code !== '') {
|
|
$set[$code] = true;
|
|
}
|
|
}
|
|
if ($set === []) {
|
|
return [];
|
|
}
|
|
|
|
$out = [];
|
|
foreach (self::legacyMap() as $legacySlug => $requiredCodes) {
|
|
foreach ($requiredCodes as $code) {
|
|
if (isset($set[$code])) {
|
|
$out[$legacySlug] = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
$keys = array_keys($out);
|
|
sort($keys);
|
|
|
|
return $keys;
|
|
}
|
|
}
|