mirror of https://gitee.com/karson/fastadmin.git
374 lines
12 KiB
PHP
374 lines
12 KiB
PHP
<?php
|
||
|
||
namespace app\admin\controller\auth;
|
||
|
||
use app\admin\model\AuthGroup;
|
||
use app\admin\model\AuthGroupAccess;
|
||
use app\common\controller\Backend;
|
||
use fast\Random;
|
||
use fast\Tree;
|
||
|
||
/**
|
||
* 管理员管理
|
||
*
|
||
* @icon fa fa-users
|
||
* @remark 一个管理员可以有多个角色组,左侧的菜单根据管理员所拥有的权限进行生成
|
||
*/
|
||
class Admin extends Backend
|
||
{
|
||
|
||
/**
|
||
* @var \app\admin\model\Admin
|
||
*/
|
||
protected $model = null;
|
||
protected $childrenGroupIds = [];
|
||
protected $childrenAdminIds = [];
|
||
|
||
public function _initialize()
|
||
{
|
||
parent::_initialize();
|
||
$this->model = model('Admin');
|
||
|
||
$this->childrenAdminIds = $this->auth->getChildrenAdminIds(true);
|
||
$this->childrenGroupIds = $this->auth->getChildrenGroupIds(true);
|
||
|
||
$groupList = collection(AuthGroup::where('id', 'in', $this->childrenGroupIds)->select())->toArray();
|
||
|
||
Tree::instance()->init($groupList);
|
||
$groupdata = [];
|
||
if ($this->auth->isSuperAdmin())
|
||
{
|
||
$result = Tree::instance()->getTreeList(Tree::instance()->getTreeArray(0));
|
||
foreach ($result as $k => $v)
|
||
{
|
||
$groupdata[$v['id']] = $v['name'];
|
||
}
|
||
}
|
||
else
|
||
{
|
||
$result = [];
|
||
$groups = $this->auth->getGroups();
|
||
foreach ($groups as $m => $n)
|
||
{
|
||
$childlist = Tree::instance()->getTreeList(Tree::instance()->getTreeArray($n['id']));
|
||
$temp = [];
|
||
foreach ($childlist as $k => $v)
|
||
{
|
||
$temp[$v['id']] = $v['name'];
|
||
}
|
||
$result[__($n['name'])] = $temp;
|
||
}
|
||
$groupdata = $result;
|
||
}
|
||
|
||
$tree = Tree::instance();
|
||
$tree->init(collection(model('Orgnazation')->order('weigh desc,id desc')->select())->toArray(), 'pid');
|
||
$this->orglist = $tree->getTreeList($tree->getTreeArray(0), 'name');
|
||
//halt($this->orglist);
|
||
$orgdata = [0 => ['type' => 'all', 'name' => __('None')]];
|
||
foreach ($this->orglist as $k => $v)
|
||
{
|
||
$orgdata[$v['id']] = $v;
|
||
}
|
||
$this->view->assign("orgList", $orgdata);
|
||
|
||
$this->view->assign('groupdata', $groupdata);
|
||
$this->assignconfig("admin", ['id' => $this->auth->id]);
|
||
}
|
||
|
||
/**
|
||
* 查看
|
||
*/
|
||
public function index()
|
||
{
|
||
if ($this->request->isAjax())
|
||
{
|
||
//如果发送的来源是Selectpage，则转发到Selectpage
|
||
if ($this->request->request('keyField'))
|
||
{
|
||
return $this->selectpage();
|
||
}
|
||
$childrenGroupIds = $this->childrenGroupIds;
|
||
$groupName = AuthGroup::where('id', 'in', $childrenGroupIds)
|
||
->column('id,name');
|
||
$authGroupList = AuthGroupAccess::where('group_id', 'in', $childrenGroupIds)
|
||
->field('uid,group_id')
|
||
->select();
|
||
|
||
$adminGroupName = [];
|
||
foreach ($authGroupList as $k => $v)
|
||
{
|
||
if (isset($groupName[$v['group_id']]))
|
||
$adminGroupName[$v['uid']][$v['group_id']] = $groupName[$v['group_id']];
|
||
}
|
||
$groups = $this->auth->getGroups();
|
||
foreach ($groups as $m => $n)
|
||
{
|
||
$adminGroupName[$this->auth->id][$n['id']] = $n['name'];
|
||
}
|
||
list($where, $sort, $order, $offset, $limit) = $this->buildparams();
|
||
$total = $this->model
|
||
->where($where)
|
||
->where('id', 'in', $this->childrenAdminIds)
|
||
->order($sort, $order)
|
||
->count();
|
||
|
||
$list = $this->model
|
||
->with('orgnazation')
|
||
->where($where)
|
||
->where('id', 'in', $this->childrenAdminIds)
|
||
->field(['password', 'salt', 'token'], true)
|
||
->order($sort, $order)
