增加权限系统

This commit is contained in:
yml2213
2026-05-27 05:41:59 +08:00
parent a04327fd05
commit 1458fc279c
29 changed files with 2276 additions and 46 deletions
+8
View File
@@ -5,11 +5,19 @@ import type { ApiResponse } from './types'
import { getRefreshToken, setAuthTokens } from '@/utils/authStorage'
import type { UserStatus } from '@/types/status'
export interface AdminRole {
id: number
code: string
name: string
}
export interface AdminUser {
id: number
username: string
nickname: string
status: UserStatus
roles: AdminRole[]
permissions: string[]
last_login_at?: string
}
+76
View File
@@ -0,0 +1,76 @@
import { apiClient } from './client'
import type { ApiResponse, PaginatedResult } from './types'
export interface AdminRole {
id: number
code: string
name: string
description: string
}
export interface AdminMgrUser {
id: number
username: string
nickname: string
status: string
roles: AdminRole[]
last_login_at?: string
created_at: string
updated_at: string
}
export interface CreateAdminRequest {
username: string
password: string
nickname?: string
}
export interface UpdateAdminRequest {
nickname?: string
status?: string
}
export interface ChangePasswordRequest {
old_password: string
new_password: string
}
export async function fetchAdminMgrUsers(page = 1, pageSize = 20) {
const { data } = await apiClient.get<ApiResponse<PaginatedResult<AdminMgrUser>>>('/admin/admin-users', {
params: { page, page_size: pageSize },
})
return data.data
}
export async function fetchAdminMgrUser(id: number) {
const { data } = await apiClient.get<ApiResponse<AdminMgrUser>>(`/admin/admin-users/${id}`)
return data.data
}
export async function createAdminMgrUser(req: CreateAdminRequest) {
const { data } = await apiClient.post<ApiResponse<AdminMgrUser>>('/admin/admin-users', req)
return data.data
}
export async function updateAdminMgrUser(id: number, req: UpdateAdminRequest) {
const { data } = await apiClient.put<ApiResponse<AdminMgrUser>>(`/admin/admin-users/${id}`, req)
return data.data
}
export async function deleteAdminMgrUser(id: number) {
const { data } = await apiClient.delete<ApiResponse<{ deleted: boolean }>>(`/admin/admin-users/${id}`)
return data.data
}
export async function assignAdminRoles(id: number, roleIds: number[]) {
const { data } = await apiClient.put<ApiResponse<{ updated: boolean }>>(`/admin/admin-users/${id}/roles`, {
role_ids: roleIds,
})
return data.data
}
export async function changeAdminPassword(id: number, req: ChangePasswordRequest) {
const { data } = await apiClient.put<ApiResponse<{ updated: boolean }>>(`/admin/admin-users/${id}/password`, req)
return data.data
}
+70
View File
@@ -0,0 +1,70 @@
import { apiClient } from './client'
import type { ApiResponse } from './types'
export interface Permission {
id: number
code: string
name: string
resource: string
action: string
}
export interface Role {
id: number
code: string
name: string
description: string
perm_count: number
permissions?: Permission[]
created_at: string
updated_at: string
}
export interface CreateRoleRequest {
code: string
name: string
description?: string
}
export interface UpdateRoleRequest {
name: string
description?: string
}
export async function fetchRoles() {
const { data } = await apiClient.get<ApiResponse<Role[]>>('/admin/roles')
return data.data
}
export async function fetchRole(id: number) {
const { data } = await apiClient.get<ApiResponse<Role>>(`/admin/roles/${id}`)
return data.data
}
export async function createRole(req: CreateRoleRequest) {
const { data } = await apiClient.post<ApiResponse<Role>>('/admin/roles', req)
return data.data
}
export async function updateRole(id: number, req: UpdateRoleRequest) {
const { data } = await apiClient.put<ApiResponse<Role>>(`/admin/roles/${id}`, req)
return data.data
}
export async function deleteRole(id: number) {
const { data } = await apiClient.delete<ApiResponse<{ deleted: boolean }>>(`/admin/roles/${id}`)
return data.data
}
