|
|
@@ -0,0 +1,852 @@
|
|
|
+package service
|
|
|
+
|
|
|
+import (
|
|
|
+ "context"
|
|
|
+ "dashoo.cn/micro/app/dao"
|
|
|
+ "dashoo.cn/micro/app/model"
|
|
|
+ "errors"
|
|
|
+ "fmt"
|
|
|
+ "github.com/gogf/gf/container/gset"
|
|
|
+ "github.com/gogf/gf/database/gdb"
|
|
|
+ "github.com/gogf/gf/errors/gerror"
|
|
|
+ "github.com/gogf/gf/frame/g"
|
|
|
+ "github.com/gogf/gf/os/gtime"
|
|
|
+ "github.com/gogf/gf/text/gstr"
|
|
|
+ "github.com/gogf/gf/util/gconv"
|
|
|
+ "github.com/gogf/gf/util/grand"
|
|
|
+ "github.com/mssola/user_agent"
|
|
|
+ "reflect"
|
|
|
+)
|
|
|
+
|
|
|
+type sysUser struct {
|
|
|
+ NotCheckAuthAdminIds *gset.Set //无需验证权限的用户id
|
|
|
+}
|
|
|
+
|
|
|
+type UserMenu struct {
|
|
|
+ *model.SysAuthRuleInfoRes
|
|
|
+ Index string `json:"index"`
|
|
|
+ Name string `json:"name"`
|
|
|
+ MenuName string `json:"menuName"`
|
|
|
+ Component string `json:"component"`
|
|
|
+ Path string `json:"path"`
|
|
|
+ Meta struct {
|
|
|
+ Icon string `json:"icon"`
|
|
|
+ Title string `json:"title"`
|
|
|
+ } `json:"meta"`
|
|
|
+ Hidden bool `json:"hidden"`
|
|
|
+ AlwaysShow bool `json:"alwaysShow"`
|
|
|
+}
|
|
|
+
|
|
|
+type UserMenus struct {
|
|
|
+ UserMenu
|
|
|
+ Children []UserMenus `json:"children"`
|
|
|
+}
|
|
|
+
|
|
|
+var (
|
|
|
+ notCheckAuthAdminIds = g.Cfg().GetInterfaces("system.notCheckAuthAdminIds")
|
|
|
+ SysUser = &sysUser{
|
|
|
+ NotCheckAuthAdminIds: gset.NewFrom(notCheckAuthAdminIds),
|
|
|
+ }
|
|
|
+)
|
|
|
+
|
|
|
+// GetAdminUserByUsernamePassword 后台登陆验证
|
|
|
+func (s *sysUser) GetAdminUserByUsernamePassword(ctx context.Context, req *model.LoginParamsReq) (user *model.LoginUserRes, err error) {
|
|
|
+ user, err = s.GetUserByUsernamePassword(ctx, req)
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ //判断是否后台用户
|
|
|
+ if user.IsAdmin != 1 {
|
|
|
+ return nil, gerror.New("抱歉!您不属于后台管理员!")
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetUserByUsernamePassword 登陆验证
|
|
|
+func (s *sysUser) GetUserByUsernamePassword(ctx context.Context, req *model.LoginParamsReq) (user *model.LoginUserRes, err error) {
|
|
|
+ user, err = s.GetUserByUsername(ctx, req.Username)
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ if user == nil {
|
|
|
+ return nil, gerror.New("账号密码错误")
|
|
|
+ }
|
|
|
+ //验证密码
|
|
|
+ if library.EncryptPassword(req.Password, user.UserSalt) != user.UserPassword {
|
|
|
+ return nil, gerror.New("账号密码错误")
|
|
|
+ }
|
|
|
+ //账号状态
|
|
|
+ if user.UserStatus == 0 {
|
|
|
+ return nil, gerror.New("账号已被冻结")
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetUserByUsername 通过用户名获取用户信息
|
|
|
+func (s *sysUser) GetUserByUsername(ctx context.Context, userName string) (user *model.LoginUserRes, err error) {
|
|
|
+ return dao.SysUser.FindByUsername(ctx, userName)
|
|
|
+}
|
|
|
+
|
|
|
+// UpdateLoginInfo 更新用户登录信息 保存登录日志
|
|
|
+func (s *sysUser) UpdateLoginInfo(id uint64, username, ip, userAgent, msg, module string) {
|
|
|
+ status := 0 //登录状态 0失败 1成功
|
|
|
+ if id != 0 {
|
|
|
+ //说明登录成功更新登录信息
|
|
|
+ status = 1
|
|
|
+ dao.SysUser.UpLoginInfo(id, ip)
|
|
|
+ }
|
|
|
+ //保存登录日志(异步)
|
|
|
+ SysLoginLog.Invoke(&model.LoginLogParams{
|
|
|
+ Status: status,
|
|
|
+ Username: username,
|
|
|
+ Ip: ip,
|
|
|
+ UserAgent: userAgent,
|
|
|
+ Msg: msg,
|
|
|
+ Module: module,
|
|
|
+ })
|
|
|
+}
|
|
|
+
|
|
|
+// LoginLog 记录登录日志
|
