from flask import Blueprint, render_template, request, jsonify from flask_login import login_required from applications.common.admin import role_curd from applications.common.utils.http import table_api, success_api, fail_api from applications.common.utils.rights import authorize from applications.common.utils.validate import xss_escape admin_role = Blueprint('adminRole', __name__, url_prefix='/admin/role') # 用户管理 @admin_role.get('/') @authorize("admin:role:main", log=True) def main(): return render_template('admin/role/main.html') # 表格数据 @admin_role.get('/data') @authorize("admin:role:main", log=True) def table(): page = request.args.get('page', type=int) limit = request.args.get('limit', type=int) role_name = xss_escape(request.args.get('roleName', type=str)) role_code = xss_escape(request.args.get('roleCode', type=str)) filters = {} if role_name: filters["name"] = ('%' + role_name + '%') if role_code: filters["code"] = ('%' + role_code + '%') data, count = role_curd.get_role_data_dict(page=page, limit=limit, filters=filters) return table_api(data=data, count=count) # 角色增加 @admin_role.get('/add') @authorize("admin:role:add", log=True) @login_required def add(): return render_template('admin/role/add.html') # 角色增加 @admin_role.post('/save') @authorize("admin:role:add", log=True) def save(): req = request.json role_curd.add_role(req=req) return success_api(msg="成功") # 角色授权 @admin_role.get('/power/') @authorize("admin:role:power", log=True) def power(_id): return render_template('admin/role/power.html', id=_id) # 获取角色权限 @admin_role.get('/getRolePower/') @authorize("admin:role:main", log=True) def get_role_power(id): powers = role_curd.get_role_power(id) res = { "data": powers, "status": {"code": 200, "message": "默认"} } return jsonify(res) # 保存角色权限 @admin_role.put('/saveRolePower') @authorize("admin:role:edit", log=True) def save_role_power(): req_form = request.form power_ids = req_form.get("powerIds") power_list = power_ids.split(',') role_id = req_form.get("roleId") role_curd.update_role_power(id=role_id, power_list=power_list) return success_api(msg="授权成功") # 角色编辑 @admin_role.get('/edit/') @authorize("admin:role:edit", log=True) def edit(_id): role = role_curd.get_role_by_id(_id) return render_template('admin/role/edit.html', role=role) # 更新角色 @admin_role.put('/update') @authorize("admin:role:edit", log=True) def update(): res = role_curd.update_role(request.json) if not res: return fail_api(msg="更新角色失败") return success_api(msg="更新角色成功") # 启用用户 @admin_role.put('/enable') @authorize("admin:role:edit", log=True) def enable(): id = request.json.get('roleId') # print(id) if id: res = role_curd.enable_status(id) if not res: return fail_api(msg="出错啦") return success_api(msg="启动成功") return fail_api(msg="数据错误") # 禁用用户 @admin_role.put('/disable') @authorize("admin:role:edit", log=True) def dis_enable(): _id = request.json.get('roleId') if _id: res = role_curd.disable_status(_id) if not res: return fail_api(msg="出错啦") return success_api(msg="禁用成功") return fail_api(msg="数据错误") # 角色删除 @admin_role.delete('/remove/') @authorize("admin:role:remove", log=True) def remove(_id): res = role_curd.remove_role(_id) if not res: return fail_api(msg="角色删除失败") return success_api(msg="角色删除成功") # 批量删除 @admin_role.delete('/batchRemove') @authorize("admin:role:remove", log=True) @login_required def batch_remove(): ids = request.form.getlist('ids[]') role_curd.batch_remove(ids) return success_api(msg="批量删除成功")