34047007@qq.com
20b7184b44
- online/service: kick_user_sessions 扫描 USER_SESSION 匹配目标用户，删三键使登录时固化的权限快照即时失效 - role service+controller: 更新/删除/改状态/改权限后踢下线绑定该角色的用户 - user service+controller: 停用/改密等变更后踢下线（对应用户即时 401 重登） - permission: 无角色用户读自身记录时按 id 匹配放行（修复 409 真 bug）
250 lines
8.9 KiB
Python
250 lines
8.9 KiB
Python
from typing import Any
|
|
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from app.core.base_schema import AuthSchema, BatchSetAvailable, PageResultSchema
|
|
from app.core.exceptions import CustomException
|
|
from app.core.logger import logger
|
|
from app.utils.common_util import search_to_dict
|
|
from app.utils.excel_util import ExcelUtil
|
|
|
|
from .crud import RoleCRUD
|
|
from .schema import (
|
|
RoleCreateSchema,
|
|
RoleOutSchema,
|
|
RolePermissionSettingSchema,
|
|
RoleQueryParam,
|
|
RoleUpdateSchema,
|
|
)
|
|
|
|
_ROLE_PRELOAD = ["menus", "depts"]
|
|
|
|
|
|
class RoleService:
|
|
"""角色管理服务
|
|
|
|
提供角色 CRUD、权限配置、数据权限范围设置、批量启/禁用、Excel 导出等业务能力。
|
|
"""
|
|
|
|
def __init__(self, auth: AuthSchema, db: AsyncSession) -> None:
|
|
self.auth = auth
|
|
self.db = db
|
|
|
|
async def detail(self, id: int) -> RoleOutSchema:
|
|
"""获取角色详情
|
|
|
|
参数:
|
|
- id (int): 角色ID
|
|
|
|
返回:
|
|
- RoleOutSchema: 角色详情响应模型
|
|
"""
|
|
obj = await RoleCRUD(self.auth, self.db).get_or_404(id=id, preload=_ROLE_PRELOAD)
|
|
return RoleOutSchema.model_validate(obj)
|
|
|
|
async def get_options(self) -> list[dict[str, Any]]:
|
|
"""获取角色下拉选项，委托给 RoleCRUD"""
|
|
return await RoleCRUD(self.auth, self.db).get_options()
|
|
|
|
async def get_list(
|
|
self,
|
|
search: RoleQueryParam | None = None,
|
|
order_by: list[dict[str, str]] | None = None,
|
|
) -> list[RoleOutSchema]:
|
|
"""获取角色列表
|
|
|
|
参数:
|
|
- search (RoleQueryParam | None): 查询参数模型
|
|
- order_by (list[dict[str, str]] | None): 排序参数列表
|
|
|
|
返回:
|
|
- list[RoleOutSchema]: 角色响应模型列表
|
|
"""
|
|
role_list = await RoleCRUD(self.auth, self.db).get_list(search=search_to_dict(search), order_by=order_by, preload=_ROLE_PRELOAD)
|
|
return [RoleOutSchema.model_validate(role) for role in role_list]
|
|
|
|
async def page(
|
|
self,
|
|
page_no: int,
|
|
page_size: int,
|
|
search: RoleQueryParam | None = None,
|
|
order_by: list[dict[str, str]] | None = None,
|
|
) -> PageResultSchema[RoleOutSchema]:
|
|
"""分页查询角色（数据库 OFFSET/LIMIT）。
|
|
|
|
参数:
|
|
- page_no (int): 页码（从 1 开始）
|
|
- page_size (int): 每页条数
|
|
- search (RoleQueryParam | None): 查询条件
|
|
- order_by (list[dict[str, str]] | None): 排序字段列表
|
|
|
|
返回:
|
|
- dict: 分页结果（结构由 ``CRUD.page`` 返回约定）
|
|
"""
|
|
offset = (page_no - 1) * page_size
|
|
return await RoleCRUD(self.auth, self.db).page(
|
|
offset=offset,
|
|
limit=page_size,
|
|
order_by=order_by or [{"id": "asc"}],
|
|
search=search_to_dict(search),
|
|
out_schema=RoleOutSchema,
|
|
preload=_ROLE_PRELOAD,
|
|
)
|
|
|
|
async def create(self, data: RoleCreateSchema) -> RoleOutSchema:
|
|
"""
|
|
创建角色
|
|
|
|
参数:
|
|
- data (RoleCreateSchema): 创建角色模型
|
|
|
|
返回:
|
|
- RoleOutSchema: 新创建的角色响应模型
|
|
"""
|
|
role = await RoleCRUD(self.auth, self.db).get(name=data.name)
|
|
if role:
|
|
raise CustomException(msg="创建失败，该数据已存在")
|
|
obj = await RoleCRUD(self.auth, self.db).get(code=data.code)
|
|
if obj:
|
|
raise CustomException(msg="创建失败，编码已存在")
|
|
|
|
new_role = await RoleCRUD(self.auth, self.db).create(data=data)
|
|
return await self.detail(id=new_role.id)
|
|
|
|
async def update(self, id: int, data: RoleUpdateSchema, redis: Any | None = None) -> RoleOutSchema:
|
|
"""更新角色
|
|
|
|
参数:
|
|
- id (int): 角色ID
|
|
- data (RoleUpdateSchema): 更新角色模型
|
|
- redis (Any | None): Redis 客户端（非 None 时踢下线绑定该角色的用户）
|
|
|
|
返回:
|
|
- RoleOutSchema: 更新后的角色响应模型
|
|
"""
|
|
_ = await RoleCRUD(self.auth, self.db).get_or_404(id=id, msg="更新失败，该数据不存在")
|
|
exist_role = await RoleCRUD(self.auth, self.db).get(name=data.name)
