feat: manage merchant members

backend/internal/service/merchant_member.go

@@ -23,6 +23,12 @@ type AddMemberInput struct {
 	IsDefault bool
 }
 
+type UpdateMemberInput struct {
+	Role      string
+	Status    int
+	IsDefault bool
+}
+
 type MerchantRoleInput struct {
 	Code        string
 	Name        string
@@ -224,3 +230,67 @@ func (s *MerchantService) ListMembers(merchantID uint) ([]model.MerchantMember,
 	err := s.db.Preload("User").Where("merchant_id = ?", merchantID).Order("id ASC").Find(&members).Error
 	return members, err
 }
+
+// UpdateMember updates a member's relationship with one merchant without changing the login account.
+func (s *MerchantService) UpdateMember(merchantID, memberID uint, in UpdateMemberInput, actorUserID uint) (*model.MerchantMember, error) {
+	in.Role = strings.TrimSpace(in.Role)
+	if in.Role == "" {
+		return nil, errors.New("商户成员角色不能为空")
+	}
+	if in.Status != 0 && in.Status != 1 {
+		return nil, errors.New("成员状态无效")
+	}
+	var member model.MerchantMember
+	err := s.db.Transaction(func(tx *gorm.DB) error {
+		if err := tx.Where("id = ? AND merchant_id = ?", memberID, merchantID).First(&member).Error; err != nil {
+			if errors.Is(err, gorm.ErrRecordNotFound) {
+				return errors.New("成员不存在")
+			}
+			return err
+		}
+		if member.Role == model.MemberRoleOwner {
+			return errors.New("负责人不能在成员管理中修改")
+		}
+		if member.UserID == actorUserID {
+			return errors.New("不能修改当前登录账号")
+		}
+		if _, err := (&TenantService{db: tx}).MerchantRolePermissions(merchantID, in.Role); err != nil {
+			return err
+		}
+		updates := map[string]interface{}{"role": in.Role, "status": in.Status, "is_default": in.IsDefault}
+		if err := tx.Model(&member).Updates(updates).Error; err != nil {
+			return err
+		}
+		return writeAudit(tx, &merchantID, &actorUserID, nil, "merchant.member.update", "merchant_member", fmt.Sprint(memberID), map[string]string{"role": in.Role, "status": fmt.Sprint(in.Status)})
+	})
+	if err != nil {
+		return nil, err
+	}
+	if err := s.db.Preload("User").First(&member, member.ID).Error; err != nil {
+		return nil, err
+	}
+	return &member, nil
+}
+
+// RemoveMember removes only the selected merchant relationship and retains the account for audit and other merchants.
+func (s *MerchantService) RemoveMember(merchantID, memberID, actorUserID uint) error {
+	return s.db.Transaction(func(tx *gorm.DB) error {
+		var member model.MerchantMember
+		if err := tx.Where("id = ? AND merchant_id = ?", memberID, merchantID).First(&member).Error; err != nil {
+			if errors.Is(err, gorm.ErrRecordNotFound) {
+				return errors.New("成员不存在")
+			}
+			return err
+		}
+		if member.Role == model.MemberRoleOwner {
+			return errors.New("负责人不能移除")
+		}
+		if member.UserID == actorUserID {
+			return errors.New("不能移除当前登录账号")
+		}
+		if err := tx.Delete(&member).Error; err != nil {
+			return err
+		}
+		return writeAudit(tx, &merchantID, &actorUserID, nil, "merchant.member.remove", "merchant_member", fmt.Sprint(memberID), nil)
+	})
+}