调整目录结构

applications/view/admin/__init__.py

@@ -0,0 +1,23 @@
+from flask import Flask
+
+from applications.view.admin.admin_log import admin_log
+from applications.view.admin.dept import admin_dept
+from applications.view.admin.dict import admin_dict
+from applications.view.admin.index import admin_index
+from applications.view.admin.file import admin_file
+from applications.view.admin.power import admin_power
+from applications.view.admin.role import admin_role
+from applications.view.admin.user import admin_user
+from applications.view.admin.monitor import admin_monitor_bp
+
+
+def init_admin_views(app: Flask):
+    app.register_blueprint(admin_index)
+    app.register_blueprint(admin_user)
+    app.register_blueprint(admin_file)
+    app.register_blueprint(admin_monitor_bp)
+    app.register_blueprint(admin_log)
+    app.register_blueprint(admin_power)
+    app.register_blueprint(admin_role)
+    app.register_blueprint(admin_dict)
+    app.register_blueprint(admin_dept)

applications/view/admin/admin_log.py

@@ -0,0 +1,58 @@
+from flask import Blueprint, request, render_template
+from sqlalchemy import desc
+
+from applications.common.utils.http import table_api
+from applications.common.utils.rights import authorize
+from applications.models import AdminLog, LogSchema
+from applications.common.curd import model_to_dicts
+
+admin_log = Blueprint('adminLog', __name__, url_prefix='/admin/log')
+
+
+#                               ----------------------------------------------------------
+#                               -------------------------  日志管理 --------------------------
+#                               ----------------------------------------------------------
+
+
+@admin_log.get('/')
+@authorize("admin:log:main")
+def index():
+    return render_template('admin/admin_log/main.html')
+
+
+#                               ==========================================================
+#                                                            登录日志
+#                               ==========================================================
+
+
+@admin_log.get('/loginLog')
+@authorize("admin:log:main")
+def login_log():
+    page = request.args.get('page', type=int)
+    limit = request.args.get('limit', type=int)
+    log = AdminLog.query.filter_by(url='/admin/login').order_by(desc(AdminLog.create_time)).paginate(page=page,
+                                                                                                     per_page=limit,
+                                                                                                     error_out=False)
+    count = AdminLog.query.filter_by(url='/admin/login').count()
+    data = model_to_dicts(Schema=LogSchema, model=log.items)
+
+    return table_api(data=data, count=count)
+
+
+#                               ==========================================================
+#                                                            操作日志
+#                               ==========================================================
+
+
+@admin_log.get('/operateLog')
+@authorize("admin:log:main")
+def operate_log():
+    page = request.args.get('page', type=int)
+    limit = request.args.get('limit', type=int)
+    log = AdminLog.query.filter(
+        AdminLog.url != '/admin/login').order_by(
+        desc(AdminLog.create_time)).paginate(
+        page=page, per_page=limit, error_out=False)
+    count = AdminLog.query.filter(AdminLog.url != '/admin/login').count()
+    data = model_to_dicts(Schema=LogSchema, model=log.items)
+    return table_api(data=data, count=count)

applications/view/admin/curd.py

@@ -0,0 +1,8 @@
+from flask import Blueprint
+
+admin_curd = Blueprint('adminCurd', __name__, url_prefix='/admin/curd')
+
+
+@admin_curd.route('/')
+def index():
+    return "功能开发中"

