139 lines
3.2 KiB
Go
139 lines
3.2 KiB
Go
package role
|
||
|
||
import (
|
||
"OneAuth/cfg"
|
||
"OneAuth/libs/base"
|
||
"OneAuth/libs/oerr"
|
||
"OneAuth/models"
|
||
"errors"
|
||
"github.com/veypi/OneBD"
|
||
"gorm.io/gorm"
|
||
)
|
||
|
||
var roleP = OneBD.NewHandlerPool(func() OneBD.Handler {
|
||
return &roleHandler{}
|
||
})
|
||
|
||
type roleHandler struct {
|
||
base.ApiHandler
|
||
}
|
||
|
||
func (h *roleHandler) Get() (interface{}, error) {
|
||
id := h.Meta().ParamsInt("id")
|
||
aid := h.Meta().ParamsInt("aid")
|
||
act := h.Meta().Params("action")
|
||
if id > 0 {
|
||
role := &models.Role{}
|
||
role.ID = uint(id)
|
||
err := cfg.DB().Preload("Auths").Preload("Users").First(role).Error
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
if aid <= 0 {
|
||
return role, nil
|
||
}
|
||
if !h.CheckAuth("admin", "").CanDoAny() {
|
||
return nil, oerr.NoAuth
|
||
}
|
||
at := &models.RoleAuth{}
|
||
at.RoleID = role.ID
|
||
at.AuthID = uint(aid)
|
||
defer models.SyncGlobalRoles()
|
||
if act == "bind" {
|
||
err = cfg.DB().Where(at).FirstOrCreate(at).Error
|
||
} else if act == "unbind" {
|
||
err = cfg.DB().Where(at).Delete(at).Error
|
||
}
|
||
return role, nil
|
||
}
|
||
roles := make([]*models.Role, 0, 10)
|
||
err := cfg.DB().Preload("Auths").Preload("Users").Find(&roles).Error
|
||
return roles, err
|
||
}
|
||
|
||
func (h *roleHandler) Post() (interface{}, error) {
|
||
if !h.CheckAuth("role", "").CanCreate() {
|
||
return nil, oerr.NoAuth
|
||
}
|
||
role := &models.Role{}
|
||
err := h.Meta().ReadJson(role)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
role.ID = 0
|
||
if role.Category == 0 || role.Name == "" {
|
||
return nil, oerr.ApiArgsMissing
|
||
}
|
||
defer models.SyncGlobalRoles()
|
||
return role, cfg.DB().Where(role).FirstOrCreate(role).Error
|
||
}
|
||
|
||
func (h *roleHandler) Patch() (interface{}, error) {
|
||
if !h.CheckAuth("role", "").CanUpdate() {
|
||
return nil, oerr.NoAuth
|
||
}
|
||
query := &struct {
|
||
Name *string `json:"name"`
|
||
// 角色标签
|
||
Tag *string `json:"tag" gorm:"default:''"`
|
||
IsUnique *bool `json:"is_unique" gorm:"default:false"`
|
||
}{}
|
||
err := h.Meta().ReadJson(query)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
rid := h.Meta().ParamsInt("id")
|
||
if rid <= 0 {
|
||
return nil, oerr.ApiArgsError
|
||
}
|
||
role := &models.Role{}
|
||
role.ID = uint(rid)
|
||
err = cfg.DB().Preload("Users").Where(role).First(role).Error
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
return nil, cfg.DB().Transaction(func(tx *gorm.DB) error {
|
||
var err error
|
||
if query.Tag != nil && *query.Tag != role.Tag {
|
||
err = tx.Model(role).Update("tag", *query.Tag).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
}
|
||
if query.Name != nil && *query.Name != role.Name {
|
||
err = tx.Model(role).Update("name", *query.Name).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
}
|
||
if query.IsUnique != nil && *query.IsUnique != role.IsUnique {
|
||
if *query.IsUnique && len(role.Users) > 1 {
|
||
return errors.New("该角色绑定用户已超过1个，请解绑后在修改")
|
||
}
|
||
err = tx.Table("roles").Where("id = ?", role.ID).Update("is_unique", *query.IsUnique).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
}
|
||
return err
|
||
})
|
||
}
|
||
|
||
func (h *roleHandler) Delete() (interface{}, error) {
|
||
if !h.CheckAuth("role").CanDelete() {
|
||
return nil, oerr.NoAuth
|
||
}
|
||
rid := h.Meta().ParamsInt("id")
|
||
if rid <= 2 {
|
||
return nil, oerr.NoAuth
|
||
}
|
||
role := &models.Role{}
|
||
role.ID = uint(rid)
|
||
err := cfg.DB().Where(role).First(role).Error
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
defer models.SyncGlobalRoles()
|
||
return nil, cfg.DB().Delete(role).Error
|
||
}
|