mirror of
https://github.com/jumpserver/lina.git
synced 2025-08-02 07:27:01 +00:00
perf: 修改树
This commit is contained in:
parent
fb9896800a
commit
c0571bc026
@ -95,13 +95,13 @@ export const DATABASE = [
|
||||
category: DATABASE_CATEGORY,
|
||||
has: true,
|
||||
group: i18n.t('applications.NoSQLProtocol')
|
||||
},
|
||||
{
|
||||
name: MONGODB,
|
||||
title: i18n.t(`applications.applicationsType.${MONGODB}`),
|
||||
type: 'primary',
|
||||
category: DATABASE_CATEGORY
|
||||
}
|
||||
// {
|
||||
// name: MONGODB,
|
||||
// title: i18n.t(`applications.applicationsType.${MONGODB}`),
|
||||
// type: 'primary',
|
||||
// category: DATABASE_CATEGORY
|
||||
// }
|
||||
]
|
||||
|
||||
export const AppPlanDatabase = [
|
||||
|
@ -3,17 +3,39 @@
|
||||
<el-col :md="14" :sm="24">
|
||||
<DetailCard :items="detailItems" />
|
||||
</el-col>
|
||||
<el-col :md="10" :sm="24">
|
||||
<IBox :title="$t('rbac.Permissions')">
|
||||
<div style="height: 10%">
|
||||
<el-button
|
||||
size="small"
|
||||
type="primary"
|
||||
style="width: 100%;"
|
||||
:disabled="isDisabled"
|
||||
@click="updatePermissions"
|
||||
>
|
||||
{{ $t('common.Update') }}
|
||||
</el-button>
|
||||
</div>
|
||||
<div class="perm-tree">
|
||||
<AutoDataZTree v-if="!loading" ref="tree" :setting="setting" />
|
||||
</div>
|
||||
</IBox>
|
||||
</el-col>
|
||||
</el-row>
|
||||
</template>
|
||||
|
||||
<script>
|
||||
import { IBox } from '@/components'
|
||||
import DetailCard from '@/components/DetailCard'
|
||||
import AutoDataZTree from '@/components/AutoDataZTree'
|
||||
import { toSafeLocalDateStr } from '@/utils/common'
|
||||
|
||||
export default {
|
||||
name: 'RoleInfo',
|
||||
name: 'RolePerms',
|
||||
components: {
|
||||
DetailCard
|
||||
AutoDataZTree,
|
||||
DetailCard,
|
||||
IBox
|
||||
},
|
||||
props: {
|
||||
object: {
|
||||
@ -22,11 +44,95 @@ export default {
|
||||
}
|
||||
},
|
||||
data() {
|
||||
const vm = this
|
||||
return {
|
||||
loading: true
|
||||
loading: true,
|
||||
isDisabled: true,
|
||||
setting: {
|
||||
showAssets: false,
|
||||
showMenu: false,
|
||||
showRefresh: true,
|
||||
treeUrl: '',
|
||||
check: {
|
||||
enable: true
|
||||
},
|
||||
async: {
|
||||
enable: false
|
||||
},
|
||||
callback: {
|
||||
onCheck: _.debounce((event, treeId, treeNode) => {
|
||||
// 选择后,更新按钮可用
|
||||
vm.setUpdateBtn()
|
||||
vm.checkActionDeps(treeNode)
|
||||
vm.checkSpecDeps()
|
||||
}, 200),
|
||||
beforeCheck: (treeId, treeNode) => {
|
||||
return true
|
||||
},
|
||||
onClick: _.debounce((event, treeId, treeNode) => {
|
||||
vm.ztree.expandNode(treeNode)
|
||||
}, 100)
|
||||
}
|
||||
},
|
||||
nodesDeps: {
|
||||
'view_console': ['rbac.view_console'],
|
||||
'view_audit': ['rbac.view_audit'],
|
||||
'view_workspace': ['rbac.view_workspace'],
|
||||
'view_setting': ['settings.view_setting'],
|
||||
'cloud_import': ['assets.view_asset'],
|
||||
'terminal_node': ['settings.change_terminal'],
|
||||
'rbac.orgrolebinding': ['rbac.view_orgrole'],
|
||||
'rbac.systemrolebinding': ['rbac.view_systemrole'],
|
||||