export async function assignRolePermissions(roleId: number, permissionIds: number[]) {
const { data } = await apiClient.put<ApiResponse<{ updated: boolean }>>(`/admin/roles/${roleId}/permissions`, {
permission_ids: permissionIds,
})
return data.data
}
export async function fetchPermissions() {
const { data } = await apiClient.get<ApiResponse<Permission[]>>('/admin/permissions')
return data.data
}
+31 -12
View File
@@ -12,7 +12,9 @@ import {
SwitchButton,
Tickets,
User,
Wallet
UserFilled,
Wallet,
Setting
} from '@element-plus/icons-vue'
import { ElMessage } from 'element-plus'
import { computed, ref } from 'vue'
@@ -25,19 +27,36 @@ const router = useRouter()
const adminSession = useAdminSessionStore()
const isCollapsed = ref(false)
const navItems = [
{ label: '仪表盘', to: '/admin/dashboard', icon: DataLine },
{ label: '用户管理', to: '/admin/users', icon: User },
{ label: '订单管理', to: '/admin/orders', icon: Tickets },
{ label: '商品管理', to: '/admin/listings', icon: Shop },
{ label: '商品审核', to: '/admin/listings/review', icon: DocumentChecked },
{ label: '仲裁中心', to: '/admin/disputes', icon: ScaleToOriginal },
{ label: '客服群聊', to: '/admin/chats', icon: ChatDotRound },
{ label: '资金流水', to: '/admin/wallet-ledger', icon: Wallet },
{ label: '系统配置', to: '/admin/system-configs', icon: Operation },
{ label: '审计日志', to: '/admin/audit-logs', icon: Document },
interface NavItem {
label: string
to: string
icon: any
permission?: string
}
const allNavItems: NavItem[] = [
{ label: '仪表盘', to: '/admin/dashboard', icon: DataLine, permission: 'dashboard:view' },
{ label: '用户管理', to: '/admin/users', icon: User, permission: 'user:view' },
{ label: '订单管理', to: '/admin/orders', icon: Tickets, permission: 'order:view' },
{ label: '商品管理', to: '/admin/listings', icon: Shop, permission: 'listing:view' },
{ label: '商品审核', to: '/admin/listings/review', icon: DocumentChecked, permission: 'listing:approve' },
{ label: '仲裁中心', to: '/admin/disputes', icon: ScaleToOriginal, permission: 'dispute:view' },
{ label: '客服群聊', to: '/admin/chats', icon: ChatDotRound, permission: 'chat:view' },
{ label: '资金流水', to: '/admin/wallet-ledger', icon: Wallet, permission: 'wallet:view' },
{ label: '系统配置', to: '/admin/system-configs', icon: Operation, permission: 'system_config:view' },
{ label: '审计日志', to: '/admin/audit-logs', icon: Document, permission: 'audit_log:view' },
{ label: '管理员管理', to: '/admin/admin-users', icon: UserFilled, permission: 'admin_user:manage' },
{ label: '角色管理', to: '/admin/roles', icon: Setting, permission: 'role:manage' },
]
const navItems = computed(() => {
if (adminSession.isSuperAdmin) return allNavItems
return allNavItems.filter((item) => {
if (!item.permission) return true
return adminSession.hasPermission(item.permission)
})
})
const adminName = computed(() => adminSession.nickname || adminSession.username || '管理员')
async function handleLogout() {
+12
View File
@@ -82,4 +82,16 @@ export const adminRoutes: RouteRecordRaw[] = [
component: () => import('@/views/admin/AdminAuditLogsView.vue'),
meta: adminMeta,
},
{
path: '/admin/admin-users',
name: 'admin-admin-users',
component: () => import('@/views/admin/AdminMgrUsersView.vue'),
meta: adminMeta,
},
{
path: '/admin/roles',
name: 'admin-roles',
component: () => import('@/views/admin/AdminRolesView.vue'),
meta: adminMeta,
},
]
+7
View File
@@ -84,6 +84,13 @@ router.beforeEach(async (to) => {
if (!adminSession.token) {
return '/admin/login'
}
if (adminSession.permissions.length === 0) {
try {
await adminSession.loadMe()
} catch {
// 权限加载失败,仍然允许访问(降级为无权限状态)
}
}
}
return true
})
+18 -1
View File
@@ -1,6 +1,6 @@
import { defineStore } from 'pinia'
import { fetchAdminMe, loginAdmin, type AdminUser } from '@/api/adminAuth'
import { fetchAdminMe, loginAdmin, type AdminRole, type AdminUser } from '@/api/adminAuth'
import { clearAuthStorage, getAccessToken, getRefreshToken, setAuthTokens } from '@/utils/authStorage'
export const useAdminSessionStore = defineStore('adminSession', {
