后端 (Laravel 10 + Sanctum): - RBAC 四层权限系统 (users→roles→permissions→menus) - 门店隔离中间件 (BelongsToStore Trait + StoreIsolation Middleware) - 操作日志中间件 (自动记录写操作) - 权限检查中间件 (CheckPermission) - 16张数据库表迁移 (系统基础+RBAC+字典+配置) - 11个 Eloquent Model - Auth API (登录/登出/用户信息) - 系统设置模块 CRUD (门店/部门/职务/用户/角色/菜单/权限/字典/日志) - 45条 RESTful API 路由 - InitSeeder 初始数据 (超管/角色/76权限/31菜单) 前端 (Vue 3 + Element Plus + Vite): - Axios 请求封装 + Token 注入 - Pinia 状态管理 (user + permission store) - 动态路由 (服务端菜单→前端路由自动生成) - 后台布局 (侧边栏+顶栏+主内容区) - 登录页 + 仪表盘首页 - 系统设置 7 个 CRUD 页面 技术方案文档 (7卷): - 技术总览/数据库设计/API规范/RBAC设计/模块详设/小程序设计/部署方案
63 lines
1.8 KiB
PHP
63 lines
1.8 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Admin\System;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\Permission;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
|
|
class PermissionController extends Controller
|
|
{
|
|
/**
|
|
* 权限树
|
|
*/
|
|
public function index(): JsonResponse
|
|
{
|
|
return $this->success(Permission::tree());
|
|
}
|
|
|
|
public function store(Request $request): JsonResponse
|
|
{
|
|
$data = $request->validate([
|
|
'parent_id' => 'integer',
|
|
'name' => 'required|string|max:50',
|
|
'code' => 'required|string|max:100|unique:permissions,code',
|
|
'module' => 'nullable|string|max:50',
|
|
'type' => 'required|in:1,2,3',
|
|
'description' => 'nullable|string|max:255',
|
|
'sort' => 'integer',
|
|
]);
|
|
|
|
$permission = Permission::create($data);
|
|
return $this->success($permission, '创建成功');
|
|
}
|
|
|
|
public function update(Request $request, Permission $permission): JsonResponse
|
|
{
|
|
$data = $request->validate([
|
|
'parent_id' => 'integer',
|
|
'name' => 'string|max:50',
|
|
'code' => 'string|max:100|unique:permissions,code,' . $permission->id,
|
|
'module' => 'nullable|string|max:50',
|
|
'type' => 'in:1,2,3',
|
|
'description' => 'nullable|string|max:255',
|
|
'sort' => 'integer',
|
|
]);
|
|
|
|
$permission->update($data);
|
|
return $this->success($permission, '更新成功');
|
|
}
|
|
|
|
public function destroy(Permission $permission): JsonResponse
|
|
{
|
|
if ($permission->children()->exists()) {
|
|
return $this->error('该权限下有子权限,无法删除');
|
|
}
|
|
|
|
$permission->roles()->detach();
|
|
$permission->delete();
|
|
return $this->success(null, '删除成功');
|
|
}
|
|
}
|