'tickets.change_ticketflow': ['users.view_user'],
|
||||
'users.invite_user': [
|
||||
'users.match_user', 'rbac.add_orgrolebinding', 'rbac.change_orgrolebinding',
|
||||
'rbac.view_orgrolebinding', 'rbac.view_orgrole'
|
||||
],
|
||||
'acls.loginacl': ['users.view_user'],
|
||||
'acls.loginassetacl': ['users.view_user'],
|
||||
'assets.view_asset': ['assets.view_node'],
|
||||
'assets.commandfilterrule': ['assets.view_commandfilter'],
|
||||
'assets.gateway': ['assets.view_domain'],
|
||||
'assets.view_authbook': ['assets.view_node'],
|
||||
'applications.add_application': ['assets.view_asset'],
|
||||
'applications.view_account': ['applications.view_application'],
|
||||
'perms.view_assetpermission': ['assets.view_node'],
|
||||
'perms.view_applicationpermission': ['applications.view_application'],
|
||||
'perms.assetpermission': [
|
||||
'assets.view_asset', 'assets.view_node', 'assets.view_systemuser',
|
||||
'users.view_user', 'users.view_usergroup'
|
||||
],
|
||||
'perms.applicationpermission': [
|
||||
'applications.view_application', 'assets.view_systemuser',
|
||||
'users.view_user', 'users.view_usergroup'
|
||||
],
|
||||
'settings.change_systemmsgsubscription': ['users.view_user'],
|
||||
'terminal.add_terminal': ['terminal.view_commandstorage', 'terminal.view_replaystorage'],
|
||||
'terminal.change_terminal': ['terminal.view_commandstorage', 'terminal.view_replaystorage'],
|
||||
'terminal.view_commandstroage': ['settings.change_terminal'],
|
||||
'terminal.view_replaystorage': ['settings.change_terminal'],
|
||||
'terminal.view_status': ['settings.change_terminal'],
|
||||
'terminal.view_task': ['settings.change_terminal'],
|
||||
'terminal.view_terminal': ['settings.change_terminal'],
|
||||
'xpack.add_syncinstancetask': [
|
||||
'assets.view_asset', 'assets.view_node', 'assets.view_systemuser',
|
||||
'xpack.view_account'
|
||||
],
|
||||
'xpack.view_syncinstancetask': ['xpack.view_account'],
|
||||
'xpack.view_syncinstancedetail': ['xpack.view_syncinstancetask'],
|
||||
'xpack.view_syncinstancetaskexecution': ['xpack.view_syncinstancetask'],
|
||||
'xpack.view_changeauthplantask': ['xpack.view_changeauthplan'],
|
||||
'xpack.view_changeauthplanexecution': ['xpack.view_changeauthplan']
|
||||
}
|
||||
}
|
||||
},
|
||||
computed: {
|
||||
ztree() {
|
||||
return this.$refs.tree.zTree
|
||||
},
|
||||
scope() {
|
||||
return this.object.scope
|
||||
},
|
||||
detailItems() {
|
||||
return [
|
||||
{
|
||||
@ -61,11 +167,132 @@ export default {
|
||||
}
|
||||
},
|
||||
mounted() {
|
||||
this.setting.treeUrl = `/api/v1/rbac/${this.object.scope}-roles/${this.object.id}/permissions/tree/`
|
||||
setTimeout(() => {
|
||||
this.loading = false
|
||||
})
|
||||
},
|
||||
methods: {
|
||||
setUpdateBtn() {
|
||||
const permRequired = `rbac.change_${this.object.scope}role`
|
||||
if (this.$hasPerm(permRequired)) {
|
||||
this.isDisabled = false
|
||||
}
|
||||
},
|
||||
parsePerm(perm) {
|
||||
if (!perm) {
|
||||
this.$log.debug('No app code: ', perm)
|
||||
return
|
||||
}
|
||||
const [app, code] = perm.split('.')
