增加权限系统

This commit is contained in:
yml2213
2026-05-27 05:41:59 +08:00
parent a04327fd05
commit 1458fc279c
29 changed files with 2276 additions and 46 deletions
@@ -0,0 +1,205 @@
<script setup lang="ts">
import { ElMessage, ElMessageBox } from 'element-plus'
import { ref } from 'vue'
import { fetchAdminMgrUsers, deleteAdminMgrUser, changeAdminPassword, type AdminMgrUser } from '@/api/adminMgr'
import { useAdminPaginatedTable } from '@/composables/useAdminPaginatedTable'
import { formatDateTime } from '@/utils/time'
import AdminUserDialog from './components/AdminUserDialog.vue'
import AssignRolesDialog from './components/AssignRolesDialog.vue'
const showDialog = ref(false)
const editingAdmin = ref<AdminMgrUser | null>(null)
const showRolesDialog = ref(false)
const rolesAdmin = ref<AdminMgrUser | null>(null)
const showPasswordDialog = ref(false)
const passwordAdmin = ref<AdminMgrUser | null>(null)
const passwordForm = ref({ old_password: '', new_password: '' })
const passwordSubmitting = ref(false)
const { loading, data: admins, total, currentPage, currentPageSize, load: loadAdmins, handleSizeChange } = useAdminPaginatedTable<AdminMgrUser>({
fetchFn: fetchAdminMgrUsers,
})
function openCreate() {
editingAdmin.value = null
showDialog.value = true
}
function openEdit(row: AdminMgrUser) {
editingAdmin.value = row
showDialog.value = true
}
function openRoles(row: AdminMgrUser) {
rolesAdmin.value = row
showRolesDialog.value = true
}
function openPassword(row: AdminMgrUser) {
passwordAdmin.value = row
passwordForm.value = { old_password: '', new_password: '' }
showPasswordDialog.value = true
}
async function handleDelete(row: AdminMgrUser) {
try {
await ElMessageBox.confirm(`确定要删除管理员「${row.username}」吗?此操作不可撤销。`, '删除确认', {
confirmButtonText: '确认删除',
cancelButtonText: '取消',
type: 'warning',
})
await deleteAdminMgrUser(row.id)
ElMessage.success('管理员已删除')
await loadAdmins()
} catch {
// 用户取消
}
}
async function handleChangePassword() {
if (!passwordAdmin.value) return
if (!passwordForm.value.old_password || !passwordForm.value.new_password) {
ElMessage.warning('请填写完整')
return
}
passwordSubmitting.value = true
try {
await changeAdminPassword(passwordAdmin.value.id, passwordForm.value)
ElMessage.success('密码已修改')
showPasswordDialog.value = false
} catch (error) {
ElMessage.error(readError(error, '修改失败'))
} finally {
passwordSubmitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
const statusLabel: Record<string, string> = {
active: '启用',
disabled: '禁用',
}
</script>
<template>
<section class="page">
<div class="page-header-row">
<div class="page-header">
<p class="eyebrow">Admin Users</p>
<h1>管理员管理</h1>
<p>管理后台管理员账号,分配角色和权限。</p>
</div>
<div class="toolbar-actions">
<el-button @click="loadAdmins">刷新</el-button>
<el-button type="primary" @click="openCreate">新建管理员</el-button>
</div>
</div>
<el-table v-loading="loading" class="table-panel" :data="admins">
<el-table-column prop="id" label="ID" width="70" />
<el-table-column prop="username" label="用户名" min-width="120" />
<el-table-column prop="nickname" label="昵称" min-width="120" />
<el-table-column label="角色" min-width="200">
<template #default="{ row }">
<el-tag
v-for="role in row.roles"
:key="role.id"
size="small"
style="margin-right: 4px; margin-bottom: 2px"
>
{{ role.name }}
</el-tag>
<span v-if="!row.roles?.length" style="color: #8f9bba">未分配</span>
</template>
</el-table-column>
<el-table-column label="状态" width="90">
<template #default="{ row }">
<el-tag :type="row.status === 'active' ? 'success' : 'danger'" size="small">
