89 lines
2.8 KiB
Python
89 lines
2.8 KiB
Python
# inventory-backend/app/services/permission_service.py
|
||
from app.models.system import SysMenu, SysElement, SysRolePermission
|
||
from app.extensions import db
|
||
|
||
|
||
class PermissionService:
|
||
@staticmethod
|
||
def get_permission_tree():
|
||
"""
|
||
获取完整的权限树（菜单 -> 元素）
|
||
供前端权限配置页面展示
|
||
"""
|
||
# 1. 获取所有菜单
|
||
menus = SysMenu.query.order_by(SysMenu.sort_order).all()
|
||
# 2. 获取所有元素
|
||
elements = SysElement.query.all()
|
||
|
||
# 3. 组装树结构
|
||
tree_data = []
|
||
for menu in menus:
|
||
menu_dict = menu.to_dict()
|
||
|
||
# 找该菜单下的所有元素
|
||
children = []
|
||
for el in elements:
|
||
if el.menu_code == menu.code:
|
||
children.append(el.to_dict())
|
||
|
||
# 如果有子元素，加到 children
|
||
if children:
|
||
menu_dict['children'] = children
|
||
|
||
tree_data.append(menu_dict)
|
||
|
||
return tree_data
|
||
|
||
@staticmethod
|
||
def get_role_permissions(role_code):
|
||
"""获取指定角色拥有的所有权限Code"""
|
||
perms = SysRolePermission.query.filter_by(role_code=role_code).all()
|
||
|
||
# 将结果分为 menus 和 elements (虽然前端目前合并处理，但分开更清晰)
|
||
menu_codes = []
|
||
element_codes = []
|
||
|
||
for p in perms:
|
||
if p.type == 'menu':
|
||
menu_codes.append(p.target_code)
|
||
else:
|
||
element_codes.append(p.target_code)
|
||
|
||
# 返回结构适配前端
|
||
return {
|
||
'menus': menu_codes,
|
||
'elements': element_codes
|
||
}
|
||
|
||
@staticmethod
|
||
def assign_permissions(role_code, permission_codes):
|
||
"""
|
||
保存角色的权限
|
||
permission_codes: 前端传来的 list，包含 menu_code 和 element_code
|
||
"""
|
||
if not role_code:
|
||
raise ValueError("角色代码不能为空")
|
||
|
||
# 1. 删除该角色旧的所有权限
|
||
SysRolePermission.query.filter_by(role_code=role_code).delete()
|
||
|
||
# 2. 批量添加新权限
|
||
if permission_codes and len(permission_codes) > 0:
|
||
# 预先获取所有菜单代码，用于判断类型
|
||
all_menu_codes = {m.code for m in SysMenu.query.all()}
|
||
|
||
new_records = []
|
||
for code in permission_codes:
|
||
# 简单判断：如果在菜单表里有，就是 menu，否则是 element
|
||
p_type = 'menu' if code in all_menu_codes else 'element'
|
||
|
||
new_records.append(SysRolePermission(
|
||
role_code=role_code,
|
||
target_code=code,
|
||
type=p_type
|
||
))
|
||
|
||
db.session.add_all(new_records)
|
||
|
||
db.session.commit()
|
||
return True |