|
|
+func (s *sysUser) LoginLog(params *model.LoginLogParams) {
|
|
|
+ ua := user_agent.New(params.UserAgent)
|
|
|
+ browser, _ := ua.Browser()
|
|
|
+ loginData := &model.SysLogin{
|
|
|
+ LoginName: params.Username,
|
|
|
+ Ipaddr: params.Ip,
|
|
|
+ LoginLocation: library.GetCityByIp(params.Ip),
|
|
|
+ Browser: browser,
|
|
|
+ Os: ua.OS(),
|
|
|
+ Status: params.Status,
|
|
|
+ Msg: params.Msg,
|
|
|
+ LoginTime: gtime.Now(),
|
|
|
+ Module: params.Module,
|
|
|
+ }
|
|
|
+ dao.SysLoginLog.SaveLog(loginData)
|
|
|
+}
|
|
|
+
|
|
|
+// SaveOnline 保存用户登录在线状态信息
|
|
|
+func (s *sysUser) SaveOnline(params *model.SysUserOnline) {
|
|
|
+ dao.SysUserOnline.SaveOnline(params)
|
|
|
+}
|
|
|
+
|
|
|
+// GetAdminRole 获取用户角色
|
|
|
+func (s *sysUser) GetAdminRole(userId uint64, allRoleList []*model.SysRole) (roles []*model.SysRole, err error) {
|
|
|
+ var roleIds []uint
|
|
|
+ roleIds, err = s.GetAdminRoleIds(userId)
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ roles = make([]*model.SysRole, 0, len(allRoleList))
|
|
|
+ for _, v := range allRoleList {
|
|
|
+ for _, id := range roleIds {
|
|
|
+ if id == v.Id {
|
|
|
+ roles = append(roles, v)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if len(roles) == len(roleIds) {
|
|
|
+ break
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetAdminRoleIds 获取用户角色ids
|
|
|
+func (s *sysUser) GetAdminRoleIds(userId uint64) (roleIds []uint, err error) {
|
|
|
+ enforcer, e := service.Casbin.GetEnforcer()
|
|
|
+ if e != nil {
|
|
|
+ err = e
|
|
|
+ return
|
|
|
+ }
|
|
|
+ //查询关联角色规则
|
|
|
+ groupPolicy := enforcer.GetFilteredGroupingPolicy(0, gconv.String(userId))
|
|
|
+ if len(groupPolicy) > 0 {
|
|
|
+ roleIds = make([]uint, len(groupPolicy))
|
|
|
+ //得到角色id的切片
|
|
|
+ for k, v := range groupPolicy {
|
|
|
+ roleIds[k] = gconv.Uint(v[1])
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) GetPermissions(roleIds []uint) ([]string, error) {
|
|
|
+ //获取角色对应的菜单id
|
|
|
+ enforcer, err := service.Casbin.GetEnforcer()
|
|
|
+ if err != nil {
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ menuIds := map[int64]int64{}
|
|
|
+ for _, roleId := range roleIds {
|
|
|
+ //查询当前权限
|
|
|
+ gp := enforcer.GetFilteredPolicy(0, gconv.String(roleId))
|
|
|
+ for _, p := range gp {
|
|
|
+ mid := gconv.Int64(p[1])
|
|
|
+ menuIds[mid] = mid
|
|
|
+ }
|
|
|
+ }
|
|
|
+ //获取所有开启的按钮
|
|
|
+ allButtons, err := Rule.GetIsButtonStatusList()
|
|
|
+ userButtons := make([]string, 0, len(allButtons))
|
|
|
+ for _, button := range allButtons {
|
|
|
+ if _, ok := menuIds[gconv.Int64(button.Id)]; gstr.Equal(button.Condition, "nocheck") || ok {
|
|
|
+ userButtons = append(userButtons, button.Name)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return userButtons, nil
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) GetAllMenus() (menus []UserMenus, err error) {
|
|
|
+ //获取所有开启的菜单
|
|
|
+ var allMenus []*model.SysAuthRuleInfoRes
|
|
|
+ allMenus, err = Rule.GetIsMenuStatusList()
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ menus = make([]UserMenus, len(allMenus))
|
|
|
+ for k, v := range allMenus {
|
|
|
+ var menu UserMenu
|
|
|
+ menu = s.setMenuData(menu, v)
|
|
|
+ menus[k] = UserMenus{UserMenu: menu}
|
|
|
+ }
|
|
|
+ menus = s.GetMenusTree(menus, 0)
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) GetAdminMenusByRoleIds(roleIds []uint) (menus []UserMenus, err error) {
