Files
lotteryLaravel/app/Http/Controllers/Api/V1/Admin/Player/AdminPlayerUpdateController.php
kang 992195b00c
Some checks failed
lotterLaravel CI / test (push) Has been cancelled
lotterLaravel E2E / e2e-api (push) Has been cancelled
feat(agent-profile): 限制代理及玩家返点和分成范围,增强权限校验
- 添加ensureSuperAdmin方法,限制管理员设置操作权限
- 在AdminSettingController接口中新增权限检查,防止非超级管理员操作
- AdminPlayerIndexController新增direct agent筛选支持
- AdminPlayerUpdateController新增对信用玩家默认币别变更的拒绝逻辑
- 新增WalletSettlementBillsController,实现玩家信用盘账期账单摘要接口
- AgentProfileService调整,新增返点限额和分享比例自动下调机制,保持子代理及玩家配置不超父级
- AgentProfileService增加can_grant_extra_rebate权限继承限制,阻止无权限代理开启
- AgentSettlementPeriodCloseService增加玩家账单回水信用释放逻辑,确保信用额度同步
- PlayerCreditService新增释放账单回水对应信用逻辑,维护账期信用一致性
- TicketPlacementService和TicketPreviewService新增信用玩家投注币别匹配校验,防止币别不符
- PlayerLedgerLogsService优化信用额度计算,增加可用额度上下限限制,防止负值和超限
- 调整后台管理导航,仅超管可见设置入口,强化权限隔离
- 路由新增玩家信用账单查询接口
- 补充多项AgentProfile相关单元测试覆盖额度限制、返点继承、返点下调场景及权限限制
- 增加站点管理员登录测试,验证系统设置菜单不可见,提升用户权限体验
2026-07-01 15:35:46 +08:00

132 lines
5.1 KiB
PHP

<?php
namespace App\Http\Controllers\Api\V1\Admin\Player;
use App\Models\Player;
use App\Models\AgentNode;
use App\Support\ApiResponse;
use App\Support\AdminSiteScope;
use Illuminate\Http\JsonResponse;
use App\Support\PlayerFundingMode;
use Illuminate\Support\Facades\DB;
use App\Support\PlayerApiPresenter;
use App\Http\Controllers\Controller;
use App\Services\Agent\AgentProfileService;
use App\Services\Agent\RebateLimitValidator;
use App\Services\Player\PlayerCreditService;
use Illuminate\Validation\ValidationException;
use App\Services\Player\PlayerRebateProfileService;
use App\Http\Requests\Admin\AdminPlayerUpdateRequest;
/** PUT /api/v1/admin/players/{player} */
final class AdminPlayerUpdateController extends Controller
{
public function __invoke(
AdminPlayerUpdateRequest $request,
Player $player,
AgentProfileService $agentProfileService,
PlayerCreditService $playerCreditService,
RebateLimitValidator $rebateLimitValidator,
PlayerRebateProfileService $rebateProfileService,
): JsonResponse {
$admin = $request->lotteryAdmin();
abort_if($admin === null, 401);
if ($denied = AdminSiteScope::denyUnlessPlayerAccessible($admin, $player)) {
return $denied;
}
$data = $request->validated();
if (isset($data['status'])) {
$data['status'] = (int) $data['status'];
}
if ($request->has('default_currency')
&& PlayerFundingMode::usesCredit($player)
&& strtoupper((string) $request->input('default_currency')) !== strtoupper((string) $player->default_currency)) {
throw ValidationException::withMessages([
'default_currency' => ['credit_player_currency_locked'],
]);
}
$agent = $player->agent_node_id !== null
? AgentNode::query()->find((int) $player->agent_node_id)
: null;
if (
($request->has('credit_limit') || $request->has('rebate_rate') || $request->has('extra_rebate_rate'))
&& ! PlayerFundingMode::usesCredit($player)
) {
throw ValidationException::withMessages([
'credit_limit' => ['wallet_player_prohibited'],
]);
}
$rebateRate = null;
$extraRebateRate = null;
if ($agent !== null && ($request->has('rebate_rate') || $request->has('extra_rebate_rate'))) {
$existing = DB::table('player_rebate_profiles')
->where('player_id', $player->id)
->where('game_type', '*')
->first();
$rebateRate = $request->has('rebate_rate')
? (float) $request->input('rebate_rate', 0) / 100
: (float) ($existing->rebate_rate ?? 0);
$extraRebateRate = $request->has('extra_rebate_rate')
? (float) $request->input('extra_rebate_rate', 0) / 100
: (float) ($existing->extra_rebate_rate ?? 0);
$rebateLimitValidator->assertPlayerRebateWithinAgent(
$agent,
$rebateRate,
$extraRebateRate,
);
}
if ($request->has('credit_limit') && $agent !== null) {
$newLimit = (int) $request->input('credit_limit', 0);
$creditRow = DB::table('player_credit_accounts')->where('player_id', $player->id)->first();
$previous = (int) ($creditRow->credit_limit ?? 0);
$usedCredit = (int) ($creditRow->used_credit ?? 0) + (int) ($creditRow->frozen_credit ?? 0);
$agentProfileService->adjustPlayerCreditAllocation($agent, $previous, $newLimit, $usedCredit);
$playerCreditService->upsertAccount($player, ['credit_limit' => $newLimit]);
$agentProfileService->refreshAllocatedCredit($agent);
unset($data['credit_limit']);
}
if ($rebateRate !== null || $extraRebateRate !== null) {
DB::table('player_rebate_profiles')->updateOrInsert(
['player_id' => $player->id, 'game_type' => '*'],
[
'inherit_from_agent' => false,
'rebate_rate' => $rebateRate ?? 0,
'extra_rebate_rate' => $extraRebateRate ?? 0,
'updated_at' => now(),
'created_at' => now(),
],
);
unset($data['rebate_rate'], $data['extra_rebate_rate']);
}
if ($request->has('rebate_profiles') && $agent !== null) {
$rebateProfileService->syncProfiles($player->id, $agent, $request->input('rebate_profiles', []));
unset($data['rebate_profiles']);
}
if ($request->has('risk_tags')) {
$player->risk_tags = array_values(array_unique(array_filter(
array_map('strval', $request->input('risk_tags', [])),
)));
unset($data['risk_tags']);
}
unset($data['rebate_profiles']);
$player->fill(array_filter($data, static fn ($v) => $v !== '' && ! is_array($v)));
$player->save();
return ApiResponse::success(PlayerApiPresenter::listItem($player));
}
}