353 lines
8.6 KiB
Go
353 lines
8.6 KiB
Go
|
package service
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"errors"
|
|||
|
|
|
|||
|
|
"github.com/go-admin-team/go-admin-core/sdk/config"
|
|||
|
|
"gorm.io/gorm/clause"
|
|||
|
|
|
|||
|
|
"github.com/casbin/casbin/v2"
|
|||
|
|
|
|||
|
|
"github.com/go-admin-team/go-admin-core/sdk/service"
|
|||
|
|
"gorm.io/gorm"
|
|||
|
|
|
|||
|
|
"go-admin/app/admin/models"
|
|||
|
|
"go-admin/app/admin/service/dto"
|
|||
|
|
cDto "go-admin/common/dto"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
type SysRole struct {
|
|||
|
|
service.Service
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// GetPage 获取SysRole列表
|
|||
|
|
func (e *SysRole) GetPage(c *dto.SysRoleGetPageReq, list *[]models.SysRole, count *int64) error {
|
|||
|
|
var err error
|
|||
|
|
var data models.SysRole
|
|||
|
|
|
|||
|
|
err = e.Orm.Model(&data).Preload("SysMenu").
|
|||
|
|
Scopes(
|
|||
|
|
cDto.MakeCondition(c.GetNeedSearch()),
|
|||
|
|
cDto.Paginate(c.GetPageSize(), c.GetPageIndex()),
|
|||
|
|
).
|
|||
|
|
Find(list).Limit(-1).Offset(-1).
|
|||
|
|
Count(count).Error
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Get 获取SysRole对象
|
|||
|
|
func (e *SysRole) Get(d *dto.SysRoleGetReq, model *models.SysRole) error {
|
|||
|
|
var err error
|
|||
|
|
db := e.Orm.First(model, d.GetId())
|
|||
|
|
err = db.Error
|
|||
|
|
if err != nil && errors.Is(err, gorm.ErrRecordNotFound) {
|
|||
|
|
err = errors.New("查看对象不存在或无权查看")
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
model.MenuIds, err = e.GetRoleMenuId(model.RoleId)
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("get menuIds error, %s", err.Error())
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Insert 创建SysRole对象
|
|||
|
|
func (e *SysRole) Insert(c *dto.SysRoleInsertReq, cb *casbin.SyncedEnforcer) error {
|
|||
|
|
var err error
|
|||
|
|
var data models.SysRole
|
|||
|
|
var dataMenu []models.SysMenu
|
|||
|
|
err = e.Orm.Preload("SysApi").Where("menu_id in ?", c.MenuIds).Find(&dataMenu).Error
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
c.SysMenu = dataMenu
|
|||
|
|
c.Generate(&data)
|
|||
|
|
tx := e.Orm
|
|||
|
|
if config.DatabaseConfig.Driver != "sqlite3" {
|
|||
|
|
tx := e.Orm.Begin()
|
|||
|
|
defer func() {
|
|||
|
|
if err != nil {
|
|||
|
|
tx.Rollback()
|
|||
|
|
} else {
|
|||
|
|
tx.Commit()
|
|||
|
|
}
|
|||
|
|
}()
|
|||
|
|
}
|
|||
|
|
var count int64
|
|||
|
|
err = tx.Model(&data).Where("role_key = ?", c.RoleKey).Count(&count).Error
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if count > 0 {
|
|||
|
|
err = errors.New("roleKey已存在，需更换在提交！")
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
err = tx.Create(&data).Error
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
mp := make(map[string]interface{}, 0)
|
|||
|
|
polices := make([][]string, 0)
|
|||
|
|
for _, menu := range dataMenu {
|
|||
|
|
for _, api := range menu.SysApi {
|
|||
|
|
if mp[data.RoleKey+"-"+api.Path+"-"+api.Action] != "" {
|
|||
|
|
mp[data.RoleKey+"-"+api.Path+"-"+api.Action] = ""
|
|||
|
|
polices = append(polices, []string{data.RoleKey, api.Path, api.Action})
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if len(polices) <= 0 {
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 写入 sys_casbin_rule 权限表里 当前角色数据的记录
|
|||
|
|
_, err = cb.AddNamedPolicies("p", polices)
|
|||
|
|
if err != nil {
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Update 修改SysRole对象
|
|||
|
|
func (e *SysRole) Update(c *dto.SysRoleUpdateReq, cb *casbin.SyncedEnforcer) error {
|
|||
|
|
var err error
|
|||
|
|
tx := e.Orm
|
|||
|
|
