管理后台左侧列表调整

2026-07-07 18:49:47 +08:00
parent 98e9652865
commit 1ac72e9a69
14 changed files with 780 additions and 40 deletions
@@ -0,0 +1,120 @@
+import { BadRequestException, Injectable, NotFoundException } from '@nestjs/common';
+import {
+  HQ_PERMISSION_CATALOG,
+  HQ_ROLE_DEFAULT_PERMISSIONS,
+  type HqPermissionKey,
+} from '@dukang/shared-types';
+import { PrismaService } from '../../common/prisma/prisma.module';
+import { serializeBigInt } from '../../common/decorators/current-user.decorator';
+
+const VALID_PERMISSION_KEYS = new Set<string>(HQ_PERMISSION_CATALOG.map((p) => p.key));
+
+function assertPermissionKeys(keys: string[]) {
+  const invalid = keys.filter((key) => !VALID_PERMISSION_KEYS.has(key));
+  if (invalid.length) {
+    throw new BadRequestException(`无效权限项: ${invalid.join(', ')}`);
+  }
+}
+
+@Injectable()
+export class AdminHqPermissionsService {
+  constructor(private readonly prisma: PrismaService) {}
+
+  catalog() {
+    return {
+      permissions: HQ_PERMISSION_CATALOG,
+      roles: Object.entries(HQ_ROLE_DEFAULT_PERMISSIONS).map(([role, permissionKeys]) => ({
+        role,
+        permissionKeys,
+      })),
+    };
+  }
+
+  async getRolePermissions(role: string) {
+    const rows = await this.prisma.hqRolePermission.findMany({
+      where: { adminRole: role as 'SUPER_ADMIN' | 'OPS' | 'FINANCE' | 'CUSTOMER_SERVICE' },
+      select: { permissionKey: true },
+    });
+    const permissionKeys =
+      rows.length > 0
+        ? rows.map((r) => r.permissionKey)
+        : [...(HQ_ROLE_DEFAULT_PERMISSIONS[role] ?? [])];
+    return { role, permissionKeys };
+  }
+
+  async saveRolePermissions(role: string, permissionKeys: string[]) {
+    if (role === 'SUPER_ADMIN') {
+      throw new BadRequestException('超级管理员拥有全部权限，无需配置');
+    }
+    assertPermissionKeys(permissionKeys);
+    const adminRole = role as 'OPS' | 'FINANCE' | 'CUSTOMER_SERVICE';
+    await this.prisma.$transaction([
+      this.prisma.hqRolePermission.deleteMany({ where: { adminRole } }),
+      ...(permissionKeys.length
+        ? [
+            this.prisma.hqRolePermission.createMany({
+              data: permissionKeys.map((permissionKey) => ({ adminRole, permissionKey })),
+            }),
+          ]
+        : []),
+    ]);
+    return this.getRolePermissions(role);
+  }
+
+  async getAccountPermissions(accountId: bigint) {
+    const account = await this.prisma.hqAccount.findUnique({
+      where: { id: accountId },
+      select: { id: true, name: true, phone: true, loginName: true, adminRole: true, status: true },
+    });
+    if (!account) throw new NotFoundException('HQ 账号不存在');
+    if (account.adminRole === 'SUPER_ADMIN') {
+      return serializeBigInt({
+        account,
+        permissionKeys: HQ_PERMISSION_CATALOG.map((p) => p.key),
+        rolePermissionKeys: HQ_PERMISSION_CATALOG.map((p) => p.key),
+        userPermissionKeys: [],
+        effectivePermissionKeys: HQ_PERMISSION_CATALOG.map((p) => p.key),
+      });
+    }
+
+    const [rolePerms, userPerms] = await Promise.all([
+      this.getRolePermissions(account.adminRole),
+      this.prisma.hqAccountPermission.findMany({
+        where: { hqAccountId: accountId },
+        select: { permissionKey: true },
+      }),
+    ]);
+    const userPermissionKeys = userPerms.map((p) => p.permissionKey);
+    const effectivePermissionKeys = [
+      ...new Set([...rolePerms.permissionKeys, ...userPermissionKeys]),
+    ] as HqPermissionKey[];
+
+    return serializeBigInt({
+      account,
+      permissionKeys: userPermissionKeys,
+      rolePermissionKeys: rolePerms.permissionKeys,
+      userPermissionKeys,
+      effectivePermissionKeys,
+    });
+  }
+
+  async saveAccountPermissions(accountId: bigint, permissionKeys: string[]) {
+    const account = await this.prisma.hqAccount.findUnique({ where: { id: accountId } });
+    if (!account) throw new NotFoundException('HQ 账号不存在');
+    if (account.adminRole === 'SUPER_ADMIN') {
+      throw new BadRequestException('超级管理员拥有全部权限，无需配置');
+    }
+    assertPermissionKeys(permissionKeys);
+    await this.prisma.$transaction([
+      this.prisma.hqAccountPermission.deleteMany({ where: { hqAccountId: accountId } }),
+      ...(permissionKeys.length
+        ? [
+            this.prisma.hqAccountPermission.createMany({
+              data: permissionKeys.map((permissionKey) => ({ hqAccountId: accountId, permissionKey })),
+            }),
+          ]
+        : []),
+    ]);
+    return this.getAccountPermissions(accountId);
+  }
+}