feat: 管理端 RBAC 权限体系与员工管理

新增多角色权限控制(赛事/财务/客服管理员),支持员工 CRUD、路由菜单按权限显隐、审计日志范围过滤;登录返回角色与权限列表。玩家端赛事列表增加静默刷新避免图片闪烁。Seed 补充演示员工账号与充值相关权限。附带 RBAC/审计范围单元测试及 UAT 文档更新。

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
2026-06-15 17:52:39 +08:00
parent be5b4a4921
commit 567ec9ec8a
44 changed files with 1717 additions and 125 deletions

View File

@@ -0,0 +1,294 @@
<script setup lang="ts">
import { computed, onMounted, ref } from 'vue';
import { ElMessage } from 'element-plus';
import api from '../api';
import { useAdminLocale } from '../composables/useAdminLocale';
import AdminTableEmpty from '../components/AdminTableEmpty.vue';
import AdminTableWrap from '../components/AdminTableWrap.vue';
interface StaffRow {
id: string;
username: string;
status: string;
role: string | null;
roleName: string | null;
lastLoginAt: string | null;
createdAt: string;
}
interface RoleOption {
id: string;
code: string;
name: string;
}
const { t, localeTag } = useAdminLocale();
const loading = ref(false);
const rows = ref<StaffRow[]>([]);
const total = ref(0);
const page = ref(1);
const pageSize = ref(20);
const keyword = ref('');
const roles = ref<RoleOption[]>([]);
const createVisible = ref(false);
const createLoading = ref(false);
const createForm = ref({ username: '', password: '', confirmPassword: '', roleCode: 'MATCH_ADMIN' });
const editVisible = ref(false);
const editLoading = ref(false);
const editForm = ref({ id: '', username: '', status: 'ACTIVE', roleCode: 'MATCH_ADMIN', password: '' });
const roleLabel = computed(() => {
const map: Record<string, string> = {
SUPER_ADMIN: t('role.super_admin'),
MATCH_ADMIN: t('role.match_admin'),
FINANCE_ADMIN: t('role.finance_admin'),
SUPPORT: t('role.support'),
};
return (code: string | null) => (code ? map[code] ?? code : '—');
});
function formatTime(value: string | null) {
if (!value) return '—';
return new Date(value).toLocaleString(localeTag.value);
}
async function loadRoles() {
const { data } = await api.get('/admin/staff/roles');
roles.value = (data.data ?? []) as RoleOption[];
}
async function load() {
loading.value = true;
try {
const { data } = await api.get('/admin/staff', {
params: {
page: page.value,
pageSize: pageSize.value,
keyword: keyword.value.trim() || undefined,
},
});
rows.value = data.data.items as StaffRow[];
total.value = data.data.total;
} catch {
rows.value = [];
total.value = 0;
} finally {
loading.value = false;
}
}
function openCreate() {
createForm.value = { username: '', password: '', confirmPassword: '', roleCode: 'MATCH_ADMIN' };
createVisible.value = true;
}
async function submitCreate() {
const f = createForm.value;
if (!f.username.trim()) {
ElMessage.warning(t('err.username_required'));
return;
}
if (f.password.length < 8) {
ElMessage.warning(t('err.password_min'));
return;
}
if (f.password !== f.confirmPassword) {
ElMessage.warning(t('err.password_mismatch'));
return;
}
createLoading.value = true;
try {
await api.post('/admin/staff', {
username: f.username.trim(),
password: f.password,
roleCode: f.roleCode,
});
ElMessage.success(t('msg.saved'));
createVisible.value = false;
await load();
} catch (e: unknown) {
const err = e as { response?: { data?: { error?: string } } };
ElMessage.error(err.response?.data?.error ?? t('msg.save_failed'));
} finally {
createLoading.value = false;
}
}
function openEdit(row: StaffRow) {
editForm.value = {
id: row.id,
username: row.username,
status: row.status,
roleCode: row.role ?? 'MATCH_ADMIN',
password: '',
};
editVisible.value = true;
}
async function submitEdit() {
const f = editForm.value;
if (f.password && f.password.length < 8) {
ElMessage.warning(t('err.password_min'));
return;
}
editLoading.value = true;
try {
const payload: Record<string, string> = {
status: f.status,
roleCode: f.roleCode,
};
if (f.password.trim()) payload.password = f.password.trim();
const { data } = await api.patch(`/admin/staff/${f.id}`, payload);
if (data.data?.password) {
ElMessage.success(t('user.msg.password_saved', { password: data.data.password }));
} else {
ElMessage.success(t('msg.saved'));
}
editVisible.value = false;
await load();
} catch (e: unknown) {
const err = e as { response?: { data?: { error?: string } } };
ElMessage.error(err.response?.data?.error ?? t('msg.save_failed'));
} finally {
editLoading.value = false;
}
}