|
|
if exist_role and exist_role.id != id:
|
|
raise CustomException(msg="更新失败，名称已存在")
|
|
exist_code = await RoleCRUD(self.auth, self.db).get(code=data.code)
|
|
if exist_code and exist_code.id != id:
|
|
raise CustomException(msg="更新失败，角色编码已存在")
|
|
await RoleCRUD(self.auth, self.db).update(id=id, data=data)
|
|
if redis is not None:
|
|
await self._kick_users(redis, [id])
|
|
return await self.detail(id=id)
|
|
|
|
async def delete(self, ids: list[int], redis: Any | None = None) -> None:
|
|
"""删除角色
|
|
|
|
参数:
|
|
- ids (list[int]): 角色ID列表
|
|
- redis (Any | None): Redis 客户端（非 None 时踢下线绑定该角色的用户）
|
|
|
|
返回:
|
|
- None
|
|
"""
|
|
if not ids:
|
|
raise CustomException(msg="删除失败，删除对象不能为空")
|
|
|
|
# 批量校验角色存在性
|
|
roles = await RoleCRUD(self.auth, self.db).get_list(search={"id": ("in", ids)})
|
|
if len(roles) != len(ids):
|
|
raise CustomException(msg="删除失败，部分ID不存在")
|
|
|
|
await RoleCRUD(self.auth, self.db).delete(ids=ids)
|
|
if redis is not None:
|
|
await self._kick_users(redis, ids)
|
|
|
|
async def set_permission(self, data: RolePermissionSettingSchema, redis: Any | None = None) -> None:
|
|
"""设置角色权限
|
|
|
|
参数:
|
|
- data (RolePermissionSettingSchema): 角色权限设置模型
|
|
- redis (Any | None): Redis 客户端（非 None 时踢下线绑定角色的用户）
|
|
|
|
返回:
|
|
- None
|
|
"""
|
|
# 设置角色菜单权限
|
|
await RoleCRUD(self.auth, self.db).set_role_menus_crud(role_ids=data.role_ids, menu_ids=data.menu_ids)
|
|
|
|
# 设置数据权限范围（自定义部门关联已废弃，直接清空）
|
|
await RoleCRUD(self.auth, self.db).set(ids=data.role_ids, data_scope=data.data_scope)
|
|
await RoleCRUD(self.auth, self.db).set_role_depts_crud(role_ids=data.role_ids, dept_ids=[])
|
|
if redis is not None:
|
|
await self._kick_users(redis, data.role_ids)
|
|
|
|
async def set_available(self, data: BatchSetAvailable, redis: Any | None = None) -> None:
|
|
"""设置角色可用状态
|
|
|
|
参数:
|
|
- data (BatchSetAvailable): 批量设置可用状态模型
|
|
- redis (Any | None): Redis 客户端（非 None 时踢下线绑定该角色的用户）
|
|
|
|
返回:
|
|
- None
|
|
"""
|
|
roles = await RoleCRUD(self.auth, self.db).get_list(search={"id": ("in", data.ids)})
|
|
role_map = {r.id: r for r in roles}
|
|
for rid in data.ids:
|
|
if rid not in role_map:
|
|
raise CustomException(msg="该数据不存在")
|
|
await RoleCRUD(self.auth, self.db).set(ids=data.ids, status=data.status)
|
|
if redis is not None:
|
|
await self._kick_users(redis, data.ids)
|
|
|
|
async def _kick_users(self, redis: Any, role_ids: list[int]) -> int:
|
|
"""踢下线绑定指定角色的全部用户的会话（角色权限/状态/删除后调用）。"""
|
|
roles = await RoleCRUD(self.auth, self.db).get_list(search={"id": ("in", role_ids)}, preload=["users"])
|
|
user_ids = sorted({u.id for r in roles for u in r.users})
|
|
if not user_ids:
|
|
return 0
|
|
|
|
from app.api.v1.module_monitor.online.service import OnlineService
|
|
|
|
try:
|
|
return await OnlineService.kick_user_sessions(redis=redis, user_ids=user_ids)
|
|
except Exception as e:
|
|
logger.error(f"角色变更自动踢下线失败: role_ids={role_ids}, err={e!s}")
|
|
return 0
|
|
|
|
@staticmethod
|
|
def export_list(role_list: list[dict[str, Any]]) -> bytes:
|
|
"""导出角色列表
|
|
|
|
参数:
|
|
- role_list (list[dict[str, Any]]): 角色详情字典列表
|
|
|
|
返回:
|
|
- bytes: Excel文件字节流
|
|
"""
|
|
# 字段映射配置
|
|
mapping_dict = {
|
|
"id": "角色编号",
|
|
"name": "角色名称",
|
|
"order": "显示顺序",
|
|
"data_scope": "数据权限",
|
|
"status": "状态",
|
|
"description": "备注",
|
|
"created_time": "创建时间",
|
|
"updated_time": "更新时间",
|
|
"created_id": "创建者ID",
|
|
"updated_id": "更新者ID",
|
|
}
|
|
|
|
# 数据权限映射
|
|
data_scope_map = {
|
|
1: "仅本人数据权限",
|
|
2: "本部门及以下数据权限",
|
|
3: "全部数据权限",
|
|
}
|
|
|
|
# 处理数据
|
|
data = role_list.copy()
|
|
for item in data:
|
|
item["status"] = "启用" if item.get("status") == 0 else "停用"
|
|
item["data_scope"] = data_scope_map.get(item.get("data_scope", 1), "")
|
|
|
|
return ExcelUtil.export_list2excel(list_data=data, mapping_dict=mapping_dict)
|