package admin import ( "context" "errors" "server/internal/db" "server/internal/db/sqlc" "server/internal/model/common" "server/internal/model/enum" "server/internal/model/request" "server/internal/pkg/cache" "server/internal/pkg/cache/cachekey" "server/internal/pkg/dberr" "server/internal/pkg/errs" ) type RoleService struct { store *db.Store cache *cache.Caches } func NewRoleService(store *db.Store, cache *cache.Caches) *RoleService { return &RoleService{ store: store, cache: cache, } } // clearCache 清理所有api权限和用户信息 禁用角色/删除角色需要清理 func (s *RoleService) clearCache(ctx context.Context) error { if err := s.cache.DelByPrefix(ctx, cachekey.UserApiPermissionsPattern); err != nil { return err } if err := s.cache.DelByPrefix(ctx, cachekey.UserInfoPattern); err != nil { return err } return nil } func (s *RoleService) List(ctx context.Context, p *common.Pagination) (*common.PageResult[sqlc.SysRole], error) { params := sqlc.ListRolesParams{ Limit: p.PageSize, Offset: (p.Page - 1) * p.PageSize, } total, err := s.store.CountRoles(ctx) if err != nil { return nil, err } list, err := s.store.ListRoles(ctx, params) if err != nil { return nil, err } return &common.PageResult[sqlc.SysRole]{ List: list, Total: total, }, nil } func (s *RoleService) ListAll(ctx context.Context) ([]sqlc.SysRole, error) { return s.store.ListAllRoles(ctx) } func (s *RoleService) ListRoleMenus(ctx context.Context, id int32) ([]sqlc.ListRoleMenusRow, error) { _, err := s.store.GetRoleByID(ctx, id) if err != nil { return nil, dberr.MapNoRows(err, errs.ErrRoleNotFound) } return s.store.ListRoleMenus(ctx, id) } func (s *RoleService) ListRoleApis(ctx context.Context, id int32) ([]sqlc.ListRoleApisRow, error) { _, err := s.store.GetRoleByID(ctx, id) if err != nil { return nil, dberr.MapNoRows(err, errs.ErrRoleNotFound) } return s.store.ListRoleApis(ctx, id) } func (s *RoleService) Create(ctx context.Context, req request.CreateRoleRequest) error { params := sqlc.CreateRoleParams{ Name: req.Name, Code: req.Code, Status: *req.Status, } err := s.store.CreateRole(ctx, params) if err != nil { return dberr.MapUniqueViolation(err, dberr.SysRoleCodeKey, errs.ErrCodeAlreadyExists) } return nil } func (s *RoleService) Update(ctx context.Context, id int32, req request.UpdateRoleRequest) error { params := sqlc.UpdateRoleParams{ ID: id, Name: req.Name, Status: req.Status, } rows, err := s.store.UpdateRole(ctx, params) err = dberr.MapRowsAffected(rows, err, errs.ErrRoleNotFound) if err != nil { if errors.Is(err, errs.ErrRoleNotFound) { } return err } // 清理缓存 无论启用禁用 启用时也需要清理缓存以刷新权限 _ = s.clearCache(ctx) return nil } func (s *RoleService) SetRoleMenus(ctx context.Context, roleID int32, req request.SetRoleMenusRequest) error { // 先检查角色是否存在 _, err := s.store.GetRoleByID(ctx, roleID) if err != nil { return dberr.MapNoRows(err, errs.ErrRoleNotFound) } err = s.store.WithTx(ctx, func(q *sqlc.Queries) error { // 1. 先删除所有关联表数据 if err = q.DeleteRolePermissionsByType(ctx, sqlc.DeleteRolePermissionsByTypeParams{ RoleID: roleID, Type: int16(enum.PermissionTypeMenu), }); err != nil { return err } // 2. 查出所有权限id并组装数据 permissionIds, err := q.ListPermissionIDsByMenuIDs(ctx, req.MenuIDs) if err != nil { return err } params := make([]sqlc.CreateRolePermissionParams, 0, len(permissionIds)) for _, id := range permissionIds { params = append(params, sqlc.CreateRolePermissionParams{ RoleID: roleID, PermissionID: id, }) } // 批量插入 _, err = q.CreateRolePermission(ctx, params) if err != nil { return err } return nil }) if err != nil { return err } // 清理缓存 这里只用清理用户信息 _ = s.cache.DelByPrefix(ctx, cachekey.UserInfoPattern) return nil } func (s *RoleService) SetRoleApis(ctx context.Context, roleID int32, req request.SetRoleApisRequest) error { _, err := s.store.GetRoleByID(ctx, roleID) if err != nil { return dberr.MapNoRows(err, errs.ErrRoleNotFound) } err = s.store.WithTx(ctx, func(q *sqlc.Queries) error { // 先删除所有旧权限数据 if err = q.DeleteRolePermissionsByType(ctx, sqlc.DeleteRolePermissionsByTypeParams{ RoleID: roleID, Type: int16(enum.PermissionTypeApi), }); err != nil { return err } // 查出数据并组装 permissionIds, err := q.ListPermissionIDsByApiIDs(ctx, req.ApiIDs) if err != nil { return err } params := make([]sqlc.CreateRolePermissionParams, 0, len(permissionIds)) for _, id := range permissionIds { params = append(params, sqlc.CreateRolePermissionParams{ RoleID: roleID, PermissionID: id, }) } // 批量插入 _, err = q.CreateRolePermission(ctx, params) if err != nil { return err } return nil }) if err != nil { return err } // 清理缓存 这里只用清理接口权限 _ = s.cache.DelByPrefix(ctx, cachekey.UserApiPermissionsPattern) return nil } func (s *RoleService) Delete(ctx context.Context, id int32) error { err := s.store.WithTx(ctx, func(q *sqlc.Queries) error { // 1.删除角色关联权限 err := q.DeleteRolePermissionsByRoleID(ctx, id) if err != nil { return err } // 2. 根据角色id删除用户关联的角色 err = q.DeleteUserRoleByRoleID(ctx, id) if err != nil { return err } // 3. 删除角色信息 rows, err := q.DeleteRole(ctx, id) err = dberr.MapRowsAffected(rows, err, errs.ErrRoleNotFound) if err != nil { // 如果是数据库不存在这条数据 此时也执行清理 if errors.Is(err, errs.ErrRoleNotFound) { } return err } return nil }) if err != nil { return err } // 清理缓存 _ = s.clearCache(ctx) return nil }