@@ -10,7 +10,20 @@ export const useAdminSessionStore = defineStore('adminSession', {
adminId: Number(localStorage.getItem('admin_id') || 0),
username: localStorage.getItem('admin_username') || '',
nickname: '',
roles: [] as AdminRole[],
permissions: [] as string[],
}),
getters: {
hasPermission: (state) => {
return (code: string) => state.permissions.includes(code) || state.permissions.includes('*')
},
hasRole: (state) => {
return (code: string) => state.roles.some((r) => r.code === code)
},
isSuperAdmin: (state) => {
return state.roles.some((r) => r.code === 'super_admin') || state.permissions.includes('*')
},
},
actions: {
async login(username: string, password: string, captchaId: string, captchaCode: string) {
const result = await loginAdmin(username, password, captchaId, captchaCode)
@@ -28,6 +41,8 @@ export const useAdminSessionStore = defineStore('adminSession', {
this.adminId = 0
this.username = ''
this.nickname = ''
this.roles = []
this.permissions = []
clearAuthStorage('admin')
},
syncFromStorage() {
@@ -49,6 +64,8 @@ export const useAdminSessionStore = defineStore('adminSession', {
this.adminId = admin.id
this.username = admin.username
this.nickname = admin.nickname
this.roles = admin.roles || []
this.permissions = admin.permissions || []
localStorage.setItem('admin_id', String(admin.id))
localStorage.setItem('admin_username', admin.username)
},
@@ -0,0 +1,205 @@
<script setup lang="ts">
import { ElMessage, ElMessageBox } from 'element-plus'
import { ref } from 'vue'
import { fetchAdminMgrUsers, deleteAdminMgrUser, changeAdminPassword, type AdminMgrUser } from '@/api/adminMgr'
import { useAdminPaginatedTable } from '@/composables/useAdminPaginatedTable'
import { formatDateTime } from '@/utils/time'
import AdminUserDialog from './components/AdminUserDialog.vue'
import AssignRolesDialog from './components/AssignRolesDialog.vue'
const showDialog = ref(false)
const editingAdmin = ref<AdminMgrUser | null>(null)
const showRolesDialog = ref(false)
const rolesAdmin = ref<AdminMgrUser | null>(null)
const showPasswordDialog = ref(false)
const passwordAdmin = ref<AdminMgrUser | null>(null)
const passwordForm = ref({ old_password: '', new_password: '' })
const passwordSubmitting = ref(false)
const { loading, data: admins, total, currentPage, currentPageSize, load: loadAdmins, handleSizeChange } = useAdminPaginatedTable<AdminMgrUser>({
fetchFn: fetchAdminMgrUsers,
})
function openCreate() {
editingAdmin.value = null
showDialog.value = true
}
function openEdit(row: AdminMgrUser) {
editingAdmin.value = row
showDialog.value = true
}
function openRoles(row: AdminMgrUser) {
rolesAdmin.value = row
showRolesDialog.value = true
}
function openPassword(row: AdminMgrUser) {
passwordAdmin.value = row
passwordForm.value = { old_password: '', new_password: '' }
showPasswordDialog.value = true
}
async function handleDelete(row: AdminMgrUser) {
try {
await ElMessageBox.confirm(`确定要删除管理员「${row.username}」吗?此操作不可撤销。`, '删除确认', {
confirmButtonText: '确认删除',
cancelButtonText: '取消',
type: 'warning',
})
await deleteAdminMgrUser(row.id)
ElMessage.success('管理员已删除')
await loadAdmins()
} catch {
// 用户取消
}
}
async function handleChangePassword() {
if (!passwordAdmin.value) return
if (!passwordForm.value.old_password || !passwordForm.value.new_password) {
ElMessage.warning('请填写完整')
return
}
passwordSubmitting.value = true
try {
await changeAdminPassword(passwordAdmin.value.id, passwordForm.value)
ElMessage.success('密码已修改')
showPasswordDialog.value = false
} catch (error) {
ElMessage.error(readError(error, '修改失败'))
} finally {
passwordSubmitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
const statusLabel: Record<string, string> = {
active: '启用',
disabled: '禁用',
}
</script>
<template>
<section class="page">
<div class="page-header-row">
<div class="page-header">
<p class="eyebrow">Admin Users</p>
<h1>管理员管理</h1>
<p>管理后台管理员账号分配角色和权限</p>
</div>
<div class="toolbar-actions">