|
|
|
+ //获取角色对应的菜单id
|
|
|
+ enforcer, e := service.Casbin.GetEnforcer()
|
|
|
+ if e != nil {
|
|
|
+ err = e
|
|
|
+ return
|
|
|
+ }
|
|
|
+ menuIds := map[int64]int64{}
|
|
|
+ for _, roleId := range roleIds {
|
|
|
+ //查询当前权限
|
|
|
+ gp := enforcer.GetFilteredPolicy(0, fmt.Sprintf("%d", roleId))
|
|
|
+ for _, p := range gp {
|
|
|
+ mid := gconv.Int64(p[1])
|
|
|
+ menuIds[mid] = mid
|
|
|
+ }
|
|
|
+ }
|
|
|
+ //获取所有开启的菜单
|
|
|
+ allMenus, err := Rule.GetIsMenuStatusList()
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ menus = make([]UserMenus, 0, len(allMenus))
|
|
|
+ for _, v := range allMenus {
|
|
|
+ if _, ok := menuIds[gconv.Int64(v.Id)]; gstr.Equal(v.Condition, "nocheck") || ok {
|
|
|
+ var roleMenu UserMenu
|
|
|
+ roleMenu = s.setMenuData(roleMenu, v)
|
|
|
+ menus = append(menus, UserMenus{UserMenu: roleMenu})
|
|
|
+ }
|
|
|
+ }
|
|
|
+ menus = s.GetMenusTree(menus, 0)
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) GetMenusTree(menus []UserMenus, pid uint) []UserMenus {
|
|
|
+ returnList := make([]UserMenus, 0, len(menus))
|
|
|
+ for _, menu := range menus {
|
|
|
+ if menu.Pid == pid {
|
|
|
+ menu.Children = s.GetMenusTree(menus, menu.Id)
|
|
|
+ returnList = append(returnList, menu)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return returnList
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) setMenuData(menu UserMenu, entity *model.SysAuthRuleInfoRes) UserMenu {
|
|
|
+ menu = UserMenu{
|
|
|
+ SysAuthRuleInfoRes: entity,
|
|
|
+ Index: entity.Name,
|
|
|
+ Name: gstr.UcFirst(entity.Path),
|
|
|
+ MenuName: entity.Title,
|
|
|
+ Meta: struct {
|
|
|
+ Icon string `json:"icon"`
|
|
|
+ Title string `json:"title"`
|
|
|
+ }(struct {
|
|
|
+ Icon string
|
|
|
+ Title string
|
|
|
+ }{Icon: entity.Icon, Title: entity.Title}),
|
|
|
+ }
|
|
|
+ if entity.MenuType != 0 {
|
|
|
+ menu.Component = entity.Component
|
|
|
+ menu.Path = entity.Path
|
|
|
+ } else {
|
|
|
+ menu.Component = "Layout"
|
|
|
+ menu.Path = "/" + entity.Path
|
|
|
+ }
|
|
|
+ if entity.AlwaysShow == 1 {
|
|
|
+ menu.Hidden = false
|
|
|
+ } else {
|
|
|
+ menu.Hidden = true
|
|
|
+ }
|
|
|
+ if entity.AlwaysShow == 1 && entity.MenuType == 0 {
|
|
|
+ menu.AlwaysShow = true
|
|
|
+ } else {
|
|
|
+ menu.AlwaysShow = false
|
|
|
+ }
|
|
|
+ return menu
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) WriteDeptIdsOfSearchReq(req *model.SysUserSearchReq) error {
|
|
|
+ if req.DeptId == "" {
|
|
|
+ return nil
|
|
|
+ }
|
|
|
+ depts, e := Dept.GetList(&dao.SysDeptSearchParams{
|
|
|
+ Status: "1",
|
|
|
+ })
|
|
|
+ if e != nil {
|
|
|
+ return e
|
|
|
+ }
|
|
|
+ deptId := gconv.Int64(req.DeptId)
|
|
|
+ req.DeptIds = append(req.DeptIds, deptId)
|
|
|
+ children := Dept.FindSonByParentId(depts, deptId)
|
|
|
+ for _, d := range children {
|
|
|
+ req.DeptIds = append(req.DeptIds, d.DeptId)
|
|
|
+ }
|
|
|
+ return nil
|
|
|
+}
|
|
|
+
|
|
|
+// GetUsersRoleDept 获取多个用户角色 部门信息
|
|
|
+func (s *sysUser) GetUsersRoleDept(userList []*model.SysUser) ([]*model.SysUserRoleDeptRes, error) {
|
|
|
+ allRoles, err := SysRole.GetRoleList()
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ depts, err := Dept.GetList(&dao.SysDeptSearchParams{})
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ users := make([]*model.SysUserRoleDeptRes, len(userList))
