|
@@ -2,7 +2,14 @@
|
|
|
|
|
|
namespace app\admin\controller\seller;
|
|
|
|
|
|
+use app\admin\model\Admin;
|
|
|
+use app\admin\model\AuthGroup;
|
|
|
+use app\admin\model\AuthGroupAccess;
|
|
|
use app\common\controller\Backend;
|
|
|
+use fast\Random;
|
|
|
+use fast\Tree;
|
|
|
+use think\Db;
|
|
|
+use think\Validate;
|
|
|
|
|
|
/**
|
|
|
* 会员组管理
|
|
@@ -16,10 +23,42 @@ class User extends Backend
|
|
|
* @var \app\admin\model\UserGroup
|
|
|
*/
|
|
|
protected $model = null;
|
|
|
+ protected $childrenGroupIds = [];
|
|
|
+ protected $childrenAdminIds = [];
|
|
|
|
|
|
public function _initialize()
|
|
|
{
|
|
|
parent::_initialize();
|
|
|
+ $this->model=new Admin;
|
|
|
+
|
|
|
+ $this->childrenAdminIds = $this->auth->getChildrenAdminIds($this->auth->isSuperAdmin());
|
|
|
+ $this->childrenGroupIds = $this->auth->getChildrenGroupIds($this->auth->isSuperAdmin());
|
|
|
+
|
|
|
+ $groupList = collection(AuthGroup::where('id', 'in', $this->childrenGroupIds)->select())->toArray();
|
|
|
+
|
|
|
+ Tree::instance()->init($groupList);
|
|
|
+ $groupdata = [];
|
|
|
+ if ($this->auth->isSuperAdmin()) {
|
|
|
+ $result = Tree::instance()->getTreeList(Tree::instance()->getTreeArray(0));
|
|
|
+ foreach ($result as $k => $v) {
|
|
|
+ $groupdata[$v['id']] = $v['name'];
|
|
|
+ }
|
|
|
+ } else {
|
|
|
+ $result = [];
|
|
|
+ $groups = $this->auth->getGroups();
|
|
|
+ foreach ($groups as $m => $n) {
|
|
|
+ $childlist = Tree::instance()->getTreeList(Tree::instance()->getTreeArray($n['id']));
|
|
|
+ $temp = [];
|
|
|
+ foreach ($childlist as $k => $v) {
|
|
|
+ $temp[$v['id']] = $v['name'];
|
|
|
+ }
|
|
|
+ $result[__($n['name'])] = $temp;
|
|
|
+ }
|
|
|
+ $groupdata = $result;
|
|
|
+ }
|
|
|
+
|
|
|
+ $this->view->assign('groupdata', $groupdata);
|
|
|
+ $this->assignconfig("admin", ['id' => $this->auth->id]);
|
|
|
}
|
|
|
public function share(){
|
|
|
return $this->fetch();
|
|
@@ -45,4 +84,228 @@ class User extends Backend
|
|
|
$this->success();
|
|
|
}
|
|
|
}
|
|
|
+ /**
|
|
|
+ * 查看
|
|
|
+ */
|
|
|
+ public function index()
|
|
|
+ {
|
|
|
+ //设置过滤方法
|
|
|
+ $this->request->filter(['strip_tags', 'trim']);
|
|
|
+ if ($this->request->isAjax()) {
|
|
|
+ //如果发送的来源是Selectpage,则转发到Selectpage
|
|
|
+ if ($this->request->request('keyField')) {
|
|
|
+ return $this->selectpage();
|
|
|
+ }
|
|
|
+ $childrenGroupIds = $this->childrenGroupIds;
|
|
|
+ $groupName = AuthGroup::where('id', 'in', $childrenGroupIds)
|
|
|
+ ->column('id,name');
|
|
|
+ $authGroupList = AuthGroupAccess::where('group_id', 'in', $childrenGroupIds)
|
|
|
+ ->field('uid,group_id')
|
|
|
+ ->select();
|
|
|
+
|
|
|
+ $adminGroupName = [];
|
|
|
+ foreach ($authGroupList as $k => $v) {
|
|
|
+ if (isset($groupName[$v['group_id']])) {
|
|
|
+ $adminGroupName[$v['uid']][$v['group_id']] = $groupName[$v['group_id']];
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $groups = $this->auth->getGroups();
|
|
|
+ foreach ($groups as $m => $n) {
|
|
|
+ $adminGroupName[$this->auth->id][$n['id']] = $n['name'];
|
|
|
+ }
|
|
|
+ list($where, $sort, $order, $offset, $limit) = $this->buildparams();
|
|
|
+
|
|
|
+ $list = $this->model
|
|
|
