- 在 SyncAdminAuthorizationCommand 中新增对代理和抽奖菜单操作的同步功能,确保缺失的菜单操作行能够被创建。 - 更新多个控制器中的权限检查逻辑,使用 hasPermissionCode 替代原有的权限验证方式,提升权限管理的灵活性。 - 引入 ApiMessage 统一错误响应格式,确保在权限不足时返回一致的错误信息。 - 更新 AdminRole 和 AdminUser 模型,增强角色与用户的权限管理功能,支持更细粒度的权限控制。
62 lines
1.8 KiB
PHP
62 lines
1.8 KiB
PHP
<?php
|
|
|
|
namespace App\Support;
|
|
|
|
final class AdminPermissionInheritance
|
|
{
|
|
/**
|
|
* @var array<string, list<string>>
|
|
*/
|
|
private const IMPLIED_BY_SLUG = [
|
|
'prd.agent.manage' => ['prd.agent.view'],
|
|
'prd.agent.role.manage' => ['prd.agent.role.view', 'prd.agent.view'],
|
|
'prd.agent.user.manage' => ['prd.agent.user.view', 'prd.agent.view'],
|
|
'prd.integration.manage' => ['prd.integration.view'],
|
|
'prd.wallet_reconcile.manage' => ['prd.wallet_reconcile.view'],
|
|
'prd.draw_result.manage' => ['prd.draw_result.view'],
|
|
'prd.odds.manage' => ['prd.odds.view'],
|
|
'prd.risk_cap.manage' => ['prd.risk_cap.view'],
|
|
'prd.rebate.manage' => ['prd.rebate.view'],
|
|
'prd.jackpot.manage' => ['prd.jackpot.view'],
|
|
'prd.payout.manage' => ['prd.payout.view'],
|
|
'prd.payout.review' => ['prd.payout.view'],
|
|
'prd.report.export' => ['prd.report.view'],
|
|
'prd.risk.manage' => ['prd.risk.view'],
|
|
];
|
|
|
|
/**
|
|
* @param list<string> $permissionSlugs
|
|
* @return list<string>
|
|
*/
|
|
public static function expand(array $permissionSlugs): array
|
|
{
|
|
$expanded = [];
|
|
|
|
foreach ($permissionSlugs as $slug) {
|
|
if (! is_string($slug) || $slug === '') {
|
|
continue;
|
|
}
|
|
|
|
self::appendWithImplications($expanded, $slug);
|
|
}
|
|
|
|
return array_values(array_keys($expanded));
|
|
}
|
|
|
|
/**
|
|
* @param array<string, true> $accumulator
|
|
*/
|
|
private static function appendWithImplications(array &$accumulator, string $slug): void
|
|
{
|
|
if (isset($accumulator[$slug])) {
|
|
return;
|
|
}
|
|
|
|
$accumulator[$slug] = true;
|
|
|
|
foreach (self::IMPLIED_BY_SLUG[$slug] ?? [] as $implied) {
|
|
self::appendWithImplications($accumulator, $implied);
|
|
}
|
|
}
|
|
}
|