|
|
|
+ for k, u := range userList {
|
|
|
+ var dept *model.SysDept
|
|
|
+ users[k] = &model.SysUserRoleDeptRes{
|
|
|
+ SysUser: u,
|
|
|
+ }
|
|
|
+ for _, d := range depts {
|
|
|
+ if u.DeptId == uint64(d.DeptId) {
|
|
|
+ dept = d
|
|
|
+ }
|
|
|
+ }
|
|
|
+ users[k].Dept = dept
|
|
|
+ roles, err := s.GetAdminRole(u.Id, allRoles)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ for _, r := range roles {
|
|
|
+ users[k].RoleInfo = append(users[k].RoleInfo, &struct {
|
|
|
+ RoleId uint `json:"roleId"`
|
|
|
+ Name string `json:"name"`
|
|
|
+ }{RoleId: r.Id, Name: r.Name})
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return users, nil
|
|
|
+}
|
|
|
+
|
|
|
+// GetUserRoleDeptPost 获取某个用户对应的部门、岗位、角色信息
|
|
|
+func (s *sysUser) GetUserRoleDeptPost(user *model.SysUser) (*model.SysUserRoleDeptRes, error) {
|
|
|
+ allRoles, err := SysRole.GetRoleList()
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ //部门
|
|
|
+ depts, err := Dept.GetList(&dao.SysDeptSearchParams{})
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ userData := &model.SysUserRoleDeptRes{
|
|
|
+ SysUser: user,
|
|
|
+ }
|
|
|
+ for _, d := range depts {
|
|
|
+ if user.DeptId == uint64(d.DeptId) {
|
|
|
+ userData.Dept = d
|
|
|
+ }
|
|
|
+ }
|
|
|
+ //角色
|
|
|
+ roles, err := s.GetAdminRole(user.Id, allRoles)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ for _, r := range roles {
|
|
|
+ userData.RoleInfo = append(userData.RoleInfo, &struct {
|
|
|
+ RoleId uint `json:"roleId"`
|
|
|
+ Name string `json:"name"`
|
|
|
+ }{RoleId: r.Id, Name: r.Name})
|
|
|
+ }
|
|
|
+ //岗位
|
|
|
+ posts, err := s.GetPostsByUserId(user.Id)
|
|
|
+ if err != nil {
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+
|
|
|
+ for _, v := range posts {
|
|
|
+ userData.Post = append(userData.Post, &struct {
|
|
|
+ PostId int64 `json:"postId"`
|
|
|
+ PostName string `json:"postName"`
|
|
|
+ }{PostId: v.PostId, PostName: v.PostName})
|
|
|
+ }
|
|
|
+ return userData, nil
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) GetUserList(req *model.SysUserSearchReq) (total, page int, userList []*model.SysUser, err error) {
|
|
|
+ if req.PageSize == 0 {
|
|
|
+ req.PageSize = comModel.PageSize
|
|
|
+ }
|
|
|
+ userModel := dao.SysUser.M
|
|
|
+ if req.KeyWords != "" {
|
|
|
+ keyWords := "%" + req.KeyWords + "%"
|
|
|
+ userModel = userModel.Where("user_name like ? or user_nickname like ?", keyWords, keyWords)
|
|
|
+ }
|
|
|
+ if len(req.DeptIds) != 0 {
|
|
|
+ userModel = userModel.Where("dept_id in (?)", req.DeptIds)
|
|
|
+ }
|
|
|
+ if req.Status != "" {
|
|
|
+ userModel = userModel.Where("user_status", gconv.Int(req.Status))
|
|
|
+ }
|
|
|
+ if req.Phonenumber != "" {
|
|
|
+ userModel = userModel.Where("mobile like ?", "%"+req.Phonenumber+"%")
|
|
|
+ }
|
|
|
+ if req.BeginTime != "" {
|
|
|
+ userModel = userModel.Where("created_at >=?", req.BeginTime)
|
|
|
+ }
|
|
|
+ if req.EndTime != "" {
|
|
|
+ userModel = userModel.Where("created_at <=?", req.EndTime)
|
|
|
+ }
|
|
|
+ total, err = userModel.Count()
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("获取总行数失败")
|
|
|
+ return
|
|
|
+ }
|
|
|
+ if req.PageNum == 0 {
|
|
|
+ req.PageNum = 1
|
|
|
+ }
|
|
|
+ page = req.PageNum
|
|
|
+ err = userModel.FieldsEx(dao.SysUser.Columns.UserPassword, dao.SysUser.Columns.UserSalt).