<el-button @click="loadAdmins">刷新</el-button>
<el-button type="primary" @click="openCreate">新建管理员</el-button>
</div>
</div>
<el-table v-loading="loading" class="table-panel" :data="admins">
<el-table-column prop="id" label="ID" width="70" />
<el-table-column prop="username" label="用户名" min-width="120" />
<el-table-column prop="nickname" label="昵称" min-width="120" />
<el-table-column label="角色" min-width="200">
<template #default="{ row }">
<el-tag
v-for="role in row.roles"
:key="role.id"
size="small"
style="margin-right: 4px; margin-bottom: 2px"
>
{{ role.name }}
</el-tag>
<span v-if="!row.roles?.length" style="color: #8f9bba">未分配</span>
</template>
</el-table-column>
<el-table-column label="状态" width="90">
<template #default="{ row }">
<el-tag :type="row.status === 'active' ? 'success' : 'danger'" size="small">
{{ statusLabel[row.status] || row.status }}
</el-tag>
</template>
</el-table-column>
<el-table-column label="最后登录" min-width="170">
<template #default="{ row }">{{ row.last_login_at ? formatDateTime(row.last_login_at) : '-' }}</template>
</el-table-column>
<el-table-column label="操作" width="300" fixed="right">
<template #default="{ row }">
<el-button size="small" @click="openEdit(row)">编辑</el-button>
<el-button size="small" type="primary" @click="openRoles(row)">角色</el-button>
<el-button size="small" @click="openPassword(row)">密码</el-button>
<el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
</template>
</el-table-column>
</el-table>
<div class="pagination-wrap" v-if="total > 0">
<el-pagination
v-model:current-page="currentPage"
v-model:page-size="currentPageSize"
:total="total"
:page-sizes="[10, 20, 50, 100]"
layout="total, sizes, prev, pager, next"
@current-change="loadAdmins"
@size-change="handleSizeChange"
/>
</div>
<!-- 新建/编辑对话框 -->
<AdminUserDialog
v-model="showDialog"
:admin="editingAdmin"
@saved="loadAdmins"
/>
<!-- 角色分配对话框 -->
<AssignRolesDialog
v-model="showRolesDialog"
:admin="rolesAdmin"
@saved="loadAdmins"
/>
<!-- 修改密码对话框 -->
<el-dialog
:model-value="showPasswordDialog"
:title="`修改密码 - ${passwordAdmin?.username || ''}`"
width="460px"
@update:model-value="showPasswordDialog = $event"
>
<div class="dialog-body">
<el-form-item label="原密码" class="full-control">
<el-input v-model="passwordForm.old_password" type="password" show-password placeholder="请输入原密码" />
</el-form-item>
<el-form-item label="新密码" class="full-control">
<el-input v-model="passwordForm.new_password" type="password" show-password placeholder="请输入新密码(至少6位)" />
</el-form-item>
</div>
<template #footer>
<el-button @click="showPasswordDialog = false">取消</el-button>
<el-button type="primary" :loading="passwordSubmitting" @click="handleChangePassword">确认修改</el-button>
</template>
</el-dialog>
</section>
</template>
<style scoped>
.toolbar-actions {
display: flex;
gap: 8px;
}
.dialog-body {
display: grid;
gap: 16px;
}
.full-control {
width: 100%;
}
</style>
+108
View File
@@ -0,0 +1,108 @@
<script setup lang="ts">
import { ElMessage, ElMessageBox } from 'element-plus'
import { ref } from 'vue'
import { fetchRoles, deleteRole, type Role } from '@/api/adminRoles'
import { useAdminTable } from '@/composables/useAdminTable'
import AssignPermissionsDialog from './components/AssignPermissionsDialog.vue'
import RoleDialog from './components/RoleDialog.vue'
const showDialog = ref(false)
const editingRole = ref<Role | null>(null)
const showPermsDialog = ref(false)
const permsRole = ref<Role | null>(null)
const { loading, data: roles, load: loadRoles } = useAdminTable<Role[]>({
fetchFn: fetchRoles,
})
function openCreate() {
editingRole.value = null
showDialog.value = true
}
function openEdit(row: Role) {
editingRole.value = row
showDialog.value = true
}
function openPerms(row: Role) {
permsRole.value = row
showPermsDialog.value = true
}
async function handleDelete(row: Role) {
try {
await ElMessageBox.confirm(`确定要删除角色「${row.name}」吗?已分配该角色的管理员将失去对应权限。`, '删除确认', {