applications/view/admin/dept.py

@@ -0,0 +1,108 @@
+from flask import Blueprint, render_template, request, jsonify
+from marshmallow import INCLUDE
+
+from applications.common.utils.http import success_api, fail_api
+from applications.common.utils.rights import authorize
+from applications.common.utils.validate import check_data
+from applications.models import DeptSchema
+from applications.common.admin import dept_curd as dept_curd
+
+admin_dept = Blueprint('adminDept', __name__, url_prefix='/admin/dept')
+
+
+@admin_dept.get('/')
+@authorize("admin:dept:main", log=True)
+def main():
+    return render_template('admin/dept/main.html')
+
+
+@admin_dept.get('/data')
+@authorize("admin:dept:main", log=True)
+def data():
+    power_data = dept_curd.get_dept_dict()
+    res = {
+        "data": power_data
+    }
+    return jsonify(res)
+
+
+@admin_dept.get('/add')
+@authorize("admin:dept:add", log=True)
+def add():
+    return render_template('admin/dept/add.html')
+
+
+@admin_dept.get('/tree')
+@authorize("admin:dept:main", log=True)
+def tree():
+    power_data = dept_curd.get_dept_dict()
+    res = {
+        "status": {"code": 200, "message": "默认"},
+        "data": power_data
+
+    }
+    return jsonify(res)
+
+
+@admin_dept.post('/save')
+@authorize("admin:dept:add", log=True)
+def save():
+    req = request.json
+    check_data(DeptSchema(unknown=INCLUDE), req)
+    dept_curd.save_dept(req)
+    return success_api(msg="成功")
+
+
+@admin_dept.get('/edit')
+@authorize("admin:dept:edit", log=True)
+def edit():
+    _id = request.args.get("deptId")
+    dept = dept_curd.get_dept_by_id(_id)
+    return render_template('admin/dept/edit.html', dept=dept)
+
+
+# 启用
+@admin_dept.put('/enable')
+@authorize("admin:dept:edit", log=True)
+def enable():
+    _id = request.json.get('deptId')
+    if id:
+        res = dept_curd.enable_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="启用成功")
+    return fail_api(msg="数据错误")
+
+
+# 禁用
+@admin_dept.put('/disable')
+@authorize("admin:dept:edit", log=True)
+def dis_enable():
+    _id = request.json.get('deptId')
+    if id:
+        res = dept_curd.disable_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="禁用成功")
+    return fail_api(msg="数据错误")
+
+
+@admin_dept.put('/update')
+@authorize("admin:dept:edit", log=True)
+def update():
+    req = request.json
+    check_data(DeptSchema(unknown=INCLUDE), req)
+    res = dept_curd.update_dept(req)
+    if not res:
+        return fail_api(msg="更新失败")
+    return success_api(msg="更新成功")
+
+
+@admin_dept.delete('/remove/<int:_id>')
+@authorize("admin:dept:remove", log=True)
+def remove(_id):
+    res = dept_curd.remove_dept(_id)
+    if res:
+        return success_api(msg="删除成功")
+    else:
+        return fail_api(msg="删除失败")