if config.DatabaseConfig.Driver != "sqlite3" {
|
|||
|
|
tx := e.Orm.Begin()
|
|||
|
|
defer func() {
|
|||
|
|
if err != nil {
|
|||
|
|
tx.Rollback()
|
|||
|
|
} else {
|
|||
|
|
tx.Commit()
|
|||
|
|
}
|
|||
|
|
}()
|
|||
|
|
}
|
|||
|
|
var model = models.SysRole{}
|
|||
|
|
var mlist = make([]models.SysMenu, 0)
|
|||
|
|
tx.Preload("SysMenu").First(&model, c.GetId())
|
|||
|
|
tx.Preload("SysApi").Where("menu_id in ?", c.MenuIds).Find(&mlist)
|
|||
|
|
err = tx.Model(&model).Association("SysMenu").Delete(model.SysMenu)
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("delete policy error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
c.Generate(&model)
|
|||
|
|
model.SysMenu = &mlist
|
|||
|
|
// 更新关联的数据，使用 FullSaveAssociations 模式
|
|||
|
|
db := tx.Session(&gorm.Session{FullSaveAssociations: true}).Debug().Save(&model)
|
|||
|
|
|
|||
|
|
if err = db.Error; err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
if db.RowsAffected == 0 {
|
|||
|
|
return errors.New("无权更新该数据")
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 清除 sys_casbin_rule 权限表里 当前角色的所有记录
|
|||
|
|
_, err = cb.RemoveFilteredPolicy(0, model.RoleKey)
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("delete policy error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
mp := make(map[string]interface{}, 0)
|
|||
|
|
polices := make([][]string, 0)
|
|||
|
|
for _, menu := range mlist {
|
|||
|
|
for _, api := range menu.SysApi {
|
|||
|
|
if mp[model.RoleKey+"-"+api.Path+"-"+api.Action] != "" {
|
|||
|
|
mp[model.RoleKey+"-"+api.Path+"-"+api.Action] = ""
|
|||
|
|
//_, err = cb.AddNamedPolicy("p", model.RoleKey, api.Path, api.Action)
|
|||
|
|
polices = append(polices, []string{model.RoleKey, api.Path, api.Action})
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if len(polices) <= 0 {
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 写入 sys_casbin_rule 权限表里 当前角色数据的记录
|
|||
|
|
_, err = cb.AddNamedPolicies("p", polices)
|
|||
|
|
if err != nil {
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Remove 删除SysRole
|
|||
|
|
func (e *SysRole) Remove(c *dto.SysRoleDeleteReq, cb *casbin.SyncedEnforcer) error {
|
|||
|
|
var err error
|
|||
|
|
tx := e.Orm
|
|||
|
|
if config.DatabaseConfig.Driver != "sqlite3" {
|
|||
|
|
tx := e.Orm.Begin()
|
|||
|
|
defer func() {
|
|||
|
|
if err != nil {
|
|||
|
|
tx.Rollback()
|
|||
|
|
} else {
|
|||
|
|
tx.Commit()
|
|||
|
|
}
|
|||
|
|
}()
|
|||
|
|
}
|
|||
|
|
var model = models.SysRole{}
|
|||
|
|
tx.Preload("SysMenu").Preload("SysDept").First(&model, c.GetId())
|
|||
|
|
//删除 SysRole 时，同时删除角色所有 关联其它表 记录 (SysMenu 和 SysMenu)
|
|||
|
|
db := tx.Select(clause.Associations).Delete(&model)
|
|||
|
|
|
|||
|
|
if err = db.Error; err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
if db.RowsAffected == 0 {
|
|||
|
|
return errors.New("无权更新该数据")
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 清除 sys_casbin_rule 权限表里 当前角色的所有记录
|
|||
|
|
_, _ = cb.RemoveFilteredPolicy(0, model.RoleKey)
|
|||
|
|
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// GetRoleMenuId 获取角色对应的菜单ids
|
|||
|
|
func (e *SysRole) GetRoleMenuId(roleId int) ([]int, error) {
|
|||
|
|
menuIds := make([]int, 0)
|
|||
|
|
model := models.SysRole{}
|
|||
|
|
model.RoleId = roleId
|
|||
|
|
if err := e.Orm.Model(&model).Preload("SysMenu").First(&model).Error; err != nil {
|
|||
|
|
return nil, err
|
|||
|
|
}
|
|||
|
|
l := *model.SysMenu
|
|||
|
|
for i := 0; i < len(l); i++ {
|
|||
|
|
menuIds = append(menuIds, l[i].MenuId)
|
|||
|
|
}
|
|||
|
|
return menuIds, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (e *SysRole) UpdateDataScope(c *dto.RoleDataScopeReq) *SysRole {
