401 lines
13 KiB
PHP
401 lines
13 KiB
PHP
<?php namespace Gdoo\User\Services;
|
|
|
|
use Auth;
|
|
use Request;
|
|
use DB;
|
|
use Session;
|
|
|
|
use Gdoo\User\Models\Department;
|
|
use Gdoo\User\Models\User;
|
|
use AIke\User\Models\UserAsset;
|
|
use Gdoo\User\Models\Role;
|
|
|
|
use Gdoo\System\Models\SystemLog;
|
|
|
|
class UserService
|
|
{
|
|
public static function getUser($user_id = 0) {
|
|
$user = null;
|
|
if ($user_id == 0) {
|
|
$user = auth()->user();
|
|
}
|
|
$user = User::find($user_id);
|
|
return $user;
|
|
}
|
|
|
|
/**
|
|
* 验证权限
|
|
*/
|
|
public static function authorise($action = null, $asset_name = null)
|
|
{
|
|
if ($asset_name === null) {
|
|
$asset_name = Request::module();
|
|
}
|
|
|
|
if ($action === null) {
|
|
$action = Request::controller().'.'.Request::action();
|
|
} else {
|
|
if (substr_count($action, '.') === 0) {
|
|
$action = Request::controller().'.'.$action;
|
|
}
|
|
}
|
|
|
|
return UserAssetService::check(Auth::user()->role_id, $action, $asset_name);
|
|
}
|
|
|
|
/**
|
|
* 验证查看权限
|
|
*/
|
|
public static function authoriseAccess($action = null, $asset_name = null)
|
|
{
|
|
$level = static::authorise($action, $asset_name);
|
|
|
|
$user = Auth::user();
|
|
|
|
// 本人
|
|
if ($level == 1) {
|
|
return [$user->id];
|
|
}
|
|
|
|
// 本人和下属
|
|
if ($level == 2) {
|
|
$roles = Role::from(DB::raw('role as node, role as parent'))
|
|
->select(['node.id'])
|
|
->whereRaw('node.lft BETWEEN parent.lft AND parent.rgt')
|
|
->where('parent.id', $user->role_id)
|
|
->pluck('id');
|
|
return User::whereIn('role_id', $roles)->pluck('id')->toArray();
|
|
}
|
|
|
|
// 部门所有人
|
|
if ($level == 3) {
|
|
$departments = Department::from(DB::raw('department as node, department as parent'))
|
|
->select(['node.id'])
|
|
->whereRaw('node.lft BETWEEN parent.lft AND parent.rgt')
|
|
->where('parent.id', $user->department_id)
|
|
->pluck('id');
|
|
return User::whereIn('department_id', $departments)->pluck('id')->toArray();
|
|
}
|
|
|
|
// 销售组
|
|
if ($level == 5) {
|
|
$regions = DB::table('customer_region')->get()->toNested();
|
|
// 审批权限
|
|
$owners = DB::table('customer_region')
|
|
->where('owner_user_id', $user->id)
|
|
->get()->toArray();
|
|
// 查询权限
|
|
$assists = DB::table('customer_region')
|
|
->whereRaw(db_instr('owner_assist', $user->id))
|
|
->get()->toArray();
|
|
$ids = [];
|
|
foreach($owners as $v) {
|
|
$ids = array_merge($ids, $regions[$v['id']]['parent']);
|
|
$ids = array_merge($ids, $regions[$v['id']]['child']);
|
|
}
|
|
foreach($assists as $v) {
|
|
$ids = array_merge($ids, $regions[$v['id']]['parent']);
|
|
$ids = array_merge($ids, $regions[$v['id']]['child']);
|
|
}
|
|
$user_ids = [];
|
|
foreach($regions as $region) {
|
|
if (in_array($region['id'], $ids)) {
|
|
if ($region['owner_user_id']) {
|
|
$user_ids = array_merge($user_ids, [$region['owner_user_id']]);
|
|
}
|
|
if ($region['owner_assist']) {
|
|
$user_ids = array_merge($user_ids, explode(',', $region['owner_user_id']));
|
|
}
|
|
}
|
|
}
|
|
return $user_ids;
|
|
}
|
|
|
|
return [];
|
|
}
|
|
|
|
/**
|
|
* 获取角色权限
|
|
*/
|
|
public static function getRolesAccess()
|
|
{
|
|
$user = auth()->user();
|
|
|
|
$query = [
|
|
'team_id' => 0,
|
|
'customer_id' => 0,
|
|
];
|
|
|
|
foreach ($query as $k => $v) {
|
|
$query[$k] = Request::get($k, $v);