onMounted(async () => {
await loadRoles();
await load();
});
</script>
<template>
<div class="admin-list-page staff-page">
<section class="list-panel">
<div class="list-panel-toolbar">
<el-form inline class="list-chrome__grow">
<el-form-item :label="t('common.keyword')">
<el-input
v-model="keyword"
:placeholder="t('login.username_ph')"
clearable
style="width: 180px"
@keyup.enter="load"
/>
</el-form-item>
<el-form-item>
<el-button type="primary" @click="load">{{ t('common.search') }}</el-button>
</el-form-item>
</el-form>
<div class="list-chrome__actions">
<el-button type="primary" @click="openCreate">{{ t('staff.create_btn') }}</el-button>
</div>
</div>
<AdminTableWrap>
<el-table v-loading="loading" :data="rows" stripe>
<template #empty>
<AdminTableEmpty />
</template>
<el-table-column prop="username" :label="t('login.username')" min-width="120" />
<el-table-column :label="t('staff.col.role')" min-width="140">
<template #default="{ row }">{{ roleLabel(row.role) }}</template>
</el-table-column>
<el-table-column :label="t('common.status')" width="100">
<template #default="{ row }">{{ row.status }}</template>
</el-table-column>
<el-table-column :label="t('staff.col.last_login')" min-width="160">
<template #default="{ row }">{{ formatTime(row.lastLoginAt) }}</template>
</el-table-column>
<el-table-column :label="t('common.actions')" width="100" align="center">
<template #default="{ row }">
<el-button link type="primary" size="small" @click="openEdit(row)">{{ t('common.edit') }}</el-button>
</template>
</el-table-column>
</el-table>
</AdminTableWrap>
<div class="pager">
<el-pagination
v-model:current-page="page"
v-model:page-size="pageSize"
:total="total"
:page-sizes="[10, 20, 50]"
layout="total, sizes, prev, pager, next"
background
@current-change="load"
@size-change="load"
/>
</div>
</section>
<el-dialog v-model="createVisible" :title="t('staff.dialog.create')" width="480px" destroy-on-close>
<el-form label-width="120px">
<el-form-item :label="t('login.username')" required>
<el-input v-model="createForm.username" autocomplete="off" />
</el-form-item>
<el-form-item :label="t('staff.col.role')" required>
<el-select v-model="createForm.roleCode" style="width: 100%">
<el-option
v-for="r in roles.filter((x) => x.code !== 'SUPER_ADMIN')"
:key="r.code"
:label="roleLabel(r.code)"
:value="r.code"
/>
</el-select>
</el-form-item>
<el-form-item :label="t('login.password')" required>
<el-input v-model="createForm.password" type="password" autocomplete="new-password" />
</el-form-item>
<el-form-item :label="t('user.field.confirm_password')" required>
<el-input v-model="createForm.confirmPassword" type="password" autocomplete="new-password" />
</el-form-item>
</el-form>
<template #footer>
<el-button @click="createVisible = false">{{ t('common.cancel') }}</el-button>
<el-button type="primary" :loading="createLoading" @click="submitCreate">{{ t('common.confirm') }}</el-button>
</template>
</el-dialog>
<el-dialog v-model="editVisible" :title="t('staff.dialog.edit')" width="480px" destroy-on-close>
<el-form label-width="120px">
<el-form-item :label="t('login.username')">
<el-input :model-value="editForm.username" disabled />
</el-form-item>
<el-form-item :label="t('staff.col.role')">
<el-select v-model="editForm.roleCode" style="width: 100%" :disabled="editForm.roleCode === 'SUPER_ADMIN'">
<el-option
v-for="r in roles"
:key="r.code"
:label="roleLabel(r.code)"
:value="r.code"
/>
</el-select>
</el-form-item>
<el-form-item :label="t('common.status')">
<el-select v-model="editForm.status" style="width: 100%">
<el-option label="ACTIVE" value="ACTIVE" />
<el-option label="SUSPENDED" value="SUSPENDED" />
<el-option label="DISABLED" value="DISABLED" />
</el-select>
</el-form-item>
<el-form-item :label="t('user.field.reset_password')">
<el-input v-model="editForm.password" type="password" autocomplete="new-password" :placeholder="t('user.ph.reset_password_short')" />
</el-form-item>
</el-form>
<template #footer>
<el-button @click="editVisible = false">{{ t('common.cancel') }}</el-button>
<el-button type="primary" :loading="editLoading" @click="submitEdit">{{ t('common.confirm') }}</el-button>
</template>
</el-dialog>
</div>
</template>
<style scoped>
.staff-page .pager {
margin-top: 12px;
display: flex;
justify-content: flex-end;
}
</style>