|
|
|
+ Page(page, req.PageSize).Order("id asc").Scan(&userList)
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) AddUser(req *model.AddUserReq) (err error) {
|
|
|
+ req.UserSalt = grand.S(10)
|
|
|
+ req.Password = library.EncryptPassword(req.Password, req.UserSalt)
|
|
|
+ var tx *gdb.TX
|
|
|
+ tx, err = g.DB().Begin()
|
|
|
+ if err != nil {
|
|
|
+ err = gerror.New("事务开启失败")
|
|
|
+ return
|
|
|
+ }
|
|
|
+ Model := dao.SysUser.TX(tx)
|
|
|
+ if i, _ := Model.Where("user_name=?", req.UserName).Count(); i != 0 {
|
|
|
+ err = gerror.New("用户名已经存在")
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ if i, _ := Model.Where("mobile=?", req.Phonenumber).Count(); i != 0 {
|
|
|
+ err = gerror.New("手机号已经存在")
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ userData := new(model.SysUser)
|
|
|
+ userData.UserName = req.UserName
|
|
|
+ userData.DeptId = req.DeptId
|
|
|
+ userData.UserStatus = req.Status
|
|
|
+ userData.Mobile = req.Phonenumber
|
|
|
+ userData.Sex = req.Sex
|
|
|
+ userData.UserEmail = req.Email
|
|
|
+ userData.UserNickname = req.NickName
|
|
|
+ userData.UserSalt = req.UserSalt
|
|
|
+ userData.UserPassword = req.Password
|
|
|
+ userData.Remark = req.Remark
|
|
|
+ userData.IsAdmin = req.IsAdmin
|
|
|
+ res, err := Model.Insert(userData)
|
|
|
+ if err != nil {
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ InsertId, _ := res.LastInsertId()
|
|
|
+ err = s.AddUserRole(req.RoleIds, InsertId)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("设置用户权限失败")
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ err = s.AddUserPost(req.PostIds, InsertId, tx)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("设置用户岗位信息失败")
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ tx.Commit()
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// AddUserRole 添加用户角色信息
|
|
|
+func (s *sysUser) AddUserRole(roleIds interface{}, userId int64) (err error) {
|
|
|
+ enforcer, e := service.Casbin.GetEnforcer()
|
|
|
+ if e != nil {
|
|
|
+ err = e
|
|
|
+ return
|
|
|
+ }
|
|
|
+ rule := gconv.Ints(roleIds)
|
|
|
+ for _, v := range rule {
|
|
|
+ _, err = enforcer.AddGroupingPolicy(fmt.Sprintf("%d", userId), fmt.Sprintf("%d", v))
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// AddUserPost 添加用户岗位信息
|
|
|
+func (s *sysUser) AddUserPost(postIds []int64, userId int64, tx *gdb.TX) (err error) {
|
|
|
+ //删除旧岗位信息
|
|
|
+ _, err = dao.SysUserPost.TX(tx).Where(dao.SysUserPost.Columns.UserId, userId).Delete()
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+ if len(postIds) == 0 {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ //添加用户岗位信息
|
|
|
+ data := g.List{}
|
|
|
+ for _, v := range postIds {
|
|
|
+ data = append(data, g.Map{
|
|
|
+ dao.SysUserPost.Columns.UserId: userId,
|
|
|
+ dao.SysUserPost.Columns.PostId: v,
|
|
|
+ })
|
|
|
+ }
|
|
|
+ _, err = dao.SysUserPost.TX(tx).Data(data).Insert()
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetUserInfoById 通过Id获取用户信息
|
|
|
+func (s *sysUser) GetUserInfoById(id uint64, withPwd ...bool) (user *model.SysUser, err error) {
|
|
|
+ if len(withPwd) > 0 && withPwd[0] {
|
|
|
+ //用户用户信息
|
|
|
+ err = dao.SysUser.Where(dao.SysUser.Columns.Id, id).Scan(&user)
|
|
|
+ } else {
|
|
|
+ //用户用户信息
|
|
|
+ err = dao.SysUser.Where(dao.SysUser.Columns.Id, id).