applications/view/admin/dict.py

@@ -0,0 +1,179 @@
+from flask import Blueprint, render_template, request, jsonify
+
+from applications.common.utils.http import table_api, success_api, fail_api
+from applications.common.utils.rights import authorize
+from applications.common.utils.validate import xss_escape
+from applications.models import DictType, DictData
+from applications.common.admin import dict_curd
+
+admin_dict = Blueprint('adminDict', __name__, url_prefix='/admin/dict')
+
+
+# 数据字典
+@admin_dict.get('/')
+@authorize("admin:dict:main", log=True)
+def main():
+    return render_template('admin/dict/main.html')
+
+
+@admin_dict.get('/dictType/data')
+@authorize("admin:dict:main", log=True)
+def dict_type_data():
+    page = request.args.get('page', type=int)
+    limit = request.args.get('limit', type=int)
+    type_name = xss_escape(request.args.get('typeName', type=str))
+    data, count = dict_curd.get_dict_type(page=page, limit=limit, type_name=type_name)
+    return table_api(data=data,count=count)
+
+
+@admin_dict.get('/dictType/add')
+@authorize("admin:dict:add", log=True)
+def dict_type_add():
+    return render_template('admin/dict/add.html')
+
+
+@admin_dict.post('/dictType/save')
+@authorize("admin:dict:add", log=True)
+def dict_type_save():
+    req_json = request.json
+    res = dict_curd.save_dict_type(req_json=req_json)
+    if res is None:
+        return fail_api(msg="增加失败")
+    return success_api(msg="增加成功")
+
+
+#  编辑字典类型
+@admin_dict.get('/dictType/edit')
+@authorize("admin:dict:edit", log=True)
+def dict_type_edit():
+    _id = request.args.get('dictTypeId', type=int)
+    dict_type = DictType.query.filter_by(id=_id).first()
+    return render_template('admin/dict/edit.html', dict_type=dict_type)
+
+
+#  编辑字典类型
+@admin_dict.put('/dictType/update')
+@authorize("admin:dict:edit", log=True)
+def dict_type_update():
+    req_json = request.json
+    dict_curd.update_dict_type(req_json)
+    return success_api(msg="更新成功")
+
+
+# 启用字典
+@admin_dict.put('/dictType/enable')
+@authorize("admin:dict:edit", log=True)
+def dict_type_enable():
+    _id = request.json.get('id')
+    if id:
+        res = dict_curd.enable_dict_type_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api("启动成功")
+    return fail_api(msg="数据错误")
+
+
+# 禁用字典
+@admin_dict.put('/dictType/disable')
+@authorize("admin:dict:edit", log=True)
+def dict_type_dis_enable():
+    _id = request.json.get('id')
+    if id:
+        res = dict_curd.disable_dict_type_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api("禁用成功")
+    return fail_api(msg="数据错误")
+
+
+# 删除字典类型
+@admin_dict.delete('/dictType/remove/<int:_id>')
+@authorize("admin:dict:remove", log=True)
+def dict_type_delete(_id):
+    res = dict_curd.delete_type_by_id(_id)
+    if not res:
+        return fail_api(msg="删除失败")
+    return success_api(msg="删除成功")
+
+
+@admin_dict.get('/dictData/data')
+@authorize("admin:dict:main", log=True)
+def dict_code_data():
+    page = request.args.get('page', type=int)
+    limit = request.args.get('limit', type=int)
+    type_code = xss_escape(request.args.get('typeCode', type=str))
+    data, count = dict_curd.get_dict_data(page=page, limit=limit, type_code=type_code)
+    return table_api(data=data,count=count)
+
+
+# 增加字典数据
+@admin_dict.get('/dictData/add')
+@authorize("admin:dict:add", log=True)
+def dict_data_add():
+    type_code = request.args.get('typeCode', type=str)
+    return render_template('admin/dict/data/add.html', type_code=type_code)
+
+
+# 增加字典数据
+@admin_dict.get('/dictData/save')
+@authorize("admin:dict:add", log=True)
+def dict_data_save():
+    req_json = request.json
+    res = dict_curd.save_dict_data(req_json=req_json)
+    if not res:
+        return jsonify(success=False, msg="增加失败")
+    return jsonify(success=True, msg="增加成功")
+
+
+#  编辑字典数据
+@admin_dict.get('/dictData/edit')
+@authorize("admin:dict:edit", log=True)
+def dict_data_edit():
+    _id = request.args.get('dataId', type=str)
+    dict_data = DictData.query.filter_by(id=_id).first()
+    return render_template('admin/dict/data/edit.html', dict_data=dict_data)
+
+
+#  编辑字典数据
+@admin_dict.put('/dictData/update')
+@authorize("admin:dict:edit", log=True)
+def dict_data_update():
+    req_json = request.json
+    dict_curd.update_dict_data(req_json)
+    return success_api(msg="更新成功")
+
+
+# 启用字典数据
+@admin_dict.put('/dictData/enable')
+@authorize("admin:dict:edit", log=True)
+def dict_data_enable():
+    _id = request.json.get('dataId')
+    if _id:
+        res = dict_curd.enable_dict_data_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="启动成功")
+    return fail_api(msg="数据错误")
+
+
+# 禁用字典数据
+@admin_dict.put('/dictData/disable')
+@authorize("admin:dict:edit", log=True)
+def dict_data_disenable():
+    _id = request.json.get('dataId')
+    if _id:
+        res = dict_curd.disable_dict_data_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="禁用成功")
+    return fail_api(msg="数据错误")
+
+
+# 删除字典类型
+@admin_dict.delete('dictData/remove/<int:id>')
+@authorize("admin:dict:remove", log=True)
+def dict_data_delete(id):
+    res = dict_curd.delete_data_by_id(id)
+    if not res:
+        return fail_api(msg="删除失败")
+    return success_api(msg="删除成功")