confirmButtonText: '确认删除',
cancelButtonText: '取消',
type: 'warning',
})
await deleteRole(row.id)
ElMessage.success('角色已删除')
await loadRoles()
} catch {
// 用户取消
}
}
</script>
<template>
<section class="page">
<div class="page-header-row">
<div class="page-header">
<p class="eyebrow">Roles</p>
<h1>角色管理</h1>
<p>管理系统角色及其权限配置</p>
</div>
<div class="toolbar-actions">
<el-button @click="loadRoles">刷新</el-button>
<el-button type="primary" @click="openCreate">新建角色</el-button>
</div>
</div>
<el-table v-loading="loading" class="table-panel" :data="roles">
<el-table-column prop="id" label="ID" width="70" />
<el-table-column prop="code" label="编码" min-width="120" />
<el-table-column prop="name" label="名称" min-width="120" />
<el-table-column prop="description" label="描述" min-width="200" />
<el-table-column prop="perm_count" label="权限数" width="90" align="center" />
<el-table-column label="操作" width="240" fixed="right">
<template #default="{ row }">
<el-button size="small" @click="openEdit(row)">编辑</el-button>
<el-button size="small" type="primary" @click="openPerms(row)">权限</el-button>
<el-button
v-if="row.code !== 'super_admin'"
size="small"
type="danger"
@click="handleDelete(row)"
>
删除
</el-button>
</template>
</el-table-column>
</el-table>
<!-- 新建/编辑对话框 -->
<RoleDialog
v-model="showDialog"
:role="editingRole"
@saved="loadRoles"
/>
<!-- 权限分配对话框 -->
<AssignPermissionsDialog
v-model="showPermsDialog"
:role="permsRole"
@saved="loadRoles"
/>
</section>
</template>
<style scoped>
.toolbar-actions {
display: flex;
gap: 8px;
}
</style>
@@ -0,0 +1,124 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { createAdminMgrUser, updateAdminMgrUser, type AdminMgrUser, type CreateAdminRequest, type UpdateAdminRequest } from '@/api/adminMgr'
const props = defineProps<{
modelValue: boolean
admin?: AdminMgrUser | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const form = ref({
username: '',
password: '',
nickname: '',
status: 'active',
})
const isEdit = ref(false)
watch(
() => props.modelValue,
(val) => {
if (val) {
if (props.admin) {
isEdit.value = true
form.value = {
username: props.admin.username,
password: '',
nickname: props.admin.nickname,
status: props.admin.status,
}
} else {
isEdit.value = false
form.value = { username: '', password: '', nickname: '', status: 'active' }
}
}
},
{ immediate: true },
)
async function handleSave() {
submitting.value = true
try {
if (isEdit.value && props.admin) {
const req: UpdateAdminRequest = {
nickname: form.value.nickname,
status: form.value.status,
}
await updateAdminMgrUser(props.admin.id, req)
ElMessage.success('管理员已更新')
} else {
const req: CreateAdminRequest = {
username: form.value.username,
password: form.value.password,
nickname: form.value.nickname,
}
await createAdminMgrUser(req)
ElMessage.success('管理员已创建')
}
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '操作失败'))
} finally {
submitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="isEdit ? '编辑管理员' : '新建管理员'"
width="500px"
@update:model-value="emit('update:modelValue', $event)"
>
<div class="dialog-body">
<el-form-item label="用户名" class="full-control">
<el-input v-model="form.username" :disabled="isEdit" placeholder="请输入用户名" />
</el-form-item>
<el-form-item v-if="!isEdit" label="密码" class="full-control">
<el-input v-model="form.password" type="password" show-password placeholder="请输入密码(至少6位)" />
</el-form-item>
<el-form-item label="昵称" class="full-control">
<el-input v-model="form.nickname" placeholder="请输入昵称" />
</el-form-item>
<el-form-item v-if="isEdit" label="状态" class="full-control">
<el-select v-model="form.status" style="width: 100%">
<el-option label="启用" value="active" />
<el-option label="禁用" value="disabled" />
</el-select>
</el-form-item>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 16px;
}
.full-control {
width: 100%;
}
</style>
@@ -0,0 +1,177 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { fetchPermissions, fetchRole, assignRolePermissions, type Permission, type Role } from '@/api/adminRoles'