|
|
|
+ FieldsEx(dao.SysUser.Columns.UserPassword, dao.SysUser.Columns.UserSalt).Scan(&user)
|
|
|
+ }
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, errors.New("获取用户数据失败")
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetEditUser 获取要修改的用户信息
|
|
|
+func (s *sysUser) GetEditUser(id uint64) (g.Map, error) {
|
|
|
+ userData, err := s.GetUserInfoById(id)
|
|
|
+ //获取角色信息
|
|
|
+ roleList, err := SysRole.GetRoleList()
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, errors.New("获取角色数据失败")
|
|
|
+ }
|
|
|
+ //获取已选择的角色信息
|
|
|
+ checkedRoleIds, err := SysUser.GetAdminRoleIds(id)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, errors.New("获取用户角色数据失败")
|
|
|
+ }
|
|
|
+ if checkedRoleIds == nil {
|
|
|
+ checkedRoleIds = []uint{}
|
|
|
+ }
|
|
|
+ //获取岗位信息
|
|
|
+ posts, err := s.GetUsedPost()
|
|
|
+ if err != nil {
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ checkedPosts, err := s.GetUserPostIds(id)
|
|
|
+ if err != nil {
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+
|
|
|
+ if checkedPosts == nil {
|
|
|
+ checkedPosts = []int64{}
|
|
|
+ }
|
|
|
+
|
|
|
+ res := g.Map{
|
|
|
+ "roleList": roleList,
|
|
|
+ "userInfo": userData,
|
|
|
+ "checkedRoleIds": checkedRoleIds,
|
|
|
+ "posts": posts,
|
|
|
+ "checkedPosts": checkedPosts,
|
|
|
+ }
|
|
|
+
|
|
|
+ return res, nil
|
|
|
+}
|
|
|
+
|
|
|
+// GetUsedPost 获取正常状态的岗位
|
|
|
+func (s *sysUser) GetUsedPost() (list []*model.SysPost, err error) {
|
|
|
+ err = dao.SysPost.Where(dao.SysPost.C.Status, 1).
|
|
|
+ Order(dao.SysPost.C.PostSort + " ASC, " + dao.SysPost.C.PostId + " ASC ").Scan(&list)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("获取岗位数据失败")
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetUserPostIds 获取用户岗位
|
|
|
+func (s *sysUser) GetUserPostIds(userId uint64) (postIds []int64, err error) {
|
|
|
+ var list []*model.SysUserPost
|
|
|
+ err = dao.SysUserPost.Where(dao.SysUserPost.Columns.UserId, userId).Scan(&list)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ return nil, gerror.New("获取用户岗位信息失败")
|
|
|
+ }
|
|
|
+ postIds = make([]int64, 0)
|
|
|
+ for _, entity := range list {
|
|
|
+ postIds = append(postIds, entity.PostId)
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetPostsByUserId 根据用户id获取岗位信息详情
|
|
|
+func (s *sysUser) GetPostsByUserId(userId uint64) ([]*model.SysPost, error) {
|
|
|
+ postIds, err := s.GetUserPostIds(userId)
|
|
|
+ if err != nil {
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ var posts []*model.SysPost
|
|
|
+ err = dao.SysPost.Where(dao.SysPost.C.PostId+" in (?)", postIds).Scan(&posts)
|
|
|
+ return posts, err
|
|
|
+}
|
|
|
+
|
|
|
+// EditUser 修改用户
|
|
|
+func (s *sysUser) EditUser(req *model.EditUserReq) (err error) {
|
|
|
+ if i, _ := dao.SysUser.Where("id!=? and mobile=?", req.UserId, req.Phonenumber).Count(); i != 0 {
|
|
|
+ err = gerror.New("手机号已经存在")
|
|
|
+ return
|
|
|
+ }
|
|
|
+ var tx *gdb.TX
|
|
|
+ tx, err = g.DB().Begin()
|
|
|
+ //保存管理员信息
|
|
|
+ var userData *model.SysUser
|
|
|
+ err = dao.SysUser.Where("id", req.UserId).Scan(&userData)
|
|
|
+ if err != nil || userData == nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("获取用户信息失败")
|
|
|
+ return
|
|
|
+ }
|
|
|
+ userData.DeptId = req.DeptId
|
|
|
+ userData.UserStatus = req.Status
|
|
|
+ userData.Mobile = req.Phonenumber
|
|
|
+ userData.Sex = req.Sex
|
|
|
+ userData.UserEmail = req.Email
|
|
|
+ userData.UserNickname = req.NickName
|
|
|
+ userData.Remark = req.Remark
|
|
|
+ userData.IsAdmin = req.IsAdmin
|
|
|
+ _, err = dao.SysUser.TX(tx).FieldsEx(dao.SysUser.Columns.Id, dao.SysUser.Columns.CreatedAt,
|
|
|
+ dao.SysUser.Columns.DeletedAt, dao.SysUser.Columns.LastLoginTime).