applications/view/admin/file.py

@@ -0,0 +1,82 @@
+import os
+from flask import Blueprint, request, render_template, jsonify, current_app
+
+from applications.common.utils.http import fail_api, success_api, table_api
+from applications.common.utils.rights import authorize
+from applications.extensions import db
+from applications.models import Photo
+from applications.common.admin import file_curd
+
+admin_file = Blueprint('adminFile', __name__, url_prefix='/admin/file')
+
+
+#  图片管理
+@admin_file.get('/')
+@authorize("admin:file:main", log=True)
+def index():
+    return render_template('admin/photo/photo.html')
+
+
+#  图片数据
+@admin_file.get('/table')
+@authorize("admin:file:main", log=True)
+def table():
+    page = request.args.get('page', type=int)
+    limit = request.args.get('limit', type=int)
+    data, count = file_curd.get_photo(page=page, limit=limit)
+    return table_api(data=data, count=count)
+
+
+#   上传
+@admin_file.get('/upload')
+@authorize("admin:file:add", log=True)
+def upload():
+    return render_template('admin/photo/photo_add.html')
+
+
+#   上传接口
+@admin_file.post('/upload')
+@authorize("admin:file:add", log=True)
+def upload_api():
+    if 'file' in request.files:
+        photo = request.files['file']
+        mime = request.files['file'].content_type
+        file_url = file_curd.upload_one(photo=photo, mime=mime)
+        res = {
+            "msg": "上传成功",
+            "code": 0,
+            "success": True,
+            "data":
+                {"src": file_url}
+        }
+        return jsonify(res)
+    return fail_api()
+
+
+#    图片删除
+@admin_file.route('/delete', methods=['GET', 'POST'])
+@authorize("admin:file:delete", log=True)
+def delete():
+    _id = request.form.get('id')
+    res = file_curd.delete_photo_by_id(_id)
+    if res:
+        return success_api(msg="删除成功")
+    else:
+        return fail_api(msg="删除失败")
+
+
+# 图片批量删除
+@admin_file.route('/batchRemove', methods=['GET', 'POST'])
+@authorize("admin:file:delete", log=True)
+def batch_remove():
+    ids = request.form.getlist('ids[]')
+    photo_name = Photo.query.filter(Photo.id.in_(ids)).all()
+    upload_url = current_app.config.get("UPLOADED_PHOTOS_DEST")
+    for p in photo_name:
+        os.remove(upload_url + '/' + p.name)
+    photo = Photo.query.filter(Photo.id.in_(ids)).delete(synchronize_session=False)
+    db.session.commit()
+    if photo:
+        return success_api(msg="删除成功")
+    else:
+        return fail_api(msg="删除失败")

applications/view/admin/index.py

@@ -0,0 +1,100 @@
+from flask import Blueprint, render_template, jsonify, request, session, redirect, url_for
+from flask_login import login_user, login_required, logout_user, current_user
+from applications.common.admin import index_curd
+from applications.common.admin_log import login_log
+from applications.common.utils.http import fail_api, success_api
+from applications.models import User
+
+admin_index = Blueprint('adminIndex', __name__, url_prefix='/admin')
+
+
+# 首页
+@admin_index.get('/')
+@login_required
+def index():
+    user = current_user
+    return render_template('admin/index.html', user=user)
+
+
+# 渲染配置
+@admin_index.get('/configs')
+@login_required
+def configs():
+    return index_curd.get_render_config()
+
+
+# 获取验证码
+@admin_index.get('/getCaptcha')
+def get_captcha():
+    resp, code = index_curd.get_captcha()
+    session["code"] = code
+    return resp
+
+
+# 登录
+@admin_index.get('/login')
+def login():
+    if current_user.is_authenticated:
+        return redirect(url_for('adminIndex.index'))
+    return render_template('admin/login.html')
+
+
+# 登录
+@admin_index.post('/login')
+def login_post():
+    req = request.form
+    username = req.get('username')
+    password = req.get('password')
+    code = req.get('captcha')
+
+    if not username or not password or not code:
+        return fail_api(msg="用户名或密码没有输入")
+    s_code = session.get("code", None)
+
+    if not all([code, s_code]):
+        return fail_api(msg="参数错误")
+
+    if code != s_code:
+        return fail_api(msg="验证码错误")
+    user = User.query.filter_by(username=username).first()
+
+    if user is None:
+        return fail_api(msg="不存在的用户")
+
+    if user.enable is 0:
+        return fail_api(msg="用户被暂停使用")
+
+    if username == user.username and user.validate_password(password):
+        # 登录
+        login_user(user)
+        # 记录登录日志
+        login_log(request, uid=user.id, is_access=True)
+        # 存入权限
+        index_curd.add_auth_session()
+        return success_api(msg="登录成功")
+    login_log(request, uid=user.id, is_access=False)
+    return fail_api(msg="用户名或密码错误")
+
+
+# 退出登录
+@admin_index.post('/logout')
+@login_required
+def logout():
+    logout_user()
+    session.pop('permissions')
+    return success_api(msg="注销成功")
+
+
+# 菜单
+@admin_index.get('/menu')
+@login_required
+def menu():
+    menu_tree = index_curd.make_menu_tree()
+    return jsonify(menu_tree)
+
+
+# 控制台页面
+@admin_index.get('/welcome')
+@login_required
+def welcome():
+    return render_template('admin/console/console.html')

