wsa_server/controllers/api/v2/sys/Role.php

<?php

use Restserver\Libraries\REST_Controller;

defined('BASEPATH') OR exit('No direct script access allowed');

// This can be removed if you use __autoload() in config.php OR use Modular Extensions
/** @noinspection PhpIncludeInspection */
//To Solve File REST_Controller not found
require APPPATH . 'libraries/REST_Controller.php';
require APPPATH . 'libraries/Format.php';

class Role extends REST_Controller
{

    function __construct()
    {
        parent::__construct();
        $this->load->model('Base_model');
        $this->load->model('Role_model');
        // $this->config->load('config', true);
    }

    public function index_get()
    {
        $this->load->view('login_view');
    }

    public function insertx_post()
    {
        // $id = $this->post('id'); // POST param
        $parms = $this->post();  // 获取表单参数，类型为数组
        var_dump($parms);
        $result = $this->Base_model->_insert_key('sys_role_perm', $parms);
        var_dump($result);
    }

    public function gettest_post()
    {
        $result = $this->Base_model->_get_key('sys_perm', 'perm_type,r_id rid', 'perm_type="role" and r_id=1');
        var_dump($result);
        var_dump($result[0]['perm_type']);
        var_dump($this->uri->uri_string);
        var_dump($this->uri);

    }


    public function testapi_get()
    {
        echo "test api ok...";

        echo APPPATH . "\n";
        echo SELF . "\n";
        echo BASEPATH . "\n";
        echo FCPATH . "\n";
        echo SYSDIR . "\n";
        var_dump($this->config->item('rest_language'));
        var_dump($this->config->item('language'));

        var_dump($this->config);

//        $message = [
//            "code" => 20000,
//            "data" => [
//                "__FUNCTION__" =>  __FUNCTION__,
//                "__CLASS__" => __CLASS__,
//                "uri" => $this->uri
//            ],
//
//        ];
//        "data": {
//            "__FUNCTION__": "router_get",
//            "__CLASS__": "User",
//            "uri": {
//                    "keyval": [],
//              "uri_string": "api/v2/user/router",
//              "segments": {
//                        "1": "api",
//                "2": "v2",
//                "3": "user",
//                "4": "router"
//              },
    }

    public function phpinfo_get()
    {
        phpinfo();
    }

    public function testdb_get()
    {
        $this->load->database();
        $query = $this->db->query("show tables");
        var_dump($query);
        var_dump($query->result());
        var_dump($query->row_array());
//         有结果表明数据库连接正常 reslut() 与 row_array 结果有时不太一样
//        一般加载到时model里面使用。
    }

    // 增
    function add_post()
    {
        $uri = $this->uri->uri_string;
        $Token = $this->input->get_request_header('X-Token', TRUE);
        $retPerm = $this->permission->HasPermit($Token, $uri);
        if ($retPerm['code'] != 50000) {
            $this->set_response($retPerm, REST_Controller::HTTP_OK);
            return;
        }

        $parms = $this->post();  // 获取表单参数，类型为数组

        if ($this->Base_model->_key_exists('sys_role', ['name' => $parms['name']])) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => $parms['name'] . ' - 角色名重复'
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        // 加入新增时间
        $parms['create_time'] = time();

        $role_id = $this->Base_model->_insert_key('sys_role', $parms);
        if (!$role_id) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => $parms['name'] . ' - 角色新增失败'
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        // 生成该角色对应的权限: sys_perm, 权限类型为: role, 生成唯一的 perm_id
        $perm_id = $this->Base_model->_insert_key('sys_perm', ['perm_type' => 'role', "r_id" => $role_id]);
        if (!$perm_id) {
            var_dump($this->uri->uri_string . ' 生成该角色对应的权限: sys_perm, 失败...');
            var_dump(['perm_type' => 'role', "r_id" => $role_id]);
            return;
        }

        // 超级管理员角色自动拥有该权限 perm_id
        $role_perm_id = $this->Base_model->_insert_key('sys_role_perm', ["role_id" => 1, "perm_id" => $perm_id]);
        if (!$role_perm_id) {
            var_dump($this->uri->uri_string . ' 超级管理员角色自动拥有该权限 perm_id, 失败...');
            var_dump(["role_id" => 1, "perm_id" => $perm_id]);
            return;
        }

