model = model('Admin'); $this->childrenAdminIds = $this->auth->getChildrenAdminIds($this->auth->isSuperAdmin()); $this->childrenGroupIds = $this->auth->getChildrenGroupIds($this->auth->isSuperAdmin()); $groupList = collection(AuthGroup::where('id', 'in', $this->childrenGroupIds)->select())->toArray(); Tree::instance()->init($groupList); $groupdata = []; if ($this->auth->isSuperAdmin()) { $result = Tree::instance()->getTreeList(Tree::instance()->getTreeArray(0)); foreach ($result as $k => $v) { $groupdata[$v['id']] = $v['name']; } } else { $result = []; $groups = $this->auth->getGroups(); foreach ($groups as $m => $n) { $childlist = Tree::instance()->getTreeList(Tree::instance()->getTreeArray($n['id'])); $temp = []; foreach ($childlist as $k => $v) { $temp[$v['id']] = $v['name']; } $result[__($n['name'])] = $temp; } $groupdata = $result; } $this->view->assign('groupdata', $groupdata); $this->assignconfig("admin", ['id' => $this->auth->id]); } /** * 查看 */ public function index() { //设置过滤方法 $this->request->filter(['strip_tags', 'trim']); if ($this->request->isAjax()) { //如果发送的来源是Selectpage,则转发到Selectpage if ($this->request->request('keyField')) { return $this->selectpage(); } $childrenGroupIds = $this->childrenGroupIds; $groupName = AuthGroup::where('id', 'in', $childrenGroupIds) ->column('id,name'); $authGroupList = AuthGroupAccess::where('group_id', 'in', $childrenGroupIds) ->field('uid,group_id') ->select(); $adminGroupName = []; foreach ($authGroupList as $k => $v) { if (isset($groupName[$v['group_id']])) { $adminGroupName[$v['uid']][$v['group_id']] = $groupName[$v['group_id']]; } } $groups = $this->auth->getGroups(); foreach ($groups as $m => $n) { $adminGroupName[$this->auth->id][$n['id']] = $n['name']; } list($where, $sort, $order, $offset, $limit) = $this->buildparams(); $list = $this->model ->where($where) ->where('id', 'in', $this->childrenAdminIds) ->field(['password', 'salt', 'token'], true) ->order($sort, $order) ->paginate($limit); foreach ($list as $k => &$v) { $groups = isset($adminGroupName[$v['id']]) ? $adminGroupName[$v['id']] : []; $v['groups'] = implode(',', array_keys($groups)); $v['groups_text'] = implode(',', array_values($groups)); } unset($v); $result = array("total" => $list->total(), "rows" => $list->items()); return json($result); } return $this->view->fetch(); } /** * 添加 */ public function add() { if ($this->request->isPost()) { $this->token(); $params = $this->request->post("row/a"); if (isset($params["profit_amount"])) unset($params["profit_amount"]); if ($params) { Db::startTrans(); try { if (!Validate::is($params['password'], '\S{6,30}')) { exception(__("Please input correct password")); } $params['salt'] = Random::alnum(); $params['password'] = md5(md5($params['password']) . $params['salt']); $params['avatar'] = '/assets/img/avatar.png'; //设置新管理员默认头像。 if (!isset($params["type"])) throw new Exception("管理员类别不能为空!"); if (\E_ADMIN_TYPE::Platform === $params["type"]) { unset($params["area_ids"]); unset($params["profit_rate"]); unset($params["store_id"]); } if (\E_ADMIN_TYPE::Agency === $params["type"]) { unset($params["store_id"]); if (!isset($params["area_ids"]) || is_null($params["area_ids"]) || "" == $params["area_ids"]) throw new Exception("您选择的类型为代理商,请选择管辖的城市!"); $areas = (new Area())->where("id", "in", explode(",", $params["area_ids"]))->select(); $city_codes = array_map(function ($data) { return $data["area_code"]; }, $areas); $records = $this->model->checkByCityCodes($city_codes); if (count($records) > 0) throw new Exception("您选择的管辖的城市已经绑定了代理商,请重新选择!"); $params["city_codes"] = join(",", $city_codes); } if (\E_ADMIN_TYPE::Store === $params["type"]) { unset($params["area_ids"]); unset($params["profit_rate"]); if (!isset($params["store_id"]) || !($params["store_id"] > 0)) throw new Exception("您选择的类型为球房管理员,请选择管理的球房!"); } $result = $this->model->validate('Admin.add')->save($params); if ($result === false) { exception($this->model->getError()); } $group = $this->request->post("group/a"); //过滤不允许的组别,避免越权 $group = array_intersect($this->childrenGroupIds, $group); if (!$group) { exception(__('The parent group exceeds permission limit')); } $dataset = []; foreach ($group as $value) { $dataset[] = ['uid' => $this->model->id, 'group_id' => $value]; } model('AuthGroupAccess')->saveAll($dataset); Db::commit(); } catch (\Exception $e) { Db::rollback(); $this->error($e->getMessage()); } $this->success(); } $this->error(__('Parameter %s can not be empty', '')); } return $this->view->fetch(); } /** * 编辑 */ public function edit($ids = null) { $row = $this->model->get(['id' => $ids]); if (!