Files
huangjingfen/pro_v3.5.1/app/services/system/SystemRoleServices.php
panchengyong c1e74d8e68 chore(php): 统一 ScottPan 文件头与注释域名替换
- 按 docs/renew-code-comment.md 将 PHP 文件头改为带边框的 Author 注释\n- 注释中的 crmeb.com 替换为 uj345.cn(代码字符串中的外链未改)\n- 新增 docs/renew-code-comment.md 说明

Made-with: Cursor
2026-03-29 11:22:58 +08:00

177 lines
6.0 KiB
PHP

<?php
// +----------------------------------------------------------------------
// | Author: ScottPan Team
// +----------------------------------------------------------------------
namespace app\services\system;
use app\Request;
use app\services\BaseServices;
use app\dao\system\SystemRoleDao;
use app\services\store\SystemStoreStaffServices;
use crmeb\exceptions\AuthException;
use crmeb\utils\ApiErrorCode;
use crmeb\services\CacheService;
use think\annotation\Inject;
/**
* Class SystemRoleServices
* @package app\services\system
* @mixin SystemRoleDao
*/
class SystemRoleServices extends BaseServices
{
/**
* 当前管理员权限缓存前缀
*/
const ADMIN_RULES_LEVEL = 'Admin_rules_level_';
/**
* @var SystemRoleDao
*/
#[Inject]
protected SystemRoleDao $dao;
/**
* 获取权限
* @return mixed
*/
public function getRoleArray(array $where = [], string $field = '', string $key = '')
{
return $this->dao->getRoule($where, $field, $key);
}
/**
* 获取表单所需的权限名称列表
* @param int $level
* @param int $type
* @param int $relation_id
* @return array
*/
public function getRoleFormSelect(int $level, int $type = 0, int $relation_id = 0)
{
$list = $this->getRoleArray(['level' => $level, 'type' => $type, 'relation_id' => $relation_id, 'status' => 1]);
$options = [];
foreach ($list as $id => $roleName) {
$options[] = ['label' => $roleName, 'value' => $id];
}
return $options;
}
/**
* 身份管理列表
* @param array $where
* @return array
*/
public function getRoleList(array $where)
{
[$page, $limit] = $this->getPageValue();
$list = $this->dao->getRouleList($where, $page, $limit);
$count = $this->dao->count($where);
/** @var SystemMenusServices $service */
$service = app()->make(SystemMenusServices::class);
foreach ($list as &$item) {
$item['rules'] = implode(',', array_merge($service->column(['id' => $item['rules']], 'menu_name', 'id')));
}
return compact('count', 'list');
}
/**
* 后台验证权限
* @param Request $request
*/
public function verifiAuth(Request $request)
{
$rule = str_replace('adminapi/', '', trim(strtolower($request->rule()->getRule())));
if (in_array($rule, ['setting/admin/logout', 'menuslist'])) {
return true;
}
$method = trim(strtolower($request->method()));
$auth = $this->getAllRoles(2);
//验证访问接口是否存在
if (!in_array($method . '@@' . $rule, array_map(function ($item) {
return trim(strtolower($item['methods'])) . '@@' . trim(strtolower(str_replace(' ', '', $item['api_url'])));
}, $auth))) {
// throw new AuthException(ApiErrorCode::ERR_AUTH);
return true;
}
$auth = $this->getRolesByAuth($request->adminInfo()['roles'], 2);
//验证访问接口是否有权限
if ($auth && empty(array_filter($auth, function ($item) use ($rule, $method) {
if (trim(strtolower($item['api_url'])) === $rule && $method === trim(strtolower($item['methods'])))
return true;
}))) {
// throw new AuthException(ApiErrorCode::ERR_AUTH);
throw new AuthException(ApiErrorCode::ERR_AUTH);
}
}
/**
* 获取所有权限
* @param int $auth_type
* @param int $type
* @param string $cachePrefix
* @return array|bool|mixed|null
*/
public function getAllRoles(int $auth_type = 1, int $type = 1, string $cachePrefix = self::ADMIN_RULES_LEVEL)
{
$cacheName = md5($cachePrefix . '_' . $auth_type . '_' . $type . '_ALl');
return CacheService::redisHandler('system_menus')->remember($cacheName, function () use ($auth_type, $type) {
/** @var SystemMenusServices $menusService */
$menusService = app()->make(SystemMenusServices::class);
return $menusService->getColumn([['auth_type', '=', $auth_type], ['type', '=', $type]], 'api_url,methods');
});
}
/**
* 获取指定权限
* @param array $rules
* @param int $auth_type
* @param int $type
* @param string $cachePrefix
* @return array|bool|mixed|null
*/
public function getRolesByAuth(array $rules, int $auth_type = 1, int $type = 1, string $cachePrefix = self::ADMIN_RULES_LEVEL)
{
if (empty($rules)) return [];
$cacheName = md5($cachePrefix . '_' . $auth_type . '_' . $type . '_' . implode('_', $rules));
return CacheService::redisHandler('system_menus')->remember($cacheName, function () use ($rules, $auth_type, $type) {
/** @var SystemMenusServices $menusService */
$menusService = app()->make(SystemMenusServices::class);
return $menusService->getColumn([['id', 'IN', $this->getRoleIds($rules)], ['auth_type', '=', $auth_type], ['type', '=', $type]], 'api_url,methods');
});
}
/**
* 获取权限id
* @param array $rules
* @return array
*/
public function getRoleIds(array $rules)
{
$rules = $this->dao->getColumn([['id', 'IN', $rules], ['status', '=', '1']], 'rules', 'id');
return array_unique(explode(',', implode(',', $rules)));
}
/**
* 门店角色状态更改改变角色下店员、管理员状态
* @param int $store_id
* @param int $role_id
* @param $status
* @return mixed
*/
public function setStaffStatus(int $store_id, int $role_id, $status)
{
/** @var SystemStoreStaffServices $storeStaffServices */
$storeStaffServices = app()->make(SystemStoreStaffServices::class);
if ($status) {
return $storeStaffServices->update(['store_id' => $store_id, 'roles' => $role_id, 'is_del' => 0, 'status' => 0], ['status' => 1]);
} else {
return $storeStaffServices->update(['store_id' => $store_id, 'roles' => $role_id, 'status' => 1], ['status' => 0]);
}
}
}