ShareController.php 5.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188
  1. <?php
  2. namespace App\Http\Controllers;
  3. use App\Http\Api\ShareApi;
  4. use App\Http\Resources\ShareResource;
  5. use App\Models\GroupInfo;
  6. use App\Models\Share;
  7. use App\Services\AuthService;
  8. use Illuminate\Http\Request;
  9. use Illuminate\Http\Response;
  10. use Illuminate\Support\Str;
  11. class ShareController extends Controller
  12. {
  13. /**
  14. * Display a listing of the resource.
  15. *
  16. * @return Response
  17. */
  18. public function index(Request $request)
  19. {
  20. //
  21. $user = AuthService::current($request);
  22. $result = false;
  23. $role = 'member';
  24. $indexCol = ['id', 'res_id', 'res_type', 'power', 'updated_at', 'created_at'];
  25. switch ($request->input('view')) {
  26. case 'res':
  27. if (! $user) {
  28. return $this->error(__('auth.failed'));
  29. }
  30. $table = Share::where('res_id', $request->input('id'));
  31. $power = ShareApi::getResPower($user['user_uid'], $request->input('id'), $table->value('res_type'));
  32. switch ($power) {
  33. case 10:
  34. $role = 'member';
  35. break;
  36. case 20:
  37. $role = 'editor';
  38. break;
  39. case 30:
  40. $role = 'owner';
  41. break;
  42. }
  43. break;
  44. case 'group':
  45. if (! $user) {
  46. return $this->error(__('auth.failed'));
  47. }
  48. // TODO 判断当前用户是否有指定的 group 的权限
  49. if (GroupInfo::where('uid', $request->input('id'))->where('owner', $user['user_uid'])->exists()) {
  50. $role = 'owner';
  51. }
  52. $table = Share::where('cooperator_id', $request->input('id'));
  53. break;
  54. }
  55. if (isset($_GET['search'])) {
  56. // TODO 搜索资源标题
  57. $table = $table->where('title', 'like', $_GET['search'].'%');
  58. }
  59. $count = $table->count();
  60. if (isset($_GET['order']) && isset($_GET['dir'])) {
  61. $table = $table->orderBy($_GET['order'], $_GET['dir']);
  62. } else {
  63. $table = $table->orderBy('updated_at', 'desc');
  64. }
  65. $table->skip($request->input('offset', 0))
  66. ->take($request->input('limit', 1000));
  67. $result = $table->get();
  68. // TODO 获取当前用户的身份
  69. if ($result) {
  70. return $this->ok(['rows' => ShareResource::collection($result), 'count' => $count, 'role' => $role]);
  71. } else {
  72. return $this->error('没有查询到数据');
  73. }
  74. }
  75. /**
  76. * Store a newly created resource in storage.
  77. *
  78. * @return Response
  79. */
  80. public function store(Request $request)
  81. {
  82. //
  83. foreach ($request->input('user_id') as $key => $value) {
  84. if (! Str::isUuid($value)) {
  85. continue;
  86. }
  87. $row = Share::where('cooperator_id', $value)
  88. ->where('res_id', $request->input('res_id'))->first();
  89. if (! $row) {
  90. $row = new Share;
  91. $row->id = app('snowflake')->id();
  92. $row->cooperator_id = $value;
  93. $row->res_id = $request->input('res_id');
  94. $row->res_type = $request->input('res_type');
  95. $row->create_time = time() * 1000;
  96. }
  97. $c_type = ['user' => 0, 'group' => 1];
  98. $row->cooperator_type = $c_type[$request->input('user_type')];
  99. switch ($request->input('role')) {
  100. case 'manager':
  101. case 'editor':
  102. $row->power = 20;
  103. break;
  104. case 'reader':
  105. $row->power = 10;
  106. break;
  107. }
  108. $row->modify_time = time() * 1000;
  109. $row->save();
  110. }
  111. return $this->ok(count($request->input('user_id')));
  112. }
  113. /**
  114. * Display the specified resource.
  115. *
  116. * @return Response
  117. */
  118. public function show(Share $share)
  119. {
  120. //
  121. }
  122. /**
  123. * Update the specified resource in storage.
  124. *
  125. * @return Response
  126. */
  127. public function update(Request $request, Share $share)
  128. {
  129. // 查询权限
  130. $currUser = AuthService::current($request);
  131. if (! $currUser) {
  132. return $this->error(__('auth.failed'));
  133. }
  134. $power = ShareApi::getResPower($currUser['user_uid'], $share->res_id, $share->res_type);
  135. if (! $power || $power <= 20) {
  136. // 普通成员没有删除权限
  137. return $this->error(__('auth.failed'));
  138. }
  139. switch ($request->input('role')) {
  140. case 'manager':
  141. case 'editor':
  142. $share->power = 20;
  143. break;
  144. case 'reader':
  145. $share->power = 10;
  146. break;
  147. }
  148. $share->modify_time = time() * 1000;
  149. $share->save();
  150. return $this->ok($share);
  151. }
  152. /**
  153. * Remove the specified resource from storage.
  154. *
  155. * @return Response
  156. */
  157. public function destroy(Request $request, Share $share)
  158. {
  159. // 查询权限
  160. $currUser = AuthService::current($request);
  161. if (! $currUser) {
  162. return $this->error(__('auth.failed'));
  163. }
  164. $power = ShareApi::getResPower($currUser['user_uid'], $share->res_id, $share->res_type);
  165. if (! $power || $power <= 20) {
  166. // 普通成员没有删除权限
  167. return $this->error(__('auth.failed'));
  168. }
  169. $delete = $share->delete();
  170. return $this->ok($delete);
  171. }
  172. }