|
||
->limit($offset, $limit)
|
||
->select();
|
||
foreach ($list as $k => &$v)
|
||
{
|
||
$groups = isset($adminGroupName[$v['id']]) ? $adminGroupName[$v['id']] : [];
|
||
$v['groups'] = implode(',', array_keys($groups));
|
||
$v['groups_text'] = implode(',', array_values($groups));
|
||
}
|
||
unset($v);
|
||
$result = array("total" => $total, "rows" => $list);
|
||
|
||
return json($result);
|
||
}
|
||
return $this->view->fetch();
|
||
}
|
||
|
||
/**
|
||
* 添加
|
||
*/
|
||
public function add()
|
||
{
|
||
if ($this->request->isPost())
|
||
{
|
||
$params = $this->request->post("row/a");
|
||
if ($params)
|
||
{
|
||
$params['salt'] = Random::alnum();
|
||
$params['password'] = md5(md5($params['password']) . $params['salt']);
|
||
$params['avatar'] = '/assets/img/avatar.png'; //设置新管理员默认头像。
|
||
$result = $this->model->validate('Admin.add')->save($params);
|
||
if ($result === false)
|
||
{
|
||
$this->error($this->model->getError());
|
||
}
|
||
$group = $this->request->post("group/a");
|
||
|
||
//过滤不允许的组别,避免越权
|
||
$group = array_intersect($this->childrenGroupIds, $group);
|
||
$dataset = [];
|
||
foreach ($group as $value)
|
||
{
|
||
$dataset[] = ['uid' => $this->model->id, 'group_id' => $value];
|
||
}
|
||
model('AuthGroupAccess')->saveAll($dataset);
|
||
$this->success();
|
||
}
|
||
$this->error();
|
||
}
|
||
return $this->view->fetch();
|
||
}
|
||
|
||
/**
|
||
* 编辑
|
||
*/
|
||
public function edit($ids = NULL)
|
||
{
|
||
$row = $this->model->get(['id' => $ids]);
|
||
if (!$row)
|
||
$this->error(__('No Results were found'));
|
||
if ($this->request->isPost())
|
||
{
|
||
$params = $this->request->post("row/a");
|
||
if ($params)
|
||
{
|
||
if ($params['password'])
|
||
{
|
||
$params['salt'] = Random::alnum();
|
||
$params['password'] = md5(md5($params['password']) . $params['salt']);
|
||
}
|
||
else
|
||
{
|
||
unset($params['password'], $params['salt']);
|
||
}
|
||
//这里需要针对username和email做唯一验证
|
||
$adminValidate = \think\Loader::validate('Admin');
|
||
$adminValidate->rule([
|
||
'username' => 'require|max:50|unique:admin,username,' . $row->id,
|
||
'email' => 'require|email|unique:admin,email,' . $row->id
|
||
]);
|
||
$result = $row->validate('Admin.edit')->save($params);
|
||
if ($result === false)
|
||
{
|
||
$this->error($row->getError());
|
||
}
|
||
|
||
// 先移除所有权限
|
||
model('AuthGroupAccess')->where('uid', $row->id)->delete();
|
||
|
||
$group = $this->request->post("group/a");
|
||
|
||
// 过滤不允许的组别,避免越权
|
||
$group = array_intersect($this->childrenGroupIds, $group);
|
||
|
||
$dataset = [];
|
||
foreach ($group as $value)
|
||
{
|
||
$dataset[] = ['uid' => $row->id, 'group_id' => $value];
|
||
}
|
||
model('AuthGroupAccess')->saveAll($dataset);
|
||
$this->success();
|
||
}
|
||
$this->error();
|
||
}
|
||
$grouplist = $this->auth->getGroups($row['id']);
|
||
$groupids = [];
|
||
foreach ($grouplist as $k => $v)
|
||
{
|
||
$groupids[] = $v['id'];
|
||
}
|
||
$this->view->assign("row", $row);
|
||
$this->view->assign("groupids", $groupids);
|
||
return $this->view->fetch();
|
||
}
|
||
|
||
/**
|
||
* 删除
|
||
*/
|
||
public function del($ids = "")
|
||
{
|
||
if ($ids)
|
||
{
|
||
// 避免越权删除管理员
|
||
$childrenGroupIds = $this->childrenGroupIds;
|
||
$adminList = $this->model->where('id', 'in', $ids)->where('id', 'in', function($query) use($childrenGroupIds) {
|
||
$query->name('auth_group_access')->where('group_id', 'in', $childrenGroupIds)->field('uid');
|
||
})->select();
|
||
if ($adminList)
|
||
{
|
||
$deleteIds = [];
|
||
foreach ($adminList as $k => $v)