|
||||
if (!app || !code) {
|
||||
this.$log.debug('App or code not found')
|
||||
return
|
||||
}
|
||||
const [action, resource] = code.split('_')
|
||||
if (!action || !resource) {
|
||||
return
|
||||
}
|
||||
return { action, resource, app }
|
||||
},
|
||||
checkActionDeps(node) {
|
||||
if (node.isParent) {
|
||||
this.$log.debug('Is parent')
|
||||
return
|
||||
}
|
||||
const data = this.parsePerm(node.title)
|
||||
if (!data) {
|
||||
this.$log.error('Parse perm error: ', node.title)
|
||||
return
|
||||
}
|
||||
|
||||
const { app, action, resource } = data
|
||||
const ztree = this.$refs.tree.zTree
|
||||
const viewId = `${app}.view_${resource}`
|
||||
const viewNode = ztree.getNodeByParam('title', viewId)
|
||||
if (!viewNode) {
|
||||
return
|
||||
}
|
||||
|
||||
const viewIgnoreAction = ['match']
|
||||
const checked = node.checked
|
||||
if (action === 'view') {
|
||||
// 选中 view node 不需要处理, 不选中的话去掉 兄弟节点选中
|
||||
if (checked) {
|
||||
return
|
||||
}
|
||||
const parent = viewNode.getParentNode()
|
||||
const actionNodes = parent.children
|
||||
for (const node of actionNodes) {
|
||||
const d = this.parsePerm(node.title)
|
||||
if (!d) {
|
||||
continue
|
||||
}
|
||||
const { action: act, resource: res } = d
|
||||
// 忽略的 action 不用处理, resource 不相同的不用处理
|
||||
this.$log.debug('Action: ', act, d)
|
||||
if (act === 'view' || viewIgnoreAction.indexOf(act) > -1 || res !== resource) {
|
||||
continue
|
||||
}
|
||||
ztree.checkNode(node, false)
|
||||
}
|
||||
} else if (viewIgnoreAction.indexOf(action) > -1) {
|
||||
this.$log.debug('Action is ignore: ', action)
|
||||
} else {
|
||||
if (!checked) {
|
||||
return
|
||||
}
|
||||
this.$log.debug('Select view node: ', viewNode)
|
||||
ztree.checkNode(viewNode, true)
|
||||
}
|
||||
},
|
||||
checkSpecDeps() {
|
||||
const ztree = this.$refs.tree.zTree
|
||||
const depsId = ztree.getCheckedNodes().filter(i => {
|
||||
return !!this.nodesDeps[i.title]
|
||||
}).reduce((result, v) => {
|
||||
return [...result, ...this.nodesDeps[v.title]]
|
||||
}, [])
|
||||
this.$log.debug('Select nodes should try: ', depsId)
|
||||
|
||||
for (const i of depsId) {
|
||||
const depNode = this.ztree.getNodeByParam('title', i)
|
||||
this.ztree.checkNode(depNode, true)
|
||||
}
|
||||
},
|
||||
updatePermissions() {
|
||||
const ztree = this.$refs.tree.zTree
|
||||
const checkedNodes = ztree.getCheckedNodes()
|
||||
const permNodes = checkedNodes.filter(node => !node.isParent)
|
||||
const permIds = permNodes.map(node => node.id)
|
||||
const roleDetailUrl = `/api/v1/rbac/${this.object.scope}-roles/${this.object.id}/`
|
||||
const data = {
|
||||
permissions: permIds
|
||||
}
|
||||
this.$axios.patch(roleDetailUrl, data).then(() => {
|
||||
this.$message.success(this.$t('common.updateSuccessMsg'))
|
||||
}).catch(error => {
|
||||
this.$message.error(this.$t('common.updateErrorMsg') + error)
|
||||
this.$log.error(error)
|
||||
})
|
||||
}
|
||||
}
|
||||
}
|
||||
</script>
|
||||
|
||||
<style lang="scss" scoped>
|
||||
.perm-tree >>> .ztree * {
|
||||
background: white;
|
||||
}
|
||||
.perm-tree >>> .ztree {
|
||||
background: white !important;
|
||||
}
|
||||
.perm-tree >>> .checkbox_true_disable,
|
||||
.perm-tree >>> .checkbox_false_disable {
|
||||
cursor: not-allowed!important;
|
||||
}
|
||||
.perm-tree >>> .checkbox_true_disable:before,
|
||||
.perm-tree >>> .checkbox_false_disable:before {
|
||||
color: #aaaaaa!important;
|
||||
}
|
||||
</style>
|
||||
|
@ -1,260 +0,0 @@
|
||||
<template>
|
||||
<el-row :gutter="20">
|
||||
<el-col :md="14" :sm="24">
|
||||
<IBox :title="$t('rbac.Permissions')">
|
||||
<div style="height: 10%">
