168 lines
4.6 KiB
Python
168 lines
4.6 KiB
Python
from flask import Blueprint, render_template, request, jsonify
|
|
|
|
from applications.common import curd
|
|
from applications.common.utils.http import success_api, fail_api
|
|
from applications.common.utils.rights import authorize
|
|
from applications.common.utils.validate import xss_escape
|
|
from applications.extensions import db
|
|
from applications.models import Power, Role
|
|
from applications.schemas import PowerSchema2
|
|
|
|
admin_power = Blueprint('adminPower', __name__, url_prefix='/admin/power')
|
|
|
|
|
|
@admin_power.get('/')
|
|
@authorize("admin:power:main", log=True)
|
|
def index():
|
|
return render_template('admin/power/main.html')
|
|
|
|
|
|
@admin_power.get('/data')
|
|
@authorize("admin:power:main", log=True)
|
|
def data():
|
|
power = Power.query.all()
|
|
res = {
|
|
"data": curd.model_to_dicts(schema=PowerSchema2, data=power)
|
|
}
|
|
return jsonify(res)
|
|
|
|
|
|
@admin_power.get('/add')
|
|
@authorize("admin:power:add", log=True)
|
|
def add():
|
|
return render_template('admin/power/add.html')
|
|
|
|
|
|
@admin_power.get('/selectParent')
|
|
@authorize("admin:power:main", log=True)
|
|
def select_parent():
|
|
power = Power.query.all()
|
|
res = curd.model_to_dicts(schema=PowerSchema2, data=power)
|
|
res.append({"powerId": 0, "powerName": "顶级权限", "parentId": -1})
|
|
res = {
|
|
"status": {"code": 200, "message": "默认"},
|
|
"data": res
|
|
|
|
}
|
|
return jsonify(res)
|
|
|
|
|
|
# 增加
|
|
@admin_power.post('/save')
|
|
@authorize("admin:power:add", log=True)
|
|
def save():
|
|
req = request.json
|
|
icon = xss_escape(req.get("icon"))
|
|
openType = xss_escape(req.get("openType"))
|
|
parentId = xss_escape(req.get("parentId"))
|
|
powerCode = xss_escape(req.get("powerCode"))
|
|
powerName = xss_escape(req.get("powerName"))
|
|
powerType = xss_escape(req.get("powerType"))
|
|
powerUrl = xss_escape(req.get("powerUrl"))
|
|
sort = xss_escape(req.get("sort"))
|
|
power = Power(
|
|
icon=icon,
|
|
open_type=openType,
|
|
parent_id=parentId,
|
|
code=powerCode,
|
|
name=powerName,
|
|
type=powerType,
|
|
url=powerUrl,
|
|
sort=sort,
|
|
enable=1
|
|
)
|
|
r = db.session.add(power)
|
|
db.session.commit()
|
|
return success_api(msg="成功")
|
|
|
|
|
|
# 权限编辑
|
|
@admin_power.get('/edit/<int:_id>')
|
|
@authorize("admin:power:edit", log=True)
|
|
def edit(_id):
|
|
power = curd.get_one_by_id(Power, _id)
|
|
icon = str(power.icon).split()
|
|
if len(icon) == 2:
|
|
icon = icon[1]
|
|
else:
|
|
icon = None
|
|
return render_template('admin/power/edit.html', power=power, icon=icon)
|
|
|
|
|
|
# 权限更新
|
|
@admin_power.put('/update')
|
|
@authorize("admin:power:edit", log=True)
|
|
def update():
|
|
req_json = request.json
|
|
id = request.json.get("powerId")
|
|
data = {
|
|
"icon": xss_escape(req_json.get("icon")),
|
|
"open_type": xss_escape(req_json.get("openType")),
|
|
"parent_id": xss_escape(req_json.get("parentId")),
|
|
"code": xss_escape(req_json.get("powerCode")),
|
|
"name": xss_escape(req_json.get("powerName")),
|
|
"type": xss_escape(req_json.get("powerType")),
|
|
"url": xss_escape(req_json.get("powerUrl")),
|
|
"sort": xss_escape(req_json.get("sort"))
|
|
}
|
|
res = Power.query.filter_by(id=id).update(data)
|
|
db.session.commit()
|
|
if not res:
|
|
return fail_api(msg="更新权限失败")
|
|
return success_api(msg="更新权限成功")
|
|
|
|
|
|
# 启用权限
|
|
@admin_power.put('/enable')
|
|
@authorize("admin:power:edit", log=True)
|
|
def enable():
|
|
_id = request.json.get('powerId')
|
|
if id:
|
|
res = curd.enable_status(Power,_id)
|
|
if not res:
|
|
return fail_api(msg="出错啦")
|
|
return success_api(msg="启用成功")
|
|
return fail_api(msg="数据错误")
|
|
|
|
|
|
# 禁用权限
|
|
@admin_power.put('/disable')
|
|
@authorize("admin:power:edit", log=True)
|
|
def dis_enable():
|
|
_id = request.json.get('powerId')
|
|
if id:
|
|
res = curd.disable_status(Power,_id)
|
|
if not res:
|
|
return fail_api(msg="出错啦")
|
|
return success_api(msg="禁用成功")
|
|
return fail_api(msg="数据错误")
|
|
|
|
|
|
# 权限删除
|
|
@admin_power.delete('/remove/<int:id>')
|
|
@authorize("admin:power:remove", log=True)
|
|
def remove(id):
|
|
power = Power.query.filter_by(id=id).first()
|
|
power.role = []
|
|
|
|
r = Power.query.filter_by(id=id).delete()
|
|
db.session.commit()
|
|
if r:
|
|
return success_api(msg="删除成功")
|
|
else:
|
|
return fail_api(msg="删除失败")
|
|
|
|
|
|
# 批量删除
|
|
@admin_power.delete('/batchRemove')
|
|
@authorize("admin:power:remove", log=True)
|
|
def batch_remove():
|
|
ids = request.form.getlist('ids[]')
|
|
for id in ids:
|
|
power = Power.query.filter_by(id=id).first()
|
|
power.role = []
|
|
|
|
r = Power.query.filter_by(id=id).delete()
|
|
db.session.commit()
|
|
return success_api(msg="批量删除成功")
|