67 lines
2.9 KiB
Plaintext
67 lines
2.9 KiB
Plaintext
# 查询指定路径拥有权限的所有角色
|
|
path = params_kw.get('path', '').strip()
|
|
if not path:
|
|
return UiError(title='错误', message='请输入路径')
|
|
if not path.startswith('/'):
|
|
path = '/' + path
|
|
|
|
from appPublic.dictObject import DictObject
|
|
|
|
async with get_sor_context(request._run_ns, 'rbac') as sor:
|
|
# 查找 permission 记录
|
|
perm_recs = await sor.sqlExe("SELECT id, path FROM permission WHERE path=${path}$", {'path': path})
|
|
if not perm_recs:
|
|
msg = f"路径 '{path}' 未在 permission 表中注册。"
|
|
# 尝试模糊匹配
|
|
like_path = path.rstrip('/') + '/%'
|
|
like_recs = await sor.sqlExe("SELECT path FROM permission WHERE path LIKE ${lp}$", {'lp': like_path})
|
|
if like_recs:
|
|
sub_paths = '<br>'.join([f' {r.path}' for r in like_recs[:10]])
|
|
if len(like_recs) > 10:
|
|
sub_paths += f'<br>... 共 {len(like_recs)} 条'
|
|
msg += f'<br><br>模糊匹配到 {len(like_recs)} 个子路径：<br>{sub_paths}'
|
|
return UiError(title='未找到', message=msg)
|
|
|
|
perm = perm_recs[0]
|
|
permid = perm.id
|
|
|
|
# 查找 rolepermission 关联
|
|
rp_recs = await sor.sqlExe("SELECT roleid FROM rolepermission WHERE permid=${permid}$", {'permid': permid})
|
|
if not rp_recs:
|
|
return UiMessage(title='查询结果', message=f"路径: {path}<br>无任何角色拥有此路径权限。")
|
|
|
|
# 查询角色详情
|
|
role_ids = [r.roleid for r in rp_recs]
|
|
special_roles = [rid for rid in role_ids if rid in ('any', 'anonymous', 'logined')]
|
|
normal_ids = [rid for rid in role_ids if rid not in ('any', 'anonymous', 'logined')]
|
|
|
|
rows = []
|
|
for sp in special_roles:
|
|
rows.append(f"<tr><td>{sp}</td><td>*</td><td>{sp}</td></tr>")
|
|
|
|
if normal_ids:
|
|
placeholders = ','.join([f'${i}$' for i in range(len(normal_ids))])
|
|
ns = {f'_{i}': rid for i, rid in enumerate(normal_ids)}
|
|
role_recs = await sor.sqlExe(f"SELECT id, orgtypeid, name FROM role WHERE id IN ({placeholders})", ns)
|
|
for r in role_recs:
|
|
name = getattr(r, 'name', r.id)
|
|
orgtypeid = getattr(r, 'orgtypeid', '*')
|
|
rows.append(f"<tr><td>{r.id}</td><td>{orgtypeid}</td><td>{name}</td></tr>")
|
|
|
|
table_html = (
|
|
"<table style='border-collapse:collapse;width:100%;'>"
|
|
"<tr style='background:#334155;color:#fff;'>"
|
|
"<th style='padding:6px 12px;text-align:left;border:1px solid #475569;'>角色ID</th>"
|
|
"<th style='padding:6px 12px;text-align:left;border:1px solid #475569;'>orgtypeid</th>"
|
|
"<th style='padding:6px 12px;text-align:left;border:1px solid #475569;'>名称</th>"
|
|
"</tr>"
|
|
+ ''.join(rows) +
|
|
"</table>"
|
|
)
|
|
|
|
html = f"<p>路径: <b>{path}</b> (perm_id: {permid})</p>"
|
|
html += f"<p>共 {len(rp_recs)} 个角色有权限：</p>"
|
|
html += table_html
|
|
|
|
return UiMessage(title='查询结果', message=html)
|