|
|
}
|
|
|
|
$teams = DB::table('customer_region')->get()->toNested()->toArray();
|
|
|
|
$roles = DB::table('role')
|
|
->leftJoin('user_role', 'user_role.role_id', '=', 'role.id')
|
|
->where('user_role.user_id', $user['id'])
|
|
->get();
|
|
|
|
// 支持销售组
|
|
$isTeam = false;
|
|
|
|
$res = [];
|
|
|
|
// 自己
|
|
$res['userId'] = $user->id;
|
|
|
|
foreach($roles as $role) {
|
|
|
|
// 全部数据权限
|
|
if ($role['access'] == 'all') {
|
|
$isTeam = true;
|
|
continue;
|
|
}
|
|
|
|
if ($role['access'] == 'team' || $role['access'] == 'team2') {
|
|
$isTeam = true;
|
|
}
|
|
|
|
// 获取单个角色权限
|
|
$access = static::getRoleAccess($user, $role, $teams);
|
|
|
|
// 筛选了销售组重置过滤条件
|
|
if ($isTeam && $query['team_id'] > 0) {
|
|
$access['whereIn']['team'] = [$query['team_id']];
|
|
}
|
|
$res['roles'][] = $access;
|
|
}
|
|
|
|
if ($isTeam) {
|
|
$res['team'] = $teams;
|
|
}
|
|
|
|
// 没有筛选销售组
|
|
if ($query['team_id'] == 0) {
|
|
$query['customer_id'] = 0;
|
|
}
|
|
|
|
$res['query'] = $query;
|
|
|
|
print_r($res);
|
|
|
|
return $res;
|
|
}
|
|
|
|
/**
|
|
* 获取角色权限
|
|
*/
|
|
public static function getRoleAccess($user, $role, $teams)
|
|
{
|
|
$res = [];
|
|
|
|
$res['whereIn'] = [];
|
|
$res['authorise'] = false;
|
|
|
|
// 用户组
|
|
$group_id = $user['group_id'];
|
|
switch ($group_id) {
|
|
// 用户
|
|
case 1:
|
|
// 角色数据权限
|
|
switch ($role['access']) {
|
|
// 本人
|
|
case 'me':
|
|
$res['userIds'] = [$user->id];
|
|
$res['customerIds'] = [];
|
|
$res['teamIds'] = [];
|
|
$res['whereIn']['user'] = $res['userIds'];
|
|
$res['authorise'] = true;
|
|
break;
|
|
// 本人和下属
|
|
case 'me2':
|
|
$users = DB::table('user')->whereRaw('(id = '.$user->id.' or leader_id = '.$user->id.')')->pluck('id')->toArray();
|
|
$res['userIds'] = $users;
|
|
$res['customerIds'] = [];
|
|
$res['teamIds'] = [];
|
|
$res['whereIn']['user'] = $users;
|
|
$res['authorise'] = true;
|
|
break;
|
|
// 本部门
|
|
case 'dept':
|
|
$users = DB::table('user')->where('department_id', $user->department_id)->pluck('id')->toArray();
|
|
$res['userIds'] = $users;
|
|
$res['customerIds'] = [];
|
|
$res['teamIds'] = [];
|
|
$res['whereIn']['user'] = $users;
|
|
$res['authorise'] = true;
|
|
break;
|
|
// 本部门和下级部门
|
|
case 'dept2':
|
|
$departmentIds = DB::table('user')->treeById($user->department_id)->toArray();
|
|
$users = DB::table('user')->whereIn('department_id', $departmentIds)->pluck('id')->toArray();
|
|
$res['userIds'] = $users;
|
|
$res['customerIds'] = [];
|
|
$res['teamIds'] = [];
|
|
$res['whereIn']['user'] = $users;
|
|
$res['authorise'] = true;
|
|
break;
|
|
// 本销售组
|
|
case 'team':
|
|
// 审批权限,查询权限
|
|
$teamIds = DB::table('customer_region')
|
|
->whereRaw('(owner_user_id = '.$user->id.' or '.db_instr('owner_assist', $user->id).')')->pluck('id')->toArray();
|
|
$res['userIds'] = [];
|
|
$res['customerIds'] = [];
|
|
$res['teamIds'] = $teamIds;
|
|
$res['whereIn']['team'] = $teamIds;
|
|
$res['authorise'] = true;
|
|
break;
|
|
// 本销售组和下级销售组
|
|
case 'team2':
|
|
// 审批权限,查询权限
|
|
$_teamIds = DB::table('customer_region')
|
|
->whereRaw('(owner_user_id = '.$user->id.' or '.db_instr('owner_assist', $user->id).')')->pluck('id')->toArray();
|
|
$teamIds = [];
|
|
foreach($_teamIds as $_teamId) {
|
|
foreach($teams[$_teamId]['child'] as $id) {
|
|
$teamIds[] = $id;
|
|
}
|
|