+ ->where($where)
|
|
|
+ ->where('id', 'in', $this->childrenAdminIds)
|
|
|
+ ->where('user_type',Admin::UT_SELLER)
|
|
|
+ ->field(['password', 'salt', 'token'], true)
|
|
|
+ ->order($sort, $order)
|
|
|
+ ->paginate($limit);
|
|
|
+
|
|
|
+ foreach ($list as $k => &$v) {
|
|
|
+ $groups = isset($adminGroupName[$v['id']]) ? $adminGroupName[$v['id']] : [];
|
|
|
+ $v['groups'] = implode(',', array_keys($groups));
|
|
|
+ $v['groups_text'] = implode(',', array_values($groups));
|
|
|
+ }
|
|
|
+ unset($v);
|
|
|
+ $result = array("total" => $list->total(), "rows" => $list->items());
|
|
|
+
|
|
|
+ return json($result);
|
|
|
+ }
|
|
|
+ return $this->view->fetch();
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 添加
|
|
|
+ */
|
|
|
+ public function add()
|
|
|
+ {
|
|
|
+ if ($this->request->isPost()) {
|
|
|
+ $this->token();
|
|
|
+ $params = $this->request->post("row/a");
|
|
|
+ if ($params) {
|
|
|
+ Db::startTrans();
|
|
|
+ try {
|
|
|
+ if (!Validate::is($params['password'], '\S{6,16}')) {
|
|
|
+ exception(__("Please input correct password"));
|
|
|
+ }
|
|
|
+ $params['salt'] = Random::alnum();
|
|
|
+ $params['password'] = md5(md5($params['password']) . $params['salt']);
|
|
|
+ $params['avatar'] = '/assets/img/avatar.png'; //设置新管理员默认头像。
|
|
|
+ $params['user_type'] = Admin::UT_SELLER;
|
|
|
+ $result = $this->model->validate('Admin.add')->save($params);
|
|
|
+ if ($result === false) {
|
|
|
+ exception($this->model->getError());
|
|
|
+ }
|
|
|
+ $group = $this->request->post("group/a");
|
|
|
+
|
|
|
+ //过滤不允许的组别,避免越权
|
|
|
+ $group = array_intersect($this->childrenGroupIds, $group);
|
|
|
+ if (!$group) {
|
|
|
+ exception(__('The parent group exceeds permission limit'));
|
|
|
+ }
|
|
|
+
|
|
|
+ $dataset = [];
|
|
|
+ foreach ($group as $value) {
|
|
|
+ $dataset[] = ['uid' => $this->model->id, 'group_id' => $value];
|
|
|
+ }
|
|
|
+ model('AuthGroupAccess')->saveAll($dataset);
|
|
|
+ Db::commit();
|
|
|
+ } catch (\Exception $e) {
|
|
|
+ Db::rollback();
|
|
|
+ $this->error($e->getMessage());
|
|
|
+ }
|
|
|
+ $this->success();
|
|
|
+ }
|
|
|
+ $this->error(__('Parameter %s can not be empty', ''));
|
|
|
+ }
|
|
|
+ return $this->view->fetch();
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 编辑
|
|
|
+ */
|
|
|
+ public function edit($ids = null)
|
|
|
+ {
|
|
|
+ $row = $this->model->get(['id' => $ids]);
|
|
|
+ if (!$row) {
|
|
|
+ $this->error(__('No Results were found'));
|
|
|
+ }
|
|
|
+ if (!in_array($row->id, $this->childrenAdminIds)) {
|
|
|
+ $this->error(__('You have no permission'));
|
|
|
+ }
|
|
|
+ if ($this->request->isPost()) {
|
|
|
+ $this->token();
|
|
|
+ $params = $this->request->post("row/a");
|
|
|
+ if ($params) {
|
|
|
+ Db::startTrans();
|
|
|
+ try {
|
|
|
+ if ($params['password']) {
|
|
|
+ if (!Validate::is($params['password'], '\S{6,16}')) {
|
|
|
+ exception(__("Please input correct password"));
|
|
|
+ }
|
|
|
+ $params['salt'] = Random::alnum();
|
|
|
+ $params['password'] = md5(md5($params['password']) . $params['salt']);
|
|
|
+ } else {
|
|
|
+ unset($params['password'], $params['salt']);
|
|
|
+ }
|
|
|
+ //这里需要针对username和email做唯一验证
