from flask import Blueprint, render_template, request, jsonify from applications.common import curd from applications.common.utils.http import success_api, fail_api from applications.common.utils.rights import authorize from applications.common.utils.validate import xss_escape from applications.extensions import db from applications.models import Power, Role from applications.schemas import PowerSchema2 admin_power = Blueprint('adminPower', __name__, url_prefix='/admin/power') @admin_power.get('/') @authorize("admin:power:main", log=True) def index(): return render_template('admin/power/main.html') @admin_power.get('/data') @authorize("admin:power:main", log=True) def data(): power = Power.query.all() res = { "data": curd.model_to_dicts(schema=PowerSchema2, data=power) } return jsonify(res) @admin_power.get('/add') @authorize("admin:power:add", log=True) def add(): return render_template('admin/power/add.html') @admin_power.get('/selectParent') @authorize("admin:power:main", log=True) def select_parent(): power = Power.query.all() res = curd.model_to_dicts(schema=PowerSchema2, data=power) res.append({"powerId": 0, "powerName": "顶级权限", "parentId": -1}) res = { "status": {"code": 200, "message": "默认"}, "data": res } return jsonify(res) # 增加 @admin_power.post('/save') @authorize("admin:power:add", log=True) def save(): req = request.json icon = xss_escape(req.get("icon")) openType = xss_escape(req.get("openType")) parentId = xss_escape(req.get("parentId")) powerCode = xss_escape(req.get("powerCode")) powerName = xss_escape(req.get("powerName")) powerType = xss_escape(req.get("powerType")) powerUrl = xss_escape(req.get("powerUrl")) sort = xss_escape(req.get("sort")) power = Power( icon=icon, open_type=openType, parent_id=parentId, code=powerCode, name=powerName, type=powerType, url=powerUrl, sort=sort, enable=1 ) r = db.session.add(power) db.session.commit() return success_api(msg="成功") # 权限编辑 @admin_power.get('/edit/') @authorize("admin:power:edit", log=True) def edit(_id): power = curd.get_one_by_id(Power, _id) icon = str(power.icon).split() if len(icon) == 2: icon = icon[1] else: icon = None return render_template('admin/power/edit.html', power=power, icon=icon) # 权限更新 @admin_power.put('/update') @authorize("admin:power:edit", log=True) def update(): req_json = request.json id = request.json.get("powerId") data = { "icon": xss_escape(req_json.get("icon")), "open_type": xss_escape(req_json.get("openType")), "parent_id": xss_escape(req_json.get("parentId")), "code": xss_escape(req_json.get("powerCode")), "name": xss_escape(req_json.get("powerName")), "type": xss_escape(req_json.get("powerType")), "url": xss_escape(req_json.get("powerUrl")), "sort": xss_escape(req_json.get("sort")) } res = Power.query.filter_by(id=id).update(data) db.session.commit() if not res: return fail_api(msg="更新权限失败") return success_api(msg="更新权限成功") # 启用权限 @admin_power.put('/enable') @authorize("admin:power:edit", log=True) def enable(): _id = request.json.get('powerId') if id: res = curd.enable_status(Power,_id) if not res: return fail_api(msg="出错啦") return success_api(msg="启用成功") return fail_api(msg="数据错误") # 禁用权限 @admin_power.put('/disable') @authorize("admin:power:edit", log=True) def dis_enable(): _id = request.json.get('powerId') if id: res = curd.disable_status(Power,_id) if not res: return fail_api(msg="出错啦") return success_api(msg="禁用成功") return fail_api(msg="数据错误") # 权限删除 @admin_power.delete('/remove/') @authorize("admin:power:remove", log=True) def remove(id): power = Power.query.filter_by(id=id).first() role_id_list = [] roles = power.role for role in roles: role_id_list.append(role.id) roles = Role.query.filter(Role.id.in_(role_id_list)).all() for p in roles: power.role.remove(p) r = Power.query.filter_by(id=id).delete() db.session.commit() if r: return success_api(msg="删除成功") else: return fail_api(msg="删除失败") # 批量删除 @admin_power.delete('/batchRemove') @authorize("admin:power:remove", log=True) def batch_remove(): ids = request.form.getlist('ids[]') for id in ids: power = Power.query.filter_by(id=id).first() role_id_list = [] roles = power.role for role in roles: role_id_list.append(role.id) roles = Role.query.filter(Role.id.in_(role_id_list)).all() for p in roles: power.role.remove(p) r = Power.query.filter_by(id=id).delete() db.session.commit() return success_api(msg="批量删除成功")