applications/view/admin/monitor.py

@@ -0,0 +1,91 @@
+import os
+import platform
+import re
+from datetime import datetime
+import time
+import psutil
+from flask import Blueprint, render_template, jsonify
+from flask_marshmallow import Marshmallow
+
+from applications.common.utils.rights import authorize
+
+ma = Marshmallow()
+admin_monitor_bp = Blueprint('adminMonitor', __name__, url_prefix='/admin/monitor')
+
+
+# 系统监控
+@admin_monitor_bp.get('/')
+@authorize("admin:monitor:main", log=True)
+def main():
+    # 主机名称
+    hostname = platform.node()
+    # 系统版本
+    system_version = platform.platform()
+    # python版本
+    python_version = platform.python_version()
+    # 逻辑cpu数量
+    cpu_count = psutil.cpu_count()
+    # cup使用率
+    cpus_percent = psutil.cpu_percent(interval=0.1)
+    # 内存
+    memory_information = psutil.virtual_memory()
+    # 内存使用率
+    memory_usage = memory_information.percent
+    memory_used = str(round(memory_information.used / 1024 / 1024))
+    memory_total = str(round(memory_information.total / 1024 / 1024))
+    memory_free = str(round(memory_information.free / 1024 / 1024))
+    # 磁盘信息
+
+    disk_partitions_list = []
+    # 判断是否在容器中
+    if not os.path.exists('/.dockerenv'):
+        disk_partitions = psutil.disk_partitions()
+        for i in disk_partitions:
+            a = psutil.disk_usage(i.device)
+            disk_partitions_dict = {
+                'device': i.device,
+                'fstype': i.fstype,
+                'total': str(round(a.total / 1024 / 1024)),
+                'used': str(round(a.used / 1024 / 1024)),
+                'free': str(round(a.free / 1024 / 1024)),
+                'percent': a.percent
+            }
+            disk_partitions_list.append(disk_partitions_dict)
+
+    # 开机时间
+    boot_time = datetime.fromtimestamp(psutil.boot_time()).replace(microsecond=0)
+    up_time = datetime.now().replace(microsecond=0) - boot_time
+    up_time_list = re.split(r':', str(up_time))
+    up_time_format = " {} 小时{} 分钟{} 秒".format(up_time_list[0], up_time_list[1], up_time_list[2])
+
+    # 当前时间
+    time_now = time.strftime('%H:%M:%S ', time.localtime(time.time()))
+    return render_template('admin/monitor.html',
+                           hostname=hostname,
+                           system_version=system_version,
+                           python_version=python_version,
+                           cpus_percent=cpus_percent,
+                           memory_usage=memory_usage,
+                           cpu_count=cpu_count,
+                           memory_used=memory_used,
+                           memory_total=memory_total,
+                           memory_free=memory_free,
+                           boot_time=boot_time,
+                           up_time_format=up_time_format,
+                           disk_partitions_list=disk_partitions_list,
+                           time_now=time_now
+
+                           )
+
+
+# 图表 api
+@admin_monitor_bp.get('/polling')
+@authorize("admin:monitor:main")
+def ajax_polling():
+    # 获取cup使用率
+    cpus_percent = psutil.cpu_percent(interval=0.1)
+    # 获取内存使用率
+    memory_information = psutil.virtual_memory()
+    memory_usage = memory_information.percent
+    time_now = time.strftime('%H:%M:%S ', time.localtime(time.time()))
+    return jsonify(cups_percent=cpus_percent, memory_used=memory_usage, time_now=time_now)