}
|
|
$res['userIds'] = [];
|
|
$res['customerIds'] = [];
|
|
$res['teamIds'] = $teamIds;
|
|
$res['whereIn']['team'] = $teamIds;
|
|
$res['authorise'] = true;
|
|
break;
|
|
case 'all':
|
|
break;
|
|
}
|
|
// 客户
|
|
case 2:
|
|
$customerIds = DB::table('customer')->where('user_id', $user->id)->pluck('id')->toArray();
|
|
$res['userIds'] = [];
|
|
$res['customerIds'] = $customerIds;
|
|
$res['whereIn']['customer'] = $customerIds;
|
|
$res['teamIds'] = [];
|
|
$res['authorise'] = true;
|
|
break;
|
|
// 客户联系人
|
|
case 3:
|
|
$customerIds = DB::table('customer_contact')->where('user_id', $user->id)->pluck('customer_id')->toArray();
|
|
$res['userIds'] = [];
|
|
$res['customerIds'] = $customerIds;
|
|
$res['whereIn']['customer'] = $customerIds;
|
|
$res['teamIds'] = [];
|
|
$res['authorise'] = true;
|
|
break;
|
|
// 供应商
|
|
case 4:
|
|
break;
|
|
// 供应商联系人
|
|
case 5:
|
|
break;
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
/**
|
|
* 检查动态密码
|
|
*/
|
|
public static function wantsTotp()
|
|
{
|
|
if (env('AUTH_TOTP', true) == false) {
|
|
return 0;
|
|
}
|
|
|
|
$auth_totp = Auth::user()->auth_totp;
|
|
|
|
if ($auth_totp == 0) {
|
|
return 0;
|
|
} elseif ($auth_totp == 1 && Session::get('auth_totp') == true) {
|
|
return 0;
|
|
} else {
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 取得用户列表
|
|
*/
|
|
public static function getAll($userId = 0)
|
|
{
|
|
static $data = [];
|
|
|
|
if (empty($data)) {
|
|
$data = User::get(['id', 'department_id', 'role_id', 'username', 'name', 'email', 'phone', 'birthday', 'gender'])->keyBy('id');
|
|
}
|
|
|
|
return $userId > 0 ? $data[$userId] : $data;
|
|
}
|
|
|
|
/**
|
|
*
|
|
* 传入部门编号，角色编码，用户编码，进行并集处理返回用户编号
|
|
*/
|
|
public static function getDRU($receive_id, $status = 1)
|
|
{
|
|
if ($receive_id == '') {
|
|
return [];
|
|
}
|
|
$receives = explode(',', str_replace(['u', 'r', 'd'], ['u_', 'r_', 'd_'], $receive_id));
|
|
|
|
$scope = [];
|
|
foreach ($receives as $receive) {
|
|
list($type, $id) = explode('_', $receive);
|
|
$scope[$type][] = $id;
|
|
}
|
|
|
|
return DB::table('user')
|
|
->where('status', $status)
|
|
->where(function ($q) use ($scope) {
|
|
if ($scope['d']) {
|
|
$q->orwhereIn('department_id', $scope['d']);
|
|
}
|
|
if ($scope['r']) {
|
|
$q->orwhereIn('role_id', $scope['r']);
|
|
}
|
|
if ($scope['u']) {
|
|
$q->orwhereIn('id', $scope['u']);
|
|
}
|
|
})->get(['id', 'role_id', 'department_id', 'username', 'name', 'email', 'phone']);
|
|
}
|
|
|
|
// 登录失败，记录错误信息
|
|
public static function authLogWrite($ip)
|
|
{
|
|
$log = SystemLog::where('ip', $ip)->first();
|
|
|
|
$data['ip'] = $ip;
|
|
if ($log->id) {
|
|
$data['error_count'] = $log->error_count + 1;
|
|
SystemLog::where('ip', $ip)->update($data);
|
|
} else {
|
|
$data['error_count'] = 1;
|
|
SystemLog::insert($data);
|
|
}
|
|
}
|
|
|
|
// 获取记录，没有记录返回空
|
|
public static function authLogRead($ip)
|
|
{
|
|
return SystemLog::where('ip', $ip)->first();
|
|
}
|
|
|
|
// 登录成功，销毁错误信息
|
|
public static function authLogDelete($ip)
|
|
{
|
|
SystemLog::where('ip', $ip)->delete();
|
|
}
|
|
|
|
// 检查IP
|
|
public static function authLogCheckIp($ip, $auth_ip)
|
|
{
|
|
if (empty($auth_ip)) {
|
|
return true;
|
|
}
|
|
$auth_ip = explode(PHP_EOL, $auth_ip);
|
|
return ($auth_ip && in_array($ip, $auth_ip));
|
|
}
|
|
}
|