const props = defineProps<{
modelValue: boolean
role: Role | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const loading = ref(false)
const allPermissions = ref<Permission[]>([])
const selectedPermIds = ref<number[]>([])
// 按 resource 分组
const groupedPermissions = ref<Record<string, Permission[]>>({})
watch(
() => props.modelValue,
async (val) => {
if (val && props.role) {
loading.value = true
try {
const [perms, roleDetail] = await Promise.all([fetchPermissions(), fetchRole(props.role.id)])
allPermissions.value = perms
selectedPermIds.value = (roleDetail.permissions || []).map((p) => p.id)
// 按 resource 分组
const grouped: Record<string, Permission[]> = {}
for (const p of perms) {
const arr = grouped[p.resource] ?? (grouped[p.resource] = [])
arr.push(p)
}
groupedPermissions.value = grouped
} catch {
ElMessage.error('加载权限列表失败')
} finally {
loading.value = false
}
}
},
)
async function handleSave() {
if (!props.role) return
submitting.value = true
try {
await assignRolePermissions(props.role.id, selectedPermIds.value)
ElMessage.success('权限已分配')
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '分配失败'))
} finally {
submitting.value = false
}
}
function toggleGroup(perms: Permission[]) {
const ids = perms.map((p) => p.id)
const allSelected = ids.every((id) => selectedPermIds.value.includes(id))
if (allSelected) {
selectedPermIds.value = selectedPermIds.value.filter((id) => !ids.includes(id))
} else {
const newIds = [...selectedPermIds.value]
for (const id of ids) {
if (!newIds.includes(id)) newIds.push(id)
}
selectedPermIds.value = newIds
}
}
function isGroupAllSelected(perms: Permission[]) {
return perms.length > 0 && perms.every((p) => selectedPermIds.value.includes(p.id))
}
function isGroupPartial(perms: Permission[]) {
return perms.some((p) => selectedPermIds.value.includes(p.id)) && !isGroupAllSelected(perms)
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
const resourceLabels: Record<string, string> = {
dashboard: '仪表盘',
user: '用户管理',
order: '订单管理',
listing: '商品管理',
dispute: '仲裁中心',
chat: '客服群聊',
wallet: '资金流水',
admin_user: '管理员管理',
role: '角色管理',
system_config: '系统配置',
audit_log: '审计日志',
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="`分配权限 - ${role?.name || ''}`"
width="600px"
@update:model-value="emit('update:modelValue', $event)"
>
<div v-loading="loading" class="dialog-body">
<p v-if="role" class="role-info">
<strong>{{ role.name }}</strong> · {{ role.description }}
</p>
<div v-for="(perms, resource) in groupedPermissions" :key="resource" class="perm-group">
<div class="perm-group-header">
<el-checkbox
:model-value="isGroupAllSelected(perms)"
:indeterminate="isGroupPartial(perms)"
@change="toggleGroup(perms)"
>
<strong>{{ resourceLabels[resource] || resource }}</strong>
</el-checkbox>
</div>
<div class="perm-group-items">
<el-checkbox
v-for="perm in perms"
:key="perm.id"
v-model="selectedPermIds"
:value="perm.id"
:label="perm.id"
>
{{ perm.name }}
</el-checkbox>
</div>
</div>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 12px;
max-height: 60vh;
overflow-y: auto;
}
.role-info {
margin: 0;
color: #374151;
}
.perm-group {
border: 1px solid #e5e7eb;
border-radius: 8px;
padding: 12px 16px;
}
.perm-group-header {
margin-bottom: 8px;
}
.perm-group-items {
display: flex;
flex-wrap: wrap;
gap: 8px 16px;
padding-left: 24px;
}
</style>
@@ -0,0 +1,115 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { fetchRoles, type Role } from '@/api/adminRoles'
import { assignAdminRoles, type AdminMgrUser } from '@/api/adminMgr'
const props = defineProps<{
modelValue: boolean
admin: AdminMgrUser | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const loading = ref(false)
const allRoles = ref<Role[]>([])
const selectedRoleIds = ref<number[]>([])
watch(
() => props.modelValue,
async (val) => {
if (val && props.admin) {
loading.value = true
try {
allRoles.value = await fetchRoles()