|
|||
|
|
var err error
|
|||
|
|
tx := e.Orm
|
|||
|
|
if config.DatabaseConfig.Driver != "sqlite3" {
|
|||
|
|
tx := e.Orm.Begin()
|
|||
|
|
defer func() {
|
|||
|
|
if err != nil {
|
|||
|
|
tx.Rollback()
|
|||
|
|
} else {
|
|||
|
|
tx.Commit()
|
|||
|
|
}
|
|||
|
|
}()
|
|||
|
|
}
|
|||
|
|
var dlist = make([]models.SysDept, 0)
|
|||
|
|
var model = models.SysRole{}
|
|||
|
|
tx.Preload("SysDept").First(&model, c.RoleId)
|
|||
|
|
tx.Where("dept_id in ?", c.DeptIds).Find(&dlist)
|
|||
|
|
// 删除SysRole 和 SysDept 的关联关系
|
|||
|
|
err = tx.Model(&model).Association("SysDept").Delete(model.SysDept)
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("delete SysDept error:%s", err)
|
|||
|
|
_ = e.AddError(err)
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
c.Generate(&model)
|
|||
|
|
model.SysDept = dlist
|
|||
|
|
// 更新关联的数据，使用 FullSaveAssociations 模式
|
|||
|
|
db := tx.Model(&model).Session(&gorm.Session{FullSaveAssociations: true}).Debug().Save(&model)
|
|||
|
|
if err = db.Error; err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
_ = e.AddError(err)
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
if db.RowsAffected == 0 {
|
|||
|
|
_ = e.AddError(errors.New("无权更新该数据"))
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// UpdateStatus 修改SysRole对象status
|
|||
|
|
func (e *SysRole) UpdateStatus(c *dto.UpdateStatusReq) error {
|
|||
|
|
var err error
|
|||
|
|
tx := e.Orm
|
|||
|
|
if config.DatabaseConfig.Driver != "sqlite3" {
|
|||
|
|
tx := e.Orm.Begin()
|
|||
|
|
defer func() {
|
|||
|
|
if err != nil {
|
|||
|
|
tx.Rollback()
|
|||
|
|
} else {
|
|||
|
|
tx.Commit()
|
|||
|
|
}
|
|||
|
|
}()
|
|||
|
|
}
|
|||
|
|
var model = models.SysRole{}
|
|||
|
|
tx.First(&model, c.GetId())
|
|||
|
|
c.Generate(&model)
|
|||
|
|
// 更新关联的数据，使用 FullSaveAssociations 模式
|
|||
|
|
db := tx.Session(&gorm.Session{FullSaveAssociations: true}).Debug().Save(&model)
|
|||
|
|
if err = db.Error; err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
return err
|
|||
|
|
}
|
|||
|
|
if db.RowsAffected == 0 {
|
|||
|
|
return errors.New("无权更新该数据")
|
|||
|
|
}
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// GetWithName 获取SysRole对象
|
|||
|
|
func (e *SysRole) GetWithName(d *dto.SysRoleByName, model *models.SysRole) *SysRole {
|
|||
|
|
var err error
|
|||
|
|
db := e.Orm.Where("role_name = ?", d.RoleName).First(model)
|
|||
|
|
err = db.Error
|
|||
|
|
if err != nil && errors.Is(err, gorm.ErrRecordNotFound) {
|
|||
|
|
err = errors.New("查看对象不存在或无权查看")
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
_ = e.AddError(err)
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("db error:%s", err)
|
|||
|
|
_ = e.AddError(err)
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
model.MenuIds, err = e.GetRoleMenuId(model.RoleId)
|
|||
|
|
if err != nil {
|
|||
|
|
e.Log.Errorf("get menuIds error, %s", err.Error())
|
|||
|
|
_ = e.AddError(err)
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
return e
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// GetById 获取SysRole对象
|
|||
|
|
func (e *SysRole) GetById(roleId int) ([]string, error) {
|
|||
|
|
permissions := make([]string, 0)
|
|||
|
|
model := models.SysRole{}
|
|||
|
|
model.RoleId = roleId
|
|||
|
|
if err := e.Orm.Model(&model).Preload("SysMenu").First(&model).Error; err != nil {
|
|||
|
|
return nil, err
|
|||
|
|
}
|
|||
|
|
l := *model.SysMenu
|
|||
|
|
for i := 0; i < len(l); i++ {
|
|||
|
|
if l[i].Permission != "" {
|
|||
|
|
permissions = append(permissions, l[i].Permission)
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
return permissions, nil
|
|||
|
|
}
|