applications/view/admin/power.py

@@ -0,0 +1,118 @@
+from flask import Blueprint, render_template, request, jsonify
+from applications.common.admin import power_curd
+from applications.common.utils.http import success_api, fail_api
+from applications.common.utils.rights import authorize
+
+admin_power = Blueprint('adminPower', __name__, url_prefix='/admin/power')
+
+
+@admin_power.get('/')
+@authorize("admin:power:main", log=True)
+def index():
+    return render_template('admin/power/main.html')
+
+
+@admin_power.get('/data')
+@authorize("admin:power:main", log=True)
+def data():
+    power_data = power_curd.get_power_dict()
+    res = {
+        "data": power_data
+    }
+    return jsonify(res)
+
+
+@admin_power.get('/add')
+@authorize("admin:power:add", log=True)
+def add():
+    return render_template('admin/power/add.html')
+
+
+@admin_power.get('/selectParent')
+@authorize("admin:power:main", log=True)
+def select_parent():
+    power_data = power_curd.select_parent()
+    res = {
+        "status": {"code": 200, "message": "默认"},
+        "data": power_data
+
+    }
+    return jsonify(res)
+
+
+# 增加
+@admin_power.post('/save')
+@authorize("admin:power:add", log=True)
+def save():
+    req = request.json
+    power_curd.save_power(req)
+    return success_api(msg="成功")
+
+
+# 权限编辑
+@admin_power.get('/edit/<int:_id>')
+@authorize("admin:power:edit", log=True)
+def edit(_id):
+    power = power_curd.get_power_by_id(_id)
+    icon = str(power.icon).split()
+    if len(icon) == 2:
+        icon = icon[1]
+    else:
+        icon = None
+    return render_template('admin/power/edit.html', power=power, icon=icon)
+
+
+# 权限更新
+@admin_power.put('/update')
+@authorize("admin:power:edit", log=True)
+def update():
+    res = power_curd.update_power(request.json)
+    if not res:
+        return fail_api(msg="更新权限失败")
+    return success_api(msg="更新权限成功")
+
+
+# 启用权限
+@admin_power.put('/enable')
+@authorize("admin:power:edit", log=True)
+def enable():
+    _id = request.json.get('powerId')
+    if id:
+        res = power_curd.enable_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="启用成功")
+    return fail_api(msg="数据错误")
+
+
+# 禁用权限
+@admin_power.put('/disable')
+@authorize("admin:power:edit", log=True)
+def dis_enable():
+    _id = request.json.get('powerId')
+    if id:
+        res = power_curd.disable_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="禁用成功")
+    return fail_api(msg="数据错误")
+
+
+# 权限删除
+@admin_power.delete('/remove/<int:_id>')
+@authorize("admin:power:remove", log=True)
+def remove(_id):
+    r = power_curd.remove_power(_id)
+    if r:
+        return success_api(msg="删除成功")
+    else:
+        return fail_api(msg="删除失败")
+
+
+# 批量删除
+@admin_power.delete('/batchRemove')
+@authorize("admin:power:remove", log=True)
+def batch_remove():
+    ids = request.form.getlist('ids[]')
+    power_curd.batch_remove(ids)
+    return success_api(msg="批量删除成功")