selectedRoleIds.value = props.admin.roles.map((r) => r.id)
} catch {
ElMessage.error('加载角色列表失败')
} finally {
loading.value = false
}
}
},
)
async function handleSave() {
if (!props.admin) return
submitting.value = true
try {
await assignAdminRoles(props.admin.id, selectedRoleIds.value)
ElMessage.success('角色已分配')
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '分配失败'))
} finally {
submitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="`分配角色 - ${admin?.username || ''}`"
width="500px"
@update:model-value="emit('update:modelValue', $event)"
>
<div v-loading="loading" class="dialog-body">
<p v-if="admin" class="admin-info">
<strong>{{ admin.username }}</strong> · {{ admin.nickname }}
</p>
<el-checkbox-group v-model="selectedRoleIds">
<div v-for="role in allRoles" :key="role.id" class="role-option">
<el-checkbox :value="role.id" :label="role.id">
<span class="role-name">{{ role.name }}</span>
<span class="role-desc">{{ role.description }}</span>
</el-checkbox>
</div>
</el-checkbox-group>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 16px;
}
.admin-info {
margin: 0;
color: #374151;
}
.role-option {
padding: 8px 0;
border-bottom: 1px solid #f0f0f0;
}
.role-option:last-child {
border-bottom: none;
}
.role-name {
font-weight: 500;
margin-right: 8px;
}
.role-desc {
color: #8f9bba;
font-size: 13px;
}
</style>
@@ -0,0 +1,116 @@
<script setup lang="ts">
import { ElMessage } from 'element-plus'
import { ref, watch } from 'vue'
import { createRole, updateRole, type Role, type CreateRoleRequest, type UpdateRoleRequest } from '@/api/adminRoles'
const props = defineProps<{
modelValue: boolean
role?: Role | null
}>()
const emit = defineEmits<{
(e: 'update:modelValue', val: boolean): void
(e: 'saved'): void
}>()
const submitting = ref(false)
const form = ref({
code: '',
name: '',
description: '',
})
const isEdit = ref(false)
watch(
() => props.modelValue,
(val) => {
if (val) {
if (props.role) {
isEdit.value = true
form.value = {
code: props.role.code,
name: props.role.name,
description: props.role.description,
}
} else {
isEdit.value = false
form.value = { code: '', name: '', description: '' }
}
}
},
{ immediate: true },
)
async function handleSave() {
submitting.value = true
try {
if (isEdit.value && props.role) {
const req: UpdateRoleRequest = {
name: form.value.name,
description: form.value.description,
}
await updateRole(props.role.id, req)
ElMessage.success('角色已更新')
} else {
const req: CreateRoleRequest = {
code: form.value.code,
name: form.value.name,
description: form.value.description,
}
await createRole(req)
ElMessage.success('角色已创建')
}
emit('saved')
emit('update:modelValue', false)
} catch (error) {
ElMessage.error(readError(error, '操作失败'))
} finally {
submitting.value = false
}
}
function readError(error: unknown, fallback: string) {
if (typeof error === 'object' && error && 'response' in error) {
const response = (error as { response?: { data?: { message?: string } } }).response
return response?.data?.message || fallback
}
return fallback
}
</script>
<template>
<el-dialog
:model-value="modelValue"
:title="isEdit ? '编辑角色' : '新建角色'"
width="500px"
@update:model-value="emit('update:modelValue', $event)"
>
<div class="dialog-body">
<el-form-item label="角色编码" class="full-control">
<el-input v-model="form.code" :disabled="isEdit" placeholder="例如: cs, ops, finance" />
</el-form-item>
<el-form-item label="角色名称" class="full-control">
<el-input v-model="form.name" placeholder="例如: 客服, 运营, 财务" />
</el-form-item>
<el-form-item label="描述" class="full-control">
<el-input v-model="form.description" type="textarea" :rows="3" placeholder="角色描述" />
</el-form-item>
</div>
<template #footer>
<el-button @click="emit('update:modelValue', false)">取消</el-button>
<el-button type="primary" :loading="submitting" @click="handleSave">保存</el-button>
</template>
</el-dialog>
</template>
<style scoped>
.dialog-body {
display: grid;
gap: 16px;
}
.full-control {
width: 100%;
}
</style>