        $message = [
            "code" => 20000,
            "type" => 'success',
            "message" => $parms['name'] . ' - 角色新增成功'
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }

    // 改
    function edit_post()
    {
        $uri = $this->uri->uri_string;
        $Token = $this->input->get_request_header('X-Token', TRUE);
        $retPerm = $this->permission->HasPermit($Token, $uri);
        if ($retPerm['code'] != 50000) {
            $this->set_response($retPerm, REST_Controller::HTTP_OK);
            return;
        }

        // $id = $this->post('id'); // POST param
        $parms = $this->post();  // 获取表单参数，类型为数组
        // var_dump($parms['path']);

        // 参数检验/数据预处理
        // 超级管理员角色不允许修改
        if ($parms['id'] == 1) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => $parms['name'] . ' - 角色不允许修改'
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $id = $parms['id'];
        unset($parms['id']); // 剃除索引id

        // 加入更新时间
        $parms['update_time'] = time();
        $where = ["id" => $id];

        if (!$this->Base_model->_update_key('sys_role', $parms, $where)) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => $parms['name'] . ' - 角色更新错误'
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $message = [
            "code" => 20000,
            "type" => 'success',
            "message" => $parms['name'] . ' - 角色更新成功'
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }

    // 删
    function del_post()
    {
        $uri = $this->uri->uri_string;
        $Token = $this->input->get_request_header('X-Token', TRUE);
        $retPerm = $this->permission->HasPermit($Token, $uri);
        if ($retPerm['code'] != 50000) {
            $this->set_response($retPerm, REST_Controller::HTTP_OK);
            return;
        }

        $parms = $this->post();  // 获取表单参数，类型为数组
        // var_dump($parms['path']);

        // 参数检验/数据预处理
        // 超级管理员角色不允许删除
        if ($parms['id'] == 1) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => $parms['name'] . ' - 角色不允许删除'
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        // 删除外键关联表 sys_role_perm , sys_perm, sys_role
        // 1. 根据sys_role id及'menu' 查找 perm_id
        // 2. 删除sys_role_perm 中perm_id记录
        // 3. 删除sys_perm中 perm_type='role' and r_id = role_id 记录,即第1步中获取的 perm_id， 一一对应
        // 4. 删除sys_role 中 id = role_id 的记录
        $where = 'perm_type="role" and r_id=' . $parms['id'];
        $arr = $this->Base_model->_get_key('sys_perm', '*', $where);
        if (empty($arr)) {
            var_dump($this->uri->uri_string . ' 未查找到 sys_perm 表中记录');
            var_dump($where);
            return;
        }

        $perm_id = $arr[0]['id']; // 正常只有一条记录
        $this->Base_model->_delete_key('sys_role_perm', ['perm_id' => $perm_id]); // 必须删除权限id 因为超级管理员角色自动拥有该权限否则会造成删除关联错误
        $this->Base_model->_delete_key('sys_role_perm', ['role_id' => $parms['id']]); // 再删除该角色对应的权限id（原有的菜单）
        $this->Base_model->_delete_key('sys_perm', ['id' => $perm_id]);

        $this->Base_model->_delete_key('sys_user_role', ['role_id' => $parms['id']]);

        // 删除基础表 sys_role
        if (!$this->Base_model->_delete_key('sys_role', $parms)) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => $parms['name'] . ' - 角色删除错误'
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $message = [
            "code" => 20000,
            "type" => 'success',
            "message" => $parms['name'] . ' - 角色删除成功'
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);

    }

    // 查
    function view_post()
    {
        $uri = $this->uri->uri_string;
        $Token = $this->input->get_request_header('X-Token', TRUE);

        $retPerm = $this->permission->HasPermit($Token, $uri);
        if ($retPerm['code'] != 50000) {
            $this->set_response($retPerm, REST_Controller::HTTP_OK);
            return;
        }

        $RoleArr = $this->Role_model->getRoleList();
        $message = [
            "code" => 20000,
            "data" => $RoleArr,
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }

    // 获取所有菜单 不需权限验证
    function allmenus_get()
    {
        $MenuTreeArr = $this->Role_model->getAllMenus();
        if (empty($MenuTreeArr)) {
            $message = [
                "code" => 20000,
                "data" => $MenuTreeArr,
                "message" => "数据库表中没有菜单"
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $MenuTree = $this->permission->genVueMenuTree($MenuTreeArr, 'id', 'pid', 0);
        $message = [
            "code" => 20000,
            "data" => $MenuTree,
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }

    // 获取所有角色带perm_id 不需权限验证
    function allroles_get()
    {
        $AllRolesArr = $this->Role_model->getAllRoles();
        if (empty($AllRolesArr)) {
            $message = [
                "code" => 20000,
                "data" => $AllRolesArr,
                "message" => "数据库表中没有角色"
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $message = [
            "code" => 20000,
            "data" => $AllRolesArr,
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }

    //  获取角色拥有的菜单权限 不需权限验证
    function rolemenu_post()
    {
        $parms = $this->post();  // 获取表单参数，类型为数组
        $RoleId = $parms['roleId'];

        $MenuTreeArr = $this->Role_model->getRoleMenu($RoleId);
        $message = [
            "code" => 20000,
            "data" => $MenuTreeArr,
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }

    // 获取角色拥有的角色权限 不需权限验证
    function rolerole_post()
    {
        $parms = $this->post();  // 获取表单参数，类型为数组
        $RoleId = $parms['roleId'];

        $RoleRoleArr = $this->Role_model->getRoleRole($RoleId);
        $message = [
            "code" => 20000,
            "data" => $RoleRoleArr,
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }

    // 保存角色对应权限
    function saveroleperm_post()
    {
        $parms = $this->post();  // 获取表单参数，类型为数组
        //        var_dump($parms['roleId']);
        //        var_dump($parms['rolePerms']);
        // 参数检验/数据预处理
        // 超级管理员角色不允许删除
        if ($parms['roleId'] == 1) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => '超级管理员角色拥有所有权限，不允许修改！'
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $RolePermArr = $this->Role_model->getRolePerm($parms['roleId']);

        $AddArr = $this->permission->array_diff_assoc2($parms['rolePerms'], $RolePermArr);
        // var_dump('------------只存在于前台传参 做添加操作-------------');
        // var_dump($AddArr);
        $failed = false;
        $failedArr = [];
        foreach ($AddArr as $k => $v) {
            $ret = $this->Base_model->_insert_key('sys_role_perm', $v);
            if (!$ret) {
                $failed = true;
                array_push($failedArr, $v);
            }
        }
        if ($failed) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => '授权失败 ' . json_encode($failedArr)
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $DelArr = $this->permission->array_diff_assoc2($RolePermArr, $parms['rolePerms']);
        // var_dump('------------只存在于后台数据库 删除操作-------------');
        // var_dump($DelArr);
        $failed = false;
        $failedArr = [];
        foreach ($DelArr as $k => $v) {
            $ret = $this->Base_model->_delete_key('sys_role_perm', $v);
            if (!$ret) {
                $failed = true;
                array_push($failedArr, $v);
            }
        }
        if ($failed) {
            $message = [
                "code" => 20000,
                "type" => 'error',
                "message" => '授权失败 ' . json_encode($failedArr)
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
            return;
        }

        $message = [
            "code" => 20000,
            "type" => 'success',
            "data" => $parms,
            "message" => '授权操作成功',
        ];
        $this->set_response($message, REST_Controller::HTTP_OK);
    }


    function list_get()
    {
//        $result = $this->some_model();
        $result['success'] = TRUE;

        if ($result['success']) {
            $List = array(
                array('order_no' => '201805138451313131', 'timestamp' => 'iphone 7 ', 'username' => 'iphone 7 ', 'price' => 399, 'status' => 'success'),
                array('order_no' => '300000000000000000', 'timestamp' => 'iphone 7 ', 'username' => 'iphone 7 ', 'price' => 399, 'status' => 'pending'),
                array('order_no' => '444444444444444444', 'timestamp' => 'iphone 7 ', 'username' => 'iphone 7 ', 'price' => 399, 'status' => 'success'),
                array('order_no' => '888888888888888888', 'timestamp' => 'iphone 7 ', 'username' => 'iphone 7 ', 'price' => 399, 'status' => 'pending'),
            );

            $message = [
                "code" => 20000,
                "data" => [
                    "total" => count($List),
                    "items" => $List
                ]
            ];
            $this->set_response($message, REST_Controller::HTTP_OK);
        } else {
            $message = [
                "code" => 50008,
                "message" => 'Login failed, unable to get user details.'
            ];

            $this->set_response($message, REST_Controller::HTTP_OK);
        }

    }

}