applications/view/admin/role.py

@@ -0,0 +1,145 @@
+from flask import Blueprint, render_template, request, jsonify
+from flask_login import login_required
+from applications.common.admin import role_curd
+from applications.common.utils.http import table_api, success_api, fail_api
+from applications.common.utils.rights import authorize
+from applications.common.utils.validate import xss_escape
+
+admin_role = Blueprint('adminRole', __name__, url_prefix='/admin/role')
+
+
+# 用户管理
+@admin_role.get('/')
+@authorize("admin:role:main", log=True)
+def main():
+    return render_template('admin/role/main.html')
+
+
+# 表格数据
+@admin_role.get('/data')
+@authorize("admin:role:main", log=True)
+def table():
+    page = request.args.get('page', type=int)
+    limit = request.args.get('limit', type=int)
+    role_name = xss_escape(request.args.get('roleName', type=str))
+    role_code = xss_escape(request.args.get('roleCode', type=str))
+    filters = {}
+    if role_name:
+        filters["name"] = ('%' + role_name + '%')
+    if role_code:
+        filters["code"] = ('%' + role_code + '%')
+    data, count = role_curd.get_role_data_dict(page=page, limit=limit, filters=filters)
+    return table_api(data=data, count=count)
+
+
+# 角色增加
+@admin_role.get('/add')
+@authorize("admin:role:add", log=True)
+@login_required
+def add():
+    return render_template('admin/role/add.html')
+
+
+# 角色增加
+@admin_role.post('/save')
+@authorize("admin:role:add", log=True)
+def save():
+    req = request.json
+    role_curd.add_role(req=req)
+    return success_api(msg="成功")
+
+
+# 角色授权
+@admin_role.get('/power/<int:_id>')
+@authorize("admin:role:power", log=True)
+def power(_id):
+    return render_template('admin/role/power.html', id=_id)
+
+
+# 获取角色权限
+@admin_role.get('/getRolePower/<int:id>')
+@authorize("admin:role:main", log=True)
+def get_role_power(id):
+    powers = role_curd.get_role_power(id)
+    res = {
+        "data": powers,
+        "status": {"code": 200, "message": "默认"}
+    }
+    return jsonify(res)
+
+
+# 保存角色权限
+@admin_role.put('/saveRolePower')
+@authorize("admin:role:edit", log=True)
+def save_role_power():
+    req_form = request.form
+    power_ids = req_form.get("powerIds")
+    power_list = power_ids.split(',')
+    role_id = req_form.get("roleId")
+    role_curd.update_role_power(id=role_id, power_list=power_list)
+    return success_api(msg="授权成功")
+
+
+# 角色编辑
+@admin_role.get('/edit/<int:_id>')
+@authorize("admin:role:edit", log=True)
+def edit(_id):
+    role = role_curd.get_role_by_id(_id)
+    return render_template('admin/role/edit.html', role=role)
+
+
+# 更新角色
+@admin_role.put('/update')
+@authorize("admin:role:edit", log=True)
+def update():
+    res = role_curd.update_role(request.json)
+    if not res:
+        return fail_api(msg="更新角色失败")
+    return success_api(msg="更新角色成功")
+
+
+# 启用用户
+@admin_role.put('/enable')
+@authorize("admin:role:edit", log=True)
+def enable():
+    id = request.json.get('roleId')
+    # print(id)
+    if id:
+        res = role_curd.enable_status(id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="启动成功")
+    return fail_api(msg="数据错误")
+
+
+# 禁用用户
+@admin_role.put('/disable')
+@authorize("admin:role:edit", log=True)
+def dis_enable():
+    _id = request.json.get('roleId')
+    if _id:
+        res = role_curd.disable_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="禁用成功")
+    return fail_api(msg="数据错误")
+
+
+# 角色删除
+@admin_role.delete('/remove/<int:_id>')
+@authorize("admin:role:remove", log=True)
+def remove(_id):
+    res = role_curd.remove_role(_id)
+    if not res:
+        return fail_api(msg="角色删除失败")
+    return success_api(msg="角色删除成功")
+
+
+# 批量删除
+@admin_role.delete('/batchRemove')
+@authorize("admin:role:remove", log=True)
+@login_required
+def batch_remove():
+    ids = request.form.getlist('ids[]')
+    role_curd.batch_remove(ids)
+    return success_api(msg="批量删除成功")