$row) { $this->error(__('No Results were found')); } if (!in_array($row->id, $this->childrenAdminIds)) { $this->error(__('You have no permission')); } if ($this->request->isPost()) { $this->token(); $params = $this->request->post("row/a"); if ($params) { if (isset($params["profit_amount"])) unset($params["profit_amount"]); Db::startTrans(); try { if (!isset($params["type"])) throw new Exception("管理员类别不能为空!"); if (\E_ADMIN_TYPE::Platform === $params["type"]) { unset($params["area_ids"]); unset($params["profit_rate"]); unset($params["store_id"]); } if (\E_ADMIN_TYPE::Agency === $params["type"]) { unset($params["store_id"]); if (!isset($params["area_ids"]) || is_null($params["area_ids"]) || "" == $params["area_ids"]) throw new Exception("您选择的类型为代理商,请选择管辖的城市!"); $areas = (new Area())->where("id", "in", explode(",", $params["area_ids"]))->select(); $city_codes = array_map(function ($data) { return $data["area_code"]; }, $areas); $records = $this->model->checkByCityCodes($city_codes, $row["id"]); if (count($records) > 0) throw new Exception("您选择的管辖的城市已经绑定了代理商,请重新选择!"); $params["city_codes"] = join(",", $city_codes); } if (\E_ADMIN_TYPE::Store === $params["type"]) { unset($params["area_ids"]); unset($params["profit_rate"]); if (!isset($params["store_id"]) || !($params["store_id"] > 0)) throw new Exception("您选择的类型为球房管理员,请选择管理的球房!"); } if ($params['password']) { if (!Validate::is($params['password'], '\S{6,30}')) { exception(__("Please input correct password")); } $params['salt'] = Random::alnum(); $params['password'] = md5(md5($params['password']) . $params['salt']); } else { unset($params['password'], $params['salt']); } //这里需要针对username和email做唯一验证 $adminValidate = \think\Loader::validate('Admin'); $adminValidate->rule([ 'username' => 'require|regex:\w{3,30}|unique:admin,username,' . $row->id, 'mobile' => 'regex:1[3-9]\d{9}|unique:admin,mobile,' . $row->id, 'password' => 'regex:\S{32}', ]); $result = $row->validate('Admin.edit')->save($params); if ($result === false) { exception($row->getError()); } // 先移除所有权限 model('AuthGroupAccess')->where('uid', $row->id)->delete(); $group = $this->request->post("group/a"); // 过滤不允许的组别,避免越权 $group = array_intersect($this->childrenGroupIds, $group); if (!$group) { exception(__('The parent group exceeds permission limit')); } $dataset = []; foreach ($group as $value) { $dataset[] = ['uid' => $row->id, 'group_id' => $value]; } model('AuthGroupAccess')->saveAll($dataset); Db::commit(); } catch (\Exception $e) { Db::rollback(); $this->error($e->getMessage()); } $this->success(); } $this->error(__('Parameter %s can not be empty', '')); } $grouplist = $this->auth->getGroups($row['id']); $groupids = []; foreach ($grouplist as $k => $v) { $groupids[] = $v['id']; } $this->view->assign("row", $row); $this->view->assign("groupids", $groupids); return $this->view->fetch(); } /** * 删除 */ public function del($ids = "") { $this->error(); // if (!$this->request->isPost()) { // $this->error(__("Invalid parameters")); // } // $ids = $ids ? $ids : $this->request->post("ids"); // if ($ids) { // $ids = array_intersect($this->childrenAdminIds, array_filter(explode(',', $ids))); // // 避免越权删除管理员 // $childrenGroupIds = $this->childrenGroupIds; // $adminList = $this->model->where('id', 'in', $ids)->where('id', 'in', function ($query) use ($childrenGroupIds) { // $query->name('auth_group_access')->where('group_id', 'in', $childrenGroupIds)->field('uid'); // })->select(); // if ($adminList) { // $deleteIds = []; // foreach ($adminList as $k => $v) { // $deleteIds[] = $v->id; // } // $deleteIds = array_values(array_diff($deleteIds, [$this->auth->id])); // if ($deleteIds) { // Db::startTrans(); // try { // $this->model->destroy($deleteIds); // model('AuthGroupAccess')->where('uid', 'in', $deleteIds)->delete(); // Db::commit(); // } catch (\Exception $e) { // Db::rollback(); // $this->error($e->getMessage()); // } // $this->success(); // } // $this->error(__('No rows were deleted')); // } // } // $this->error(__('You have no permission')); } /** * 批量更新 * @internal */ public function multi($ids = "") { // 管理员禁止批量操作 $this->error(); } /** * 下拉搜索 */ public function selectpage() { $this->dataLimit = 'auth'; $this->dataLimitField = 'id'; return parent::selectpage(); } }