|
||||
<el-button
|
||||
size="small"
|
||||
type="primary"
|
||||
style="width: 100%;"
|
||||
:disabled="isDisabled"
|
||||
@click="updatePermissions"
|
||||
>
|
||||
{{ $t('common.Update') }}
|
||||
</el-button>
|
||||
</div>
|
||||
<div class="perm-tree">
|
||||
<AutoDataZTree v-if="!loading" ref="tree" :setting="setting" />
|
||||
</div>
|
||||
</IBox>
|
||||
</el-col>
|
||||
</el-row>
|
||||
</template>
|
||||
|
||||
<script>
|
||||
import { IBox } from '@/components'
|
||||
import AutoDataZTree from '@/components/AutoDataZTree'
|
||||
|
||||
export default {
|
||||
name: 'RolePerms',
|
||||
components: {
|
||||
AutoDataZTree,
|
||||
IBox
|
||||
},
|
||||
props: {
|
||||
object: {
|
||||
type: Object,
|
||||
default: () => ({})
|
||||
}
|
||||
},
|
||||
data() {
|
||||
const vm = this
|
||||
return {
|
||||
loading: true,
|
||||
isDisabled: true,
|
||||
setting: {
|
||||
showAssets: false,
|
||||
showMenu: false,
|
||||
showRefresh: true,
|
||||
treeUrl: '',
|
||||
check: {
|
||||
enable: true
|
||||
},
|
||||
async: {
|
||||
enable: false
|
||||
},
|
||||
callback: {
|
||||
onCheck: _.debounce((event, treeId, treeNode) => {
|
||||
// 选择后,更新按钮可用
|
||||
vm.setUpdateBtn()
|
||||
vm.checkActionDeps(treeNode)
|
||||
vm.checkSpecDeps()
|
||||
}, 200),
|
||||
beforeCheck: (treeId, treeNode) => {
|
||||
return true
|
||||
},
|
||||
onClick: _.debounce((event, treeId, treeNode) => {
|
||||
vm.ztree.expandNode(treeNode)
|
||||
}, 100)
|
||||
}
|
||||
},
|
||||
nodesDeps: {
|
||||
'view_console': ['rbac.view_console'],
|
||||
'view_audit': ['rbac.view_audit'],
|
||||
'view_workspace': ['rbac.view_workspace'],
|
||||
'view_setting': ['settings.view_setting'],
|
||||
'cloud_import': ['assets.view_asset'],
|
||||
'terminal_node': ['settings.change_terminal'],
|
||||
'rbac.orgrolebinding': ['rbac.view_orgrole'],
|
||||
'rbac.systemrolebinding': ['rbac.view_systemrole'],
|
||||
'tickets.change_ticketflow': ['users.view_user'],
|
||||
'users.invite_user': [
|
||||
'users.match_user', 'rbac.add_orgrolebinding', 'rbac.change_orgrolebinding',
|
||||
'rbac.view_orgrolebinding', 'rbac.view_orgrole'
|
||||
],
|
||||
'acls.loginacl': ['users.view_user'],
|
||||
'acls.loginassetacl': ['users.view_user'],
|
||||
'assets.view_asset': ['assets.view_node'],
|
||||
'assets.commandfilterrule': ['assets.view_commandfilter'],
|
||||
'assets.gateway': ['assets.view_domain'],
|
||||
'assets.view_authbook': ['assets.view_node'],
|
||||
'applications.add_application': ['assets.view_asset'],
|
||||
'applications.view_account': ['applications.view_application'],
|
||||
'perms.view_assetpermission': ['assets.view_node'],
|
||||
'perms.view_applicationpermission': ['applications.view_application'],
|
||||
'perms.assetpermission': [
|
||||
'assets.view_asset', 'assets.view_node', 'assets.view_systemuser',
|
||||
'users.view_user', 'users.view_usergroup'
|
||||
],
|
||||
'perms.applicationpermission': [
|
||||
'applications.view_application', 'assets.view_systemuser',
|
||||
'users.view_user', 'users.view_usergroup'
|
||||
],
|
||||
'settings.change_systemmsgsubscription': ['users.view_user'],
|
||||
'terminal.add_terminal': ['terminal.view_commandstorage', 'terminal.view_replaystorage'],
|
||||
'terminal.change_terminal': ['terminal.view_commandstorage', 'terminal.view_replaystorage'],
|
||||
'terminal.view_commandstroage': ['settings.change_terminal'],
|
||||
'terminal.view_replaystorage': ['settings.change_terminal'],
|
||||
'terminal.view_status': ['settings.change_terminal'],
|
||||
'terminal.view_task': ['settings.change_terminal'],
|
||||
'terminal.view_terminal': ['settings.change_terminal'],
|
