33 lines
1.3 KiB
Plaintext
33 lines
1.3 KiB
Plaintext
"""Return role options filtered by the current user's org_type.
|
|
Used by userrole CRUD form to limit roleid dropdown to own org type roles."""
|
|
userorgid = await get_userorgid()
|
|
if not userorgid:
|
|
return [{'value': '', 'text': '全部'}]
|
|
|
|
async with get_sor_context(request._run_ns, 'rbac') as sor:
|
|
# Get user's org_type
|
|
org_recs = await sor.R('organization', {'id': userorgid})
|
|
org_type = org_recs[0].org_type if org_recs else ''
|
|
|
|
# If no org_type or owner-type (org 0), show all roles
|
|
if not org_type or userorgid == '0':
|
|
recs = await sor.sqlExe(
|
|
"SELECT id, CONCAT(orgtypeid, '.', name) as name FROM role "
|
|
"WHERE id NOT IN ('anonymous', 'any', 'logined') "
|
|
"AND orgtypeid != '*' AND name != '*' "
|
|
"AND orgtypeid IS NOT NULL AND name IS NOT NULL "
|
|
"ORDER BY orgtypeid, name", {})
|
|
else:
|
|
# Filter to user's org_type only
|
|
recs = await sor.sqlExe(
|
|
"SELECT id, CONCAT(orgtypeid, '.', name) as name FROM role "
|
|
"WHERE id NOT IN ('anonymous', 'any', 'logined') "
|
|
"AND orgtypeid = ${ot}$ AND name != '*' AND name IS NOT NULL "
|
|
"ORDER BY name",
|
|
{'ot': org_type})
|
|
|
|
result = [{'value': '', 'text': '全部'}]
|
|
for r in recs:
|
|
result.append({'value': r.id, 'text': r.name})
|
|
return result
|