{{ statusLabel[row.status] || row.status }}
</el-tag>
</template>
</el-table-column>
<el-table-column label="最后登录" min-width="170">
<template #default="{ row }">{{ row.last_login_at ? formatDateTime(row.last_login_at) : '-' }}</template>
</el-table-column>
<el-table-column label="操作" width="300" fixed="right">
<template #default="{ row }">
<el-button size="small" @click="openEdit(row)">编辑</el-button>
<el-button size="small" type="primary" @click="openRoles(row)">角色</el-button>
<el-button size="small" @click="openPassword(row)">密码</el-button>
<el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
</template>
</el-table-column>
</el-table>
<div class="pagination-wrap" v-if="total > 0">
<el-pagination
v-model:current-page="currentPage"
v-model:page-size="currentPageSize"
:total="total"
:page-sizes="[10, 20, 50, 100]"
layout="total, sizes, prev, pager, next"
@current-change="loadAdmins"
@size-change="handleSizeChange"
/>
</div>
<!-- 新建/编辑对话框 -->
<AdminUserDialog
v-model="showDialog"
:admin="editingAdmin"
@saved="loadAdmins"
/>
<!-- 角色分配对话框 -->
<AssignRolesDialog
v-model="showRolesDialog"
:admin="rolesAdmin"
@saved="loadAdmins"
/>
<!-- 修改密码对话框 -->
<el-dialog
:model-value="showPasswordDialog"
:title="`修改密码 - ${passwordAdmin?.username || ''}`"
width="460px"
@update:model-value="showPasswordDialog = $event"
>
<div class="dialog-body">
<el-form-item label="原密码" class="full-control">
<el-input v-model="passwordForm.old_password" type="password" show-password placeholder="请输入原密码" />
</el-form-item>
<el-form-item label="新密码" class="full-control">
<el-input v-model="passwordForm.new_password" type="password" show-password placeholder="请输入新密码(至少6位)" />
</el-form-item>
</div>
<template #footer>
<el-button @click="showPasswordDialog = false">取消</el-button>
<el-button type="primary" :loading="passwordSubmitting" @click="handleChangePassword">确认修改</el-button>
</template>
</el-dialog>
</section>
</template>
<style scoped>
.toolbar-actions {
display: flex;
gap: 8px;
}
.dialog-body {
display: grid;
gap: 16px;
}
.full-control {
width: 100%;
}
</style>
+108
View File
@@ -0,0 +1,108 @@
<script setup lang="ts">
import { ElMessage, ElMessageBox } from 'element-plus'
import { ref } from 'vue'
import { fetchRoles, deleteRole, type Role } from '@/api/adminRoles'
import { useAdminTable } from '@/composables/useAdminTable'
import AssignPermissionsDialog from './components/AssignPermissionsDialog.vue'
import RoleDialog from './components/RoleDialog.vue'
const showDialog = ref(false)
const editingRole = ref<Role | null>(null)
const showPermsDialog = ref(false)
const permsRole = ref<Role | null>(null)
const { loading, data: roles, load: loadRoles } = useAdminTable<Role[]>({
fetchFn: fetchRoles,
})
function openCreate() {
editingRole.value = null
showDialog.value = true
}
function openEdit(row: Role) {
editingRole.value = row
showDialog.value = true
}
function openPerms(row: Role) {
permsRole.value = row
showPermsDialog.value = true
}
async function handleDelete(row: Role) {
try {
await ElMessageBox.confirm(`确定要删除角色「${row.name}」吗?已分配该角色的管理员将失去对应权限。`, '删除确认', {
confirmButtonText: '确认删除',
cancelButtonText: '取消',
type: 'warning',
})
await deleteRole(row.id)
ElMessage.success('角色已删除')
await loadRoles()
} catch {
// 用户取消
}
}
</script>
<template>
<section class="page">
<div class="page-header-row">
<div class="page-header">
<p class="eyebrow">Roles</p>
<h1>角色管理</h1>
<p>管理系统角色及其权限配置。</p>
</div>
<div class="toolbar-actions">
<el-button @click="loadRoles">刷新</el-button>
<el-button type="primary" @click="openCreate">新建角色</el-button>