|
|
|
+ WherePri(userData.Id).Update(userData)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("修改用户信息失败")
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ //设置用户所属角色信息
|
|
|
+ err = s.EditUserRole(req.RoleIds, req.UserId)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("设置用户权限失败")
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ //设置用户岗位数据
|
|
|
+ err = s.AddUserPost(req.PostIds, gconv.Int64(req.UserId), tx)
|
|
|
+ if err != nil {
|
|
|
+ g.Log().Error(err)
|
|
|
+ err = gerror.New("设置用户岗位信息失败")
|
|
|
+ tx.Rollback()
|
|
|
+ return
|
|
|
+ }
|
|
|
+ tx.Commit()
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// EditUserRole 修改用户角色信息
|
|
|
+func (s *sysUser) EditUserRole(roleIds interface{}, userId int) (err error) {
|
|
|
+ enforcer, e := service.Casbin.GetEnforcer()
|
|
|
+ if e != nil {
|
|
|
+ err = e
|
|
|
+ return
|
|
|
+ }
|
|
|
+ rule := gconv.Ints(roleIds)
|
|
|
+ //删除用户旧角色信息
|
|
|
+ enforcer.RemoveFilteredGroupingPolicy(0, fmt.Sprintf("%d", userId))
|
|
|
+ for _, v := range rule {
|
|
|
+ _, err = enforcer.AddGroupingPolicy(fmt.Sprintf("%d", userId), fmt.Sprintf("%d", v))
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// ResetUserPwd 重置用户密码
|
|
|
+func (s *sysUser) ResetUserPwd(req *model.SysUserResetPwdReq) error {
|
|
|
+ salt := grand.S(10)
|
|
|
+ password := library.EncryptPassword(req.Password, salt)
|
|
|
+ _, err := dao.SysUser.WherePri(req.Id).Update(g.Map{
|
|
|
+ dao.SysUser.Columns.UserSalt: salt,
|
|
|
+ dao.SysUser.Columns.UserPassword: password,
|
|
|
+ })
|
|
|
+ return err
|
|
|
+}
|
|
|
+
|
|
|
+func (s *sysUser) ChangeUserStatus(req *model.SysUserStatusReq) error {
|
|
|
+ _, err := dao.SysUser.WherePri(req.Id).Update(g.Map{
|
|
|
+ dao.SysUser.Columns.UserStatus: req.UserStatus,
|
|
|
+ })
|
|
|
+ return err
|
|
|
+}
|
|
|
+
|
|
|
+// DeleteUser 删除用户信息
|
|
|
+func (s *sysUser) DeleteUser(ctx context.Context, ids []int) error {
|
|
|
+ return g.DB().Transaction(ctx, func(ctx context.Context, tx *gdb.TX) error {
|
|
|
+ _, err := dao.SysUser.Ctx(ctx).TX(tx).Where(dao.SysUser.Columns.Id+" in(?)", ids).Delete()
|
|
|
+ //删除对应权限
|
|
|
+ enforcer, err := service.Casbin.GetEnforcer()
|
|
|
+ if err == nil {
|
|
|
+ for _, v := range ids {
|
|
|
+ enforcer.RemoveFilteredGroupingPolicy(0, fmt.Sprintf("%d", v))
|
|
|
+ }
|
|
|
+ }
|
|
|
+ //删除用户对应的岗位
|
|
|
+ _, err = dao.SysUserPost.Ctx(ctx).TX(tx).Delete(dao.SysUserPost.Columns.UserId+" in (?)", ids)
|
|
|
+ return err
|
|
|
+ })
|
|
|
+}
|
|
|
+
|
|
|
+// SetAvatar 修改用户头像
|
|
|
+func (s *sysUser) SetAvatar(userId uint64, avatarUrl string) error {
|
|
|
+ _, err := dao.SysUser.WherePri(userId).Unscoped().Update(g.Map{
|
|
|
+ dao.SysUser.Columns.Avatar: avatarUrl,
|
|
|
+ })
|
|
|
+ return err
|
|
|
+}
|
|
|
+
|
|
|
+// ProfileEdit 修改个人资料
|
|
|
+func (s *sysUser) ProfileEdit(req *model.ProfileUpReq) error {
|
|
|
+ _, err := dao.SysUser.WherePri(req.UserId).Unscoped().Update(req)
|
|
|
+ return err
|
|
|
+}
|
|
|
+
|
|
|
+// ProfileUpdatePwd 修改个人密码
|
|
|
+func (s *sysUser) ProfileUpdatePwd(req *model.ProfileUpdatePwdReq) error {
|
|
|
+ userInfo, err := s.GetUserInfoById(req.UserId, true)
|
|
|
+ if err != nil {
|
|
|
+ return err
|
|
|
+ }
|
|
|
+ oldPassword := library.EncryptPassword(req.OldPassword, userInfo.UserSalt)
|
|
|
+ if oldPassword != userInfo.UserPassword {
|
|
|
+ return errors.New("原始密码错误!")
