144 lines
3.3 KiB
Go
144 lines
3.3 KiB
Go
package service
|
||
|
||
import (
|
||
"context"
|
||
|
||
"go-common/app/admin/main/aegis/model/business"
|
||
"go-common/app/admin/main/aegis/model/common"
|
||
"go-common/app/admin/main/aegis/model/task"
|
||
"go-common/library/log"
|
||
)
|
||
|
||
// GetRole .
|
||
func (s *Service) GetRole(c context.Context, opt *common.BaseOptions) (uname string, role int8, err error) {
|
||
role, uname, err = s.mc.GetRole(c, opt)
|
||
if err == nil && role > 0 {
|
||
return
|
||
}
|
||
|
||
var (
|
||
cfgs map[int64][]int64 //bid:flowids
|
||
mngid int64
|
||
)
|
||
|
||
if cfgs = s.getTaskRole(c, opt.BusinessID); err != nil {
|
||
return
|
||
}
|
||
for bid, flows := range cfgs {
|
||
exist := false
|
||
for _, flowID := range flows {
|
||
if flowID == opt.FlowID {
|
||
exist = true
|
||
break
|
||
}
|
||
}
|
||
if exist {
|
||
mngid = bid
|
||
break
|
||
}
|
||
}
|
||
log.Info("GetRole %d %d", mngid, opt.UID)
|
||
|
||
if mngid <= 0 {
|
||
return
|
||
}
|
||
|
||
roles, err := s.http.GetRole(c, mngid, opt.UID)
|
||
if err != nil {
|
||
return
|
||
}
|
||
|
||
for _, item := range roles {
|
||
log.Info("GetRole %d %d %+v", mngid, opt.UID, item)
|
||
if int8(item.RID) == task.TaskRoleLeader {
|
||
role = task.TaskRoleLeader
|
||
break
|
||
}
|
||
if int8(item.RID) == task.TaskRoleMember {
|
||
role = task.TaskRoleMember
|
||
}
|
||
}
|
||
log.Info("GetRole %d %d %d", mngid, opt.UID, role)
|
||
|
||
if opt.Uname == "" {
|
||
unames, _ := s.http.GetUnames(c, []int64{opt.UID})
|
||
opt.Uname = unames[opt.UID]
|
||
}
|
||
|
||
uname = opt.Uname
|
||
s.mc.SetRole(c, opt, role)
|
||
return
|
||
}
|
||
|
||
//GetTaskBizFlows uid能查看哪些任务节点
|
||
func (s *Service) GetTaskBizFlows(c context.Context, uid int64) (businessID []int64, flows []int64, err error) {
|
||
var (
|
||
uroles []*task.Role
|
||
)
|
||
businessID = []int64{}
|
||
flows = []int64{}
|
||
//用户角色
|
||
if uroles, err = s.http.GetUserRoles(c, uid); err != nil {
|
||
log.Error("GetTaskBizFlows s.http.GetUserRoles(%d) error(%v)", uid, err)
|
||
return
|
||
}
|
||
|
||
//业务与用户角色的映射关系
|
||
bizMap := map[int64]int{}
|
||
bizs := []int64{}
|
||
for _, item := range uroles {
|
||
if item == nil || item.BID <= 0 {
|
||
continue
|
||
}
|
||
|
||
bizMap[item.BID] = 1
|
||
bizs = append(bizs, item.BID)
|
||
}
|
||
|
||
businessID, flows = s.getTaskBiz(c, bizs)
|
||
log.Info("checkAccessTask uid(%d) can see business(%+v)", uid, businessID)
|
||
return
|
||
}
|
||
|
||
//GetRoleBiz uid能查看哪些业务
|
||
func (s *Service) GetRoleBiz(c context.Context, uid int64, role string, noAdmin bool) (businessID []int64, err error) {
|
||
var (
|
||
uroles []*task.Role
|
||
)
|
||
businessID = []int64{}
|
||
//用户角色
|
||
if uroles, err = s.http.GetUserRoles(c, uid); err != nil {
|
||
log.Error("GetRoleBiz s.http.GetUserRoles(%d) error(%v)", uid, err)
|
||
return
|
||
}
|
||
|
||
//业务与用户角色的映射关系
|
||
bizMap := map[int64]int{}
|
||
for _, item := range uroles {
|
||
if item == nil || item.BID <= 0 || item.RID <= 0 {
|
||
continue
|
||
}
|
||
|
||
roles, bizID := s.getBizRole(c, item.BID)
|
||
log.Info("GetRoleBiz s.getBizRole roles(%+v) bizID(%d)", roles, bizID)
|
||
if len(roles) == 0 || bizID <= 0 {
|
||
continue
|
||
}
|
||
|
||
//没有role, 走bid, 有role，走role过滤; 然后在走noadmin过滤
|
||
if (role != "" && roles[role] != item.RID) || (noAdmin && roles[business.BizBIDAdmin] == item.RID) || bizMap[bizID] > 0 {
|
||
continue
|
||
}
|
||
|
||
businessID = append(businessID, bizID)
|
||
bizMap[bizID] = 1
|
||
}
|
||
log.Info("uid(%d) can see biz(%v) as role(%s) noadmin(%v)", uid, businessID, role, noAdmin)
|
||
return
|
||
}
|
||
|
||
//FlushRole .
|
||
func (s *Service) FlushRole(c context.Context, BizID, flowID int64, uids []int64) (err error) {
|
||
return s.mc.DelRole(c, BizID, flowID, uids)
|
||
}
|