</div>
</div>
<el-table v-loading="loading" class="table-panel" :data="roles">
<el-table-column prop="id" label="ID" width="70" />
<el-table-column prop="code" label="编码" min-width="120" />
<el-table-column prop="name" label="名称" min-width="120" />
<el-table-column prop="description" label="描述" min-width="200" />
<el-table-column prop="perm_count" label="权限数" width="90" align="center" />
<el-table-column label="操作" width="240" fixed="right">
<template #default="{ row }">
<el-button size="small" @click="openEdit(row)">编辑</el-button>
<el-button size="small" type="primary" @click="openPerms(row)">权限</el-button>
<el-button
v-if="row.code !== 'super_admin'"
size="small"
type="danger"
@click="handleDelete(row)"
>
删除
</el-button>
</template>
</el-table-column>
</el-table>
<!-- 新建/编辑对话框 -->
<RoleDialog
v-model="showDialog"
:role="editingRole"
@saved="loadRoles"
/>
<!-- 权限分配对话框 -->
<AssignPermissionsDialog
v-model="showPermsDialog"
:role="permsRole"
@saved="loadRoles"
/>
</section>
</template>
<style scoped>
.toolbar-actions {
display: flex;
gap: 8px;
}
</style>
@@ -0,0 +1,124 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { createAdminMgrUser, updateAdminMgrUser, type AdminMgrUser, type CreateAdminRequest, type UpdateAdminRequest } from '@/api/adminMgr'
const props = defineProps<{
modelValue: boolean
admin?: AdminMgrUser | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const form = ref({
username: '',
password: '',
nickname: '',
status: 'active',
})
const isEdit = ref(false)
watch(
() => props.modelValue,
(val) => {
if (val) {
if (props.admin) {
isEdit.value = true
form.value = {
username: props.admin.username,
password: '',
nickname: props.admin.nickname,
status: props.admin.status,
}
} else {
isEdit.value = false
form.value = { username: '', password: '', nickname: '', status: 'active' }
}
}
},
{ immediate: true },
)
async function handleSave() {
submitting.value = true
try {
if (isEdit.value && props.admin) {
const req: UpdateAdminRequest = {
nickname: form.value.nickname,
status: form.value.status,
}
await updateAdminMgrUser(props.admin.id, req)
ElMessage.success('管理员已更新')
} else {
const req: CreateAdminRequest = {
username: form.value.username,
password: form.value.password,
nickname: form.value.nickname,
}
await createAdminMgrUser(req)
ElMessage.success('管理员已创建')
}
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '操作失败'))
} finally {
submitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="isEdit ? '编辑管理员' : '新建管理员'"
width="500px"
@update:model-value="emit('update:modelValue', $event)"
>
<div class="dialog-body">
<el-form-item label="用户名" class="full-control">
<el-input v-model="form.username" :disabled="isEdit" placeholder="请输入用户名" />
</el-form-item>
<el-form-item v-if="!isEdit" label="密码" class="full-control">
<el-input v-model="form.password" type="password" show-password placeholder="请输入密码(至少6位)" />
</el-form-item>
<el-form-item label="昵称" class="full-control">
<el-input v-model="form.nickname" placeholder="请输入昵称" />
</el-form-item>
<el-form-item v-if="isEdit" label="状态" class="full-control">
<el-select v-model="form.status" style="width: 100%">
<el-option label="启用" value="active" />
<el-option label="禁用" value="disabled" />
</el-select>
</el-form-item>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 16px;
}
.full-control {
width: 100%;
}
</style>
@@ -0,0 +1,177 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { fetchPermissions, fetchRole, assignRolePermissions, type Permission, type Role } from '@/api/adminRoles'
const props = defineProps<{
