Yuzhiran Dev
b2d043b231
- 用户管理：新增编辑弹窗（修改用户名/角色/密码），增加组织/创建时间/最后登录列 - 角色管理：新增 Role 模型 + CRUD API，admin.html 新增角色管理 tab - 菜单管理：新增 Menu 模型 + CRUD API，导航栏从 API 动态加载菜单项 - 个人中心：右上角下拉菜单（个人信息/修改密码/退出），新增修改密码 API - 种子数据：initial_data.py 自动创建默认角色（admin/editor）和默认菜单（7项） - 修复 research.py 缺少 enrich_topic_research 函数导致导入失败 - 修复 db_helper.py 中 generated_at 条件导致重创作不更新时间戳 - admin.html 操作列加宽防止按钮换行，平台配置增加删除按钮 - articles.html 预览弹窗加 lock-scroll=false 防止页面尺寸跳动
53 lines
2.2 KiB
Python
53 lines
2.2 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, Request
|
|
from sqlalchemy.orm import Session
|
|
from typing import List
|
|
|
|
from ..database import get_db
|
|
from ..models import Role, User
|
|
from ..schemas import RoleCreate, RoleUpdate, RoleResponse
|
|
from .auth import get_current_admin
|
|
|
|
router = APIRouter(prefix="/api/admin/roles", tags=["admin"])
|
|
|
|
@router.get("", response_model=List[RoleResponse])
|
|
def list_roles(db: Session = Depends(get_db), admin_user: User = Depends(get_current_admin)):
|
|
roles = db.query(Role).order_by(Role.name).all()
|
|
return [RoleResponse.model_validate(r) for r in roles]
|
|
|
|
@router.post("", response_model=RoleResponse)
|
|
def create_role(data: RoleCreate, request: Request, db: Session = Depends(get_db), admin_user: User = Depends(get_current_admin)):
|
|
existing = db.query(Role).filter(Role.name == data.name).first()
|
|
if existing:
|
|
raise HTTPException(status_code=400, detail="角色已存在")
|
|
role = Role(name=data.name, description=data.description, is_system=False)
|
|
db.add(role)
|
|
db.commit()
|
|
db.refresh(role)
|
|
return RoleResponse.model_validate(role)
|
|
|
|
@router.put("/{role_id}", response_model=RoleResponse)
|
|
def update_role(role_id: int, data: RoleUpdate, request: Request, db: Session = Depends(get_db), admin_user: User = Depends(get_current_admin)):
|
|
role = db.query(Role).filter(Role.id == role_id).first()
|
|
if not role:
|
|
raise HTTPException(status_code=404, detail="角色不存在")
|
|
if role.is_system:
|
|
raise HTTPException(status_code=400, detail="系统角色不可编辑")
|
|
if data.name is not None:
|
|
role.name = data.name
|
|
if data.description is not None:
|
|
role.description = data.description
|
|
db.commit()
|
|
db.refresh(role)
|
|
return RoleResponse.model_validate(role)
|
|
|
|
@router.delete("/{role_id}")
|
|
def delete_role(role_id: int, request: Request, db: Session = Depends(get_db), admin_user: User = Depends(get_current_admin)):
|
|
role = db.query(Role).filter(Role.id == role_id).first()
|
|
if not role:
|
|
raise HTTPException(status_code=404, detail="角色不存在")
|
|
if role.is_system:
|
|
raise HTTPException(status_code=400, detail="系统角色不可删除")
|
|
db.delete(role)
|
|
db.commit()
|
|
return {"message": "删除成功"}
|