|
||
{
|
||
$deleteIds[] = $v->id;
|
||
}
|
||
$deleteIds = array_diff($deleteIds, [$this->auth->id]);
|
||
if ($deleteIds)
|
||
{
|
||
$this->model->destroy($deleteIds);
|
||
model('AuthGroupAccess')->where('uid', 'in', $deleteIds)->delete();
|
||
$this->success();
|
||
}
|
||
}
|
||
}
|
||
$this->error();
|
||
}
|
||
|
||
/**
|
||
* 导入
|
||
*/
|
||
protected function import()
|
||
{
|
||
$file = $this->request->request('file');
|
||
if (!$file) {
|
||
$this->error(__('Parameter %s can not be empty', 'file'));
|
||
}
|
||
$filePath = ROOT_PATH . DS . 'public' . DS . $file;
|
||
if (!is_file($filePath)) {
|
||
$this->error(__('No results were found'));
|
||
}
|
||
$PHPReader = new \PHPExcel_Reader_Excel2007();
|
||
if (!$PHPReader->canRead($filePath)) {
|
||
$PHPReader = new \PHPExcel_Reader_Excel5();
|
||
if (!$PHPReader->canRead($filePath)) {
|
||
$PHPReader = new \PHPExcel_Reader_CSV();
|
||
if (!$PHPReader->canRead($filePath)) {
|
||
$this->error(__('Unknown data format'));
|
||
}
|
||
}
|
||
}
|
||
|
||
//导入文件首行类型,默认是注释,如果需要使用字段名称请使用name
|
||
$importHeadType = isset($this->importHeadType) ? $this->importHeadType : 'comment';
|
||
|
||
$table = $this->model->getQuery()->getTable();
|
||
$database = \think\Config::get('database.database');
|
||
$fieldArr = [];
|
||
$list = db()->query("SELECT COLUMN_NAME,COLUMN_COMMENT FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME = ? AND TABLE_SCHEMA = ?", [$table, $database]);
|
||
foreach ($list as $k => $v) {
|
||
if ($importHeadType == 'comment') {
|
||
$fieldArr[$v['COLUMN_COMMENT']] = $v['COLUMN_NAME'];
|
||
} else {
|
||
$fieldArr[$v['COLUMN_NAME']] = $v['COLUMN_NAME'];
|
||
}
|
||
}
|
||
|
||
$PHPExcel = $PHPReader->load($filePath); //加载文件
|
||
$currentSheet = $PHPExcel->getSheet(0); //读取文件中的第一个工作表
|
||
$allColumn = $currentSheet->getHighestDataColumn(); //取得最大的列号
|
||
$allRow = $currentSheet->getHighestRow(); //取得一共有多少行
|
||
$maxColumnNumber = \PHPExcel_Cell::columnIndexFromString($allColumn);
|
||
for ($currentRow = 1; $currentRow <= 1; $currentRow++) {
|
||
for ($currentColumn = 0; $currentColumn < $maxColumnNumber; $currentColumn++) {
|
||
$val = $currentSheet->getCellByColumnAndRow($currentColumn, $currentRow)->getValue();
|
||
$fields[] = $val;
|
||
}
|
||
}
|
||
$insert = [];
|
||
for ($currentRow = 2; $currentRow <= $allRow; $currentRow++) {
|
||
$values = [];
|
||
for ($currentColumn = 0; $currentColumn < $maxColumnNumber; $currentColumn++) {
|
||
$val = $currentSheet->getCellByColumnAndRow($currentColumn, $currentRow)->getValue();
|
||
$values[] = is_null($val) ? '' : $val;
|
||
}
|
||
$row = [];
|
||
$temp = array_combine($fields, $values);
|
||
halt($temp);
|
||
foreach ($temp as $k => $v) {
|
||
if (isset($fieldArr[$k]) && $k !== '') {
|
||
$row[$fieldArr[$k]] = $v;
|
||
}
|
||
|
||
}
|
||
if ($row) {
|
||
$insert[] = $row;
|
||
}
|
||
}
|
||
if (!$insert) {
|
||
$this->error(__('No rows were updated'));
|
||
}
|
||
try {
|
||
|
||
$this->model->saveAll($insert);
|
||
} catch (\think\exception\PDOException $exception) {
|
||
$this->error($exception->getMessage());
|
||
} catch (\Exception $e) {
|
||
$this->error($e->getMessage());
|
||
}
|
||
|
||
$this->success();
|
||
}
|
||
|
||
|
||
/**
|
||
* 批量更新
|
||
* @internal
|
||
*/
|
||
public function multi($ids = "")
|
||
{
|
||
// 管理员禁止批量操作
|
||
$this->error();
|
||
}
|
||
|
||
/**
|
||
* 下拉搜索
|
||
*/
|
||
protected function selectpage()
|
||
{
|
||
$this->dataLimit = 'auth';
|
||
$this->dataLimitField = 'id';
|
||
return parent::selectpage();
|
||
}
|
||
|
||
}
|