Files
lotteryLaravel/app/Http/Controllers/Api/V1/Admin/Player/AdminPlayerDestroyController.php
kang a10135d6ee feat: 增强玩家管理功能,集成接入站点权限控制
在多个玩家相关控制器中引入 AdminSiteScope,确保管理员在执行操作前具备相应的接入站点权限。更新 Player 相关请求以支持 site_code 参数,增强权限验证逻辑,确保系统安全性与灵活性。同时,新增 AdminUser 模型方法以获取可访问的站点 ID 列表,优化权限管理。
2026-05-27 13:36:23 +08:00

60 lines
1.7 KiB
PHP

<?php
namespace App\Http\Controllers\Api\V1\Admin\Player;
use App\Models\Player;
use App\Lottery\ErrorCode;
use App\Support\ApiResponse;
use Illuminate\Http\Request;
use Illuminate\Http\JsonResponse;
use App\Http\Controllers\Controller;
use App\Support\AdminSiteScope;
use Illuminate\Database\Eloquent\Relations\HasMany;
/** DELETE /api/v1/admin/players/{player} */
final class AdminPlayerDestroyController extends Controller
{
public function __invoke(Request $request, Player $player): JsonResponse
{
$admin = $request->lotteryAdmin();
abort_if($admin === null, 401);
if ($denied = AdminSiteScope::denyUnlessPlayerAccessible($admin, $player)) {
return $denied;
}
$hasWallets = Player::query()
->whereKey($player->getKey())
->whereHas('wallets', static fn (HasMany $q) => $q->whereRaw('balance != 0'))
->exists();
if ($hasWallets) {
return ApiResponse::error(
'该玩家钱包仍有余额,请先清空后再删除',
ErrorCode::ValidationFailed->value,
null,
422,
);
}
$hasTickets = Player::query()
->whereKey($player->getKey())
->whereHas('ticketOrders')
->exists();
if ($hasTickets) {
return ApiResponse::error(
'该玩家存在注单记录,无法删除',
ErrorCode::ValidationFailed->value,
null,
422,
);
}
$player->wallets()->delete();
$player->delete();
return ApiResponse::success(['deleted' => true]);
}
}