modelValue: boolean
role: Role | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const loading = ref(false)
const allPermissions = ref<Permission[]>([])
const selectedPermIds = ref<number[]>([])
// 按 resource 分组
const groupedPermissions = ref<Record<string, Permission[]>>({})
watch(
() => props.modelValue,
async (val) => {
if (val && props.role) {
loading.value = true
try {
const [perms, roleDetail] = await Promise.all([fetchPermissions(), fetchRole(props.role.id)])
allPermissions.value = perms
selectedPermIds.value = (roleDetail.permissions || []).map((p) => p.id)
// 按 resource 分组
const grouped: Record<string, Permission[]> = {}
for (const p of perms) {
const arr = grouped[p.resource] ?? (grouped[p.resource] = [])
arr.push(p)
}
groupedPermissions.value = grouped
} catch {
ElMessage.error('加载权限列表失败')
} finally {
loading.value = false
}
}
},
)
async function handleSave() {
if (!props.role) return
submitting.value = true
try {
await assignRolePermissions(props.role.id, selectedPermIds.value)
ElMessage.success('权限已分配')
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '分配失败'))
} finally {
submitting.value = false
}
}
function toggleGroup(perms: Permission[]) {
const ids = perms.map((p) => p.id)
const allSelected = ids.every((id) => selectedPermIds.value.includes(id))
if (allSelected) {
selectedPermIds.value = selectedPermIds.value.filter((id) => !ids.includes(id))
} else {
const newIds = [...selectedPermIds.value]
for (const id of ids) {
if (!newIds.includes(id)) newIds.push(id)
}
selectedPermIds.value = newIds
}
}
function isGroupAllSelected(perms: Permission[]) {
return perms.length > 0 && perms.every((p) => selectedPermIds.value.includes(p.id))
}
function isGroupPartial(perms: Permission[]) {
return perms.some((p) => selectedPermIds.value.includes(p.id)) && !isGroupAllSelected(perms)
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
const resourceLabels: Record<string, string> = {
dashboard: '仪表盘',
user: '用户管理',
order: '订单管理',
listing: '商品管理',
dispute: '仲裁中心',
chat: '客服群聊',
wallet: '资金流水',
admin_user: '管理员管理',
role: '角色管理',
system_config: '系统配置',
audit_log: '审计日志',
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="`分配权限 - ${role?.name || ''}`"
width="600px"
@update:model-value="emit('update:modelValue', $event)"
>
<div v-loading="loading" class="dialog-body">
<p v-if="role" class="role-info">
<strong>{{ role.name }}</strong> · {{ role.description }}
</p>
<div v-for="(perms, resource) in groupedPermissions" :key="resource" class="perm-group">
<div class="perm-group-header">
<el-checkbox
:model-value="isGroupAllSelected(perms)"
:indeterminate="isGroupPartial(perms)"
@change="toggleGroup(perms)"
>
<strong>{{ resourceLabels[resource] || resource }}</strong>
</el-checkbox>
</div>
<div class="perm-group-items">
<el-checkbox
v-for="perm in perms"
:key="perm.id"
v-model="selectedPermIds"
:value="perm.id"
:label="perm.id"
>
{{ perm.name }}
</el-checkbox>
</div>
</div>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 12px;
max-height: 60vh;
overflow-y: auto;
}
.role-info {
margin: 0;
color: #374151;
}
.perm-group {
border: 1px solid #e5e7eb;
border-radius: 8px;
padding: 12px 16px;
}
.perm-group-header {
margin-bottom: 8px;
}
.perm-group-items {
display: flex;
flex-wrap: wrap;
gap: 8px 16px;
padding-left: 24px;
}
</style>
@@ -0,0 +1,115 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { fetchRoles, type Role } from '@/api/adminRoles'
import { assignAdminRoles, type AdminMgrUser } from '@/api/adminMgr'
const props = defineProps<{
modelValue: boolean