|
|
|
+ $adminValidate = \think\Loader::validate('Admin');
|
|
|
+ $adminValidate->rule([
|
|
|
+ 'username' => 'require|regex:\w{3,12}|unique:admin,username,' . $row->id,
|
|
|
+ 'email' => 'require|email|unique:admin,email,' . $row->id,
|
|
|
+ 'password' => 'regex:\S{32}',
|
|
|
+ ]);
|
|
|
+ dd($params);
|
|
|
+ $result = $row->validate('Admin.edit')->save($params);
|
|
|
+ if ($result === false) {
|
|
|
+ exception($row->getError());
|
|
|
+ }
|
|
|
+
|
|
|
+ // 先移除所有权限
|
|
|
+ model('AuthGroupAccess')->where('uid', $row->id)->delete();
|
|
|
+
|
|
|
+ $group = $this->request->post("group/a");
|
|
|
+
|
|
|
+ // 过滤不允许的组别,避免越权
|
|
|
+ $group = array_intersect($this->childrenGroupIds, $group);
|
|
|
+ if (!$group) {
|
|
|
+ exception(__('The parent group exceeds permission limit'));
|
|
|
+ }
|
|
|
+
|
|
|
+ $dataset = [];
|
|
|
+ foreach ($group as $value) {
|
|
|
+ $dataset[] = ['uid' => $row->id, 'group_id' => $value];
|
|
|
+ }
|
|
|
+ model('AuthGroupAccess')->saveAll($dataset);
|
|
|
+ Db::commit();
|
|
|
+ } catch (\Exception $e) {
|
|
|
+ Db::rollback();
|
|
|
+ $this->error($e->getMessage());
|
|
|
+ }
|
|
|
+ $this->success();
|
|
|
+ }
|
|
|
+ $this->error(__('Parameter %s can not be empty', ''));
|
|
|
+ }
|
|
|
+ $grouplist = $this->auth->getGroups($row['id']);
|
|
|
+ $groupids = [];
|
|
|
+ foreach ($grouplist as $k => $v) {
|
|
|
+ $groupids[] = $v['id'];
|
|
|
+ }
|
|
|
+ $this->view->assign("row", $row);
|
|
|
+ $this->view->assign("groupids", $groupids);
|
|
|
+ return $this->view->fetch();
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 删除
|
|
|
+ */
|
|
|
+ public function del($ids = "")
|
|
|
+ {
|
|
|
+ if (!$this->request->isPost()) {
|
|
|
+ $this->error(__("Invalid parameters"));
|
|
|
+ }
|
|
|
+ $ids = $ids ? $ids : $this->request->post("ids");
|
|
|
+ if ($ids) {
|
|
|
+ $ids = array_intersect($this->childrenAdminIds, array_filter(explode(',', $ids)));
|
|
|
+ // 避免越权删除管理员
|
|
|
+ $childrenGroupIds = $this->childrenGroupIds;
|
|
|
+ $adminList = $this->model->where('id', 'in', $ids)->where('id', 'in', function ($query) use ($childrenGroupIds) {
|
|
|
+ $query->name('auth_group_access')->where('group_id', 'in', $childrenGroupIds)->field('uid');
|
|
|
+ })->select();
|
|
|
+ if ($adminList) {
|
|
|
+ $deleteIds = [];
|
|
|
+ foreach ($adminList as $k => $v) {
|
|
|
+ $deleteIds[] = $v->id;
|
|
|
+ }
|
|
|
+ $deleteIds = array_values(array_diff($deleteIds, [$this->auth->id]));
|
|
|
+ if ($deleteIds) {
|
|
|
+ Db::startTrans();
|
|
|
+ try {
|
|
|
+ $this->model->destroy($deleteIds);
|
|
|
+ model('AuthGroupAccess')->where('uid', 'in', $deleteIds)->delete();
|
|
|
+ Db::commit();
|
|
|
+ } catch (\Exception $e) {
|
|
|
+ Db::rollback();
|
|
|
+ $this->error($e->getMessage());
|
|
|
+ }
|
|
|
+ $this->success();
|
|
|
+ }
|
|
|
+ $this->error(__('No rows were deleted'));
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $this->error(__('You have no permission'));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 批量更新
|
|
|
+ * @internal
|
|
|
+ */
|
|
|
+ public function multi($ids = "")
|
|
|
+ {
|
|
|
+ // 管理员禁止批量操作
|
|
|
+ $this->error();
|
|
|
+ }
|
|
|
+
|
|
|
}
|