|
|
|
+ }
|
|
|
+ salt := grand.S(10)
|
|
|
+ newPassword := library.EncryptPassword(req.NewPassword, salt)
|
|
|
+ _, err = dao.SysUser.WherePri(req.UserId).Unscoped().Update(g.Map{
|
|
|
+ dao.SysUser.Columns.UserSalt: salt,
|
|
|
+ dao.SysUser.Columns.UserPassword: newPassword,
|
|
|
+ })
|
|
|
+ return err
|
|
|
+}
|
|
|
+
|
|
|
+// GetDataWhere 获取数据权限判断条件
|
|
|
+func (s *sysUser) GetDataWhere(userInfo *dao.CtxUser, entity interface{}) (where g.Map, err error) {
|
|
|
+ whereJustMe := g.Map{} //本人数据权限
|
|
|
+ t := reflect.TypeOf(entity)
|
|
|
+ for i := 0; i < t.Elem().NumField(); i++ {
|
|
|
+ if t.Elem().Field(i).Name == "CreatedBy" {
|
|
|
+ //若存在用户id的字段,则生成判断数据权限的条件
|
|
|
+ //1、获取当前用户所属角色
|
|
|
+ allRoles := ([]*model.SysRole)(nil)
|
|
|
+ allRoles, err = SysRole.GetRoleList()
|
|
|
+ if err != nil {
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ roles := ([]*model.SysRole)(nil)
|
|
|
+ roles, err = s.GetAdminRole(userInfo.Id, allRoles)
|
|
|
+ if err != nil {
|
|
|
+ return nil, err
|
|
|
+ }
|
|
|
+ //2获取角色对应数据权限
|
|
|
+ deptIdArr := gset.New()
|
|
|
+ for _, role := range roles {
|
|
|
+ switch role.DataScope {
|
|
|
+ case 1: //全部数据权限
|
|
|
+ return
|
|
|
+ case 2: //自定数据权限
|
|
|
+ var deptIds []int64
|
|
|
+ deptIds, err = Dept.GetRoleDepts(gconv.Int64(role.Id))
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ deptIdArr.Add(gconv.Interfaces(deptIds)...)
|
|
|
+ case 3: //本部门数据权限
|
|
|
+ deptIdArr.Add(gconv.Int64(userInfo.DeptId))
|
|
|
+ case 4: //本部门及以下数据权限
|
|
|
+ deptIdArr.Add(gconv.Int64(userInfo.DeptId))
|
|
|
+ //获取正常状态部门数据
|
|
|
+ depts := ([]*model.SysDept)(nil)
|
|
|
+ depts, err = Dept.GetList(&dao.SysDeptSearchParams{Status: "1"})
|
|
|
+ if err != nil {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ var dList g.List
|
|
|
+ for _, d := range depts {
|
|
|
+ m := g.Map{
|
|
|
+ "id": d.DeptId,
|
|
|
+ "pid": d.ParentId,
|
|
|
+ "label": d.DeptName,
|
|
|
+ }
|
|
|
+ dList = append(dList, m)
|
|
|
+ }
|
|
|
+ l := library.FindSonByParentId(dList, gconv.Int(userInfo.DeptId), "pid", "id")
|
|
|
+ for _, li := range l {
|
|
|
+ deptIdArr.Add(gconv.Int64(li["id"]))
|
|
|
+ }
|
|
|
+ case 5: //仅本人数据权限
|
|
|
+ whereJustMe = g.Map{"user.id": userInfo.Id}
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if deptIdArr.Size() > 0 {
|
|
|
+ where = g.Map{"user.dept_id": deptIdArr.Slice()}
|
|
|
+ } else if len(whereJustMe) > 0 {
|
|
|
+ where = whereJustMe
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return
|
|
|
+}
|
|
|
+
|
|
|
+// GetUsers 通过用户ids查询多个用户信息
|
|
|
+func (s *sysUser) GetUsers(ids []int) (users []*model.SysUserRes, err error) {
|
|
|
+ if len(ids) == 0 {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ idsSet := gset.NewIntSetFrom(ids).Slice()
|
|
|
+ err = dao.SysUser.Where(dao.SysUser.Columns.Id+" in(?)", idsSet).Fields(model.SysUserRes{}).
|
|
|
+ Order(dao.SysUser.Columns.Id + " ASC").Scan(&users)
|
|
|
+ return
|
|
|
+}
|