admin: AdminMgrUser | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const loading = ref(false)
const allRoles = ref<Role[]>([])
const selectedRoleIds = ref<number[]>([])
watch(
() => props.modelValue,
async (val) => {
if (val && props.admin) {
loading.value = true
try {
allRoles.value = await fetchRoles()
selectedRoleIds.value = props.admin.roles.map((r) => r.id)
} catch {
ElMessage.error('加载角色列表失败')
} finally {
loading.value = false
}
}
},
)
async function handleSave() {
if (!props.admin) return
submitting.value = true
try {
await assignAdminRoles(props.admin.id, selectedRoleIds.value)
ElMessage.success('角色已分配')
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '分配失败'))
} finally {
submitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="`分配角色 - ${admin?.username || ''}`"
width="500px"
@update:model-value="emit('update:modelValue', $event)"
>
<div v-loading="loading" class="dialog-body">
<p v-if="admin" class="admin-info">
<strong>{{ admin.username }}</strong> · {{ admin.nickname }}
</p>
<el-checkbox-group v-model="selectedRoleIds">
<div v-for="role in allRoles" :key="role.id" class="role-option">
<el-checkbox :value="role.id" :label="role.id">
<span class="role-name">{{ role.name }}</span>
<span class="role-desc">{{ role.description }}</span>
</el-checkbox>
</div>
</el-checkbox-group>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 16px;
}
.admin-info {
margin: 0;
color: #374151;
}
.role-option {
padding: 8px 0;
border-bottom: 1px solid #f0f0f0;
}
.role-option:last-child {
border-bottom: none;
}
.role-name {
font-weight: 500;
margin-right: 8px;
}
.role-desc {
color: #8f9bba;
font-size: 13px;
}
</style>
@@ -0,0 +1,116 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { createRole, updateRole, type Role, type CreateRoleRequest, type UpdateRoleRequest } from '@/api/adminRoles'
const props = defineProps<{
modelValue: boolean
role?: Role | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const form = ref({
code: '',
name: '',
description: '',
})
const isEdit = ref(false)
watch(
() => props.modelValue,
(val) => {
if (val) {
if (props.role) {
isEdit.value = true
form.value = {
code: props.role.code,
name: props.role.name,
description: props.role.description,
}
} else {
isEdit.value = false
form.value = { code: '', name: '', description: '' }
}
}
},
{ immediate: true },
)
async function handleSave() {
submitting.value = true
try {
if (isEdit.value && props.role) {
const req: UpdateRoleRequest = {
name: form.value.name,
description: form.value.description,
}
await updateRole(props.role.id, req)
ElMessage.success('角色已更新')
} else {
const req: CreateRoleRequest = {
code: form.value.code,
name: form.value.name,
description: form.value.description,
}
await createRole(req)
ElMessage.success('角色已创建')
}
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '操作失败'))
} finally {
submitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="isEdit ? '编辑角色' : '新建角色'"
width="500px"
@update:model-value="emit('update:modelValue', $event)"
>
<div class="dialog-body">
<el-form-item label="角色编码" class="full-control">
<el-input v-model="form.code" :disabled="isEdit" placeholder="例如: cs, ops, finance" />
</el-form-item>
<el-form-item label="角色名称" class="full-control">
<el-input v-model="form.name" placeholder="例如: 客服, 运营, 财务" />
</el-form-item>
<el-form-item label="描述" class="full-control">
<el-input v-model="form.description" type="textarea" :rows="3" placeholder="角色描述" />
</el-form-item>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 16px;
}
.full-control {
width: 100%;
}
</style>