applications/view/admin/user.py

@@ -0,0 +1,190 @@
+from flask import Blueprint, render_template, request
+from flask_login import login_required, current_user
+
+from applications.common.utils.http import table_api, fail_api, success_api
+from applications.common.utils.rights import authorize
+from applications.common.utils.validate import xss_escape
+from applications.models import User
+from applications.models import Role
+from applications.common.admin import user_curd
+
+admin_user = Blueprint('adminUser', __name__, url_prefix='/admin/user')
+
+
+# 用户管理
+@admin_user.get('/')
+@authorize("admin:user:main", log=True)
+def main():
+    return render_template('admin/user/main.html')
+
+
+#   用户分页查询
+@admin_user.get('/data')
+@authorize("admin:user:main", log=True)
+def data():
+    page = request.args.get('page', type=int)
+    limit = request.args.get('limit', type=int)
+    real_name = xss_escape(request.args.get('realName', type=str))
+    username = xss_escape(request.args.get('username', type=str))
+    dept_id = request.args.get('deptId', type=int)
+    filters = {}
+    if real_name:
+        filters["realname"] = ('%' + real_name + '%')
+    if username:
+        filters["username"] = ('%' + username + '%')
+    user_data, count = user_curd.get_user_data_dict(page=page, limit=limit, filters=filters, deptId=dept_id)
+    return table_api(data=user_data, count=count)
+
+
+# 用户增加
+@admin_user.get('/add')
+@authorize("admin:user:add", log=True)
+def add():
+    roles = Role.query.all()
+    return render_template('admin/user/add.html', roles=roles)
+
+
+@admin_user.post('/save')
+@authorize("admin:user:add", log=True)
+def save():
+    req_json = request.json
+    a = req_json.get("roleIds")
+    username = xss_escape(req_json.get('username'))
+    real_name = xss_escape(req_json.get('realName'))
+    password = xss_escape(req_json.get('password'))
+    role_ids = a.split(',')
+
+    if not username or not real_name or not password:
+        return fail_api(msg="账号姓名密码不得为空")
+
+    if user_curd.is_user_exists(username):
+        return fail_api(msg="用户已经存在")
+
+    _id = user_curd.add_user(username, real_name, password)
+    user_curd.add_user_role(_id, role_ids)
+
+    return success_api(msg="增加成功")
+
+
+# 删除用户
+@admin_user.delete('/remove/<int:_id>')
+@authorize("admin:user:remove", log=True)
+def delete(_id):
+    res = user_curd.delete_by_id(_id)
+    if not res:
+        return fail_api(msg="删除失败")
+    return success_api(msg="删除成功")
+
+
+#  编辑用户
+@admin_user.get('/edit/<int:_id>')
+@authorize("admin:user:edit", log=True)
+def edit(_id):
+    user = User.query.filter_by(id=_id).first()
+    roles = Role.query.all()
+    checked_roles = []
+    for r in user.role:
+        checked_roles.append(r.id)
+    return render_template('admin/user/edit.html', user=user, roles=roles, checked_roles=checked_roles)
+
+
+#  编辑用户
+@admin_user.put('/update')
+@authorize("admin:user:edit", log=True)
+def update():
+    req_json = request.json
+    a = xss_escape(req_json.get("roleIds"))
+    _id = xss_escape(req_json.get("userId"))
+    username = xss_escape(req_json.get('username'))
+    real_name = xss_escape(req_json.get('realName'))
+    dept_id = xss_escape(req_json.get('deptId'))
+    role_ids = a.split(',')
+    user_curd.update_user(id, username, real_name, dept_id)
+    user_curd.update_user_role(_id, role_ids)
+    return success_api(msg="更新成功")
+
+
+# 个人中心
+@admin_user.get('/center')
+@login_required
+def center():
+    user_info = current_user
+    user_logs = user_curd.get_current_user_logs()
+    return render_template('admin/user/center.html', user_info=user_info, user_logs=user_logs)
+
+
+# 修改头像
+@admin_user.get('/profile')
+@login_required
+def profile():
+    return render_template('admin/user/profile.html')
+
+
+# 修改头像
+@admin_user.put('/updateAvatar')
+@login_required
+def update_avatar():
+    url = request.json.get("avatar").get("src")
+    if not user_curd.update_avatar(url):
+        return fail_api(msg="出错啦")
+    return success_api(msg="修改成功")
+
+
+# 修改当前用户信息
+@admin_user.put('/updateInfo')
+@login_required
+def update_info():
+    res_json = request.json
+    if not user_curd.update_current_user_info(req_json=res_json):
+        return fail_api(msg="出错啦")
+    return success_api(msg="更新成功")
+
+
+# 修改当前用户密码
+@admin_user.get('/editPassword')
+@login_required
+def edit_password():
+    return render_template('admin/user/edit_password.html')
+
+
+# 修改当前用户密码
+@admin_user.put('/editPassword')
+@login_required
+def edit_password_put():
+    res_json = request.json
+    return user_curd.edit_password(res_json=res_json)
+
+
+# 启用用户
+@admin_user.put('/enable')
+@authorize("admin:user:edit", log=True)
+def enable():
+    _id = request.json.get('userId')
+    if _id:
+        res = user_curd.enable_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="启动成功")
+    return fail_api(msg="数据错误")
+
+
+# 禁用用户
+@admin_user.put('/disable')
+@authorize("admin:user:edit", log=True)
+def dis_enable():
+    _id = request.json.get('userId')
+    if _id:
+        res = user_curd.disable_status(_id)
+        if not res:
+            return fail_api(msg="出错啦")
+        return success_api(msg="禁用成功")
+    return fail_api(msg="数据错误")
+
+
+# 批量删除
+@admin_user.delete('/batchRemove')
+@authorize("admin:user:remove", log=True)
+def batch_remove():
+    ids = request.form.getlist('ids[]')
+    user_curd.batch_remove(ids)
+    return success_api(msg="批量删除成功")