||||
'xpack.add_syncinstancetask': [
|
||||
'assets.view_asset', 'assets.view_node', 'assets.view_systemuser',
|
||||
'xpack.view_account'
|
||||
],
|
||||
'xpack.view_syncinstancetask': ['xpack.view_account'],
|
||||
'xpack.view_syncinstancedetail': ['xpack.view_syncinstancetask'],
|
||||
'xpack.view_syncinstancetaskexecution': ['xpack.view_syncinstancetask'],
|
||||
'xpack.view_changeauthplantask': ['xpack.view_changeauthplan'],
|
||||
'xpack.view_changeauthplanexecution': ['xpack.view_changeauthplan']
|
||||
}
|
||||
}
|
||||
},
|
||||
computed: {
|
||||
ztree() {
|
||||
return this.$refs.tree.zTree
|
||||
},
|
||||
scope() {
|
||||
return this.object.scope
|
||||
}
|
||||
},
|
||||
mounted() {
|
||||
this.setting.treeUrl = `/api/v1/rbac/${this.object.scope}-roles/${this.object.id}/permissions/tree/`
|
||||
setTimeout(() => {
|
||||
this.loading = false
|
||||
})
|
||||
},
|
||||
methods: {
|
||||
setUpdateBtn() {
|
||||
const permRequired = `rbac.change_${this.object.scope}role`
|
||||
if (this.$hasPerm(permRequired)) {
|
||||
this.isDisabled = false
|
||||
}
|
||||
},
|
||||
parsePerm(perm) {
|
||||
if (!perm) {
|
||||
this.$log.debug('No app code: ', perm)
|
||||
return
|
||||
}
|
||||
const [app, code] = perm.split('.')
|
||||
if (!app || !code) {
|
||||
this.$log.debug('App or code not found')
|
||||
return
|
||||
}
|
||||
const [action, resource] = code.split('_')
|
||||
if (!action || !resource) {
|
||||
return
|
||||
}
|
||||
return { action, resource, app }
|
||||
},
|
||||
checkActionDeps(node) {
|
||||
if (node.isParent) {
|
||||
this.$log.debug('Is parent')
|
||||
return
|
||||
}
|
||||
const data = this.parsePerm(node.title)
|
||||
if (!data) {
|
||||
this.$log.error('Parse perm error: ', node.title)
|
||||
return
|
||||
}
|
||||
|
||||
const { app, action, resource } = data
|
||||
const ztree = this.$refs.tree.zTree
|
||||
const viewId = `${app}.view_${resource}`
|
||||
const viewNode = ztree.getNodeByParam('title', viewId)
|
||||
if (!viewNode) {
|
||||
return
|
||||
}
|
||||
|
||||
const viewIgnoreAction = ['match']
|
||||
const checked = node.checked
|
||||
if (action === 'view') {
|
||||
// 选中 view node 不需要处理, 不选中的话去掉 兄弟节点选中
|
||||
if (checked) {
|
||||
return
|
||||
}
|
||||
const parent = viewNode.getParentNode()
|
||||
const actionNodes = parent.children
|
||||
for (const node of actionNodes) {
|
||||
const d = this.parsePerm(node.title)
|
||||
if (!d) {
|
||||
continue
|
||||
}
|
||||
const { action: act, resource: res } = d
|
||||
// 忽略的 action 不用处理, resource 不相同的不用处理
|
||||
this.$log.debug('Action: ', act, d)
|
||||
if (act === 'view' || viewIgnoreAction.indexOf(act) > -1 || res !== resource) {
|
||||
continue
|
||||
}
|
||||
ztree.checkNode(node, false)
|
||||
}
|
||||
} else if (viewIgnoreAction.indexOf(action) > -1) {
|
||||
this.$log.debug('Action is ignore: ', action)
|
||||
} else {
|
||||
if (!checked) {
|
||||
return
|
||||
}
|
||||
this.$log.debug('Select view node: ', viewNode)
|
||||
ztree.checkNode(viewNode, true)
|
||||
}
|
||||
},
|
||||
checkSpecDeps() {
|
||||
const ztree = this.$refs.tree.zTree
|
||||
const depsId = ztree.getCheckedNodes().filter(i => {
|
||||
return !!this.nodesDeps[i.title]
|
||||
}).reduce((result, v) => {
|
||||
return [...result, ...this.nodesDeps[v.title]]
|
||||
}, [])
|
||||
this.$log.debug('Select nodes should try: ', depsId)
|
||||
|
||||
for (const i of depsId) {
|
||||
const depNode = this.ztree.getNodeByParam('title', i)
|
||||
this.ztree.checkNode(depNode, true)
|
||||
}
|
||||
},
|
||||
updatePermissions() {
|
||||
const ztree = this.$refs.tree.zTree
|
||||
const checkedNodes = ztree.getCheckedNodes()
|