139 lines
4.6 KiB
Python
139 lines
4.6 KiB
Python
from flask import Blueprint, request, jsonify
|
|
from app.models import Role, User, db, RoleTemplate, Permission
|
|
from sqlalchemy.exc import IntegrityError
|
|
from datetime import datetime
|
|
|
|
bp = Blueprint('roles', __name__)
|
|
|
|
@bp.route('<int:role_id>/add_user', methods=['POST'])
|
|
def add_user_to_role(role_id):
|
|
data = request.get_json()
|
|
|
|
if not data or 'user_id' not in data:
|
|
return jsonify({'message': '用户ID是必需的'}), 400
|
|
|
|
user_id = data['user_id']
|
|
|
|
role = Role.query.get(role_id)
|
|
if not role:
|
|
return jsonify({'message': '角色不存在'}), 404
|
|
|
|
user = User.query.get(user_id)
|
|
if not user:
|
|
return jsonify({'message': '用户不存在'}), 404
|
|
|
|
if role not in user.roles:
|
|
user.roles.append(role)
|
|
else:
|
|
return jsonify({'message': '用户已经在该角色中'}), 400
|
|
|
|
try:
|
|
db.session.commit()
|
|
return jsonify({'message': '用户成功添加到角色'}), 200
|
|
except IntegrityError:
|
|
db.session.rollback()
|
|
return jsonify({'message': '添加用户到角色失败，可能是由于数据完整性问题'}), 500
|
|
|
|
# 你可以在这里添加更多的角色相关路由...
|
|
|
|
@bp.route('', methods=['POST'])
|
|
def create_role():
|
|
data = request.get_json()
|
|
|
|
if not data or 'name' not in data:
|
|
return jsonify({'message': '角色名称是必需的'}), 400
|
|
|
|
name = data['name']
|
|
|
|
# 检查角色名称是否已存在
|
|
if Role.query.filter_by(name=name).first():
|
|
return jsonify({'message': '角色名称已存在'}), 400
|
|
|
|
new_role = Role(name=name)
|
|
db.session.add(new_role)
|
|
|
|
# 如果提供了描述，设置它
|
|
if 'description' in data:
|
|
new_role.set_detail('description', data['description'])
|
|
|
|
try:
|
|
db.session.commit()
|
|
except IntegrityError:
|
|
db.session.rollback()
|
|
return jsonify({'message': '创建角色失败，可能是由于数据完整性问题'}), 500
|
|
|
|
return jsonify({'message': '角色创建成功', 'id': new_role.id}), 201
|
|
|
|
@bp.route('/<int:role_id>', methods=['GET'])
|
|
def get_role(role_id):
|
|
role = Role.query.get(role_id)
|
|
if not role:
|
|
return jsonify({'message': '角色不存在'}), 404
|
|
|
|
return jsonify({
|
|
'id': role.id,
|
|
'name': role.name,
|
|
'description': role.get_detail('description'),
|
|
'users': [user.id for user in role.users],
|
|
'parent_id': role.parent_id
|
|
}), 200
|
|
|
|
@bp.route('/templates', methods=['POST'])
|
|
def create_role_template():
|
|
data = request.get_json()
|
|
if not data or 'name' not in data or 'permissions' not in data:
|
|
return jsonify({'message': '缺少必要的字段'}), 400
|
|
|
|
template = RoleTemplate.create_template(
|
|
name=data['name'],
|
|
description=data.get('description'),
|
|
permissions=[Permission.query.get(p_id) for p_id in data['permissions']]
|
|
)
|
|
return jsonify({'message': '角色模板创建成功', 'id': template.id}), 201
|
|
|
|
@bp.route('/from_template', methods=['POST'])
|
|
def create_role_from_template():
|
|
data = request.get_json()
|
|
if not data or 'template_id' not in data:
|
|
return jsonify({'message': '缺少必要的字段'}), 400
|
|
|
|
try:
|
|
role = Role.create_from_template(
|
|
template_id=data['template_id'],
|
|
name=data.get('name')
|
|
)
|
|
return jsonify({'message': '角色创建成功', 'id': role.id}), 201
|
|
except ValueError as e:
|
|
return jsonify({'message': str(e)}), 400
|
|
|
|
@bp.route('', methods=['GET'])
|
|
def get_roles():
|
|
roles = Role.query.all()
|
|
roles_list = [{
|
|
'id': role.id,
|
|
'name': role.name,
|
|
'description': role.get_detail('description'),
|
|
'created_at': role.created_at.isoformat() if role.created_at else None
|
|
} for role in roles]
|
|
return jsonify(roles_list), 200
|
|
|
|
@bp.route('/<int:role_id>', methods=['GET'])
|
|
def get_role_details(role_id):
|
|
role = Role.query.get(role_id)
|
|
if not role:
|
|
return jsonify({'message': '角色不存在'}), 404
|
|
|
|
permissions = [{'id': p.id, 'name': p.name, 'description': p.get_detail('description')} for p in role.permissions]
|
|
users = [{'id': u.id, 'username': u.username} for u in role.users]
|
|
|
|
role_details = {
|
|
'id': role.id,
|
|
'name': role.name,
|
|
'description': role.get_detail('description'),
|
|
'created_at': role.created_at.isoformat() if role.created_at else None,
|
|
'permissions': permissions,
|
|
'users': users
|
|
}
|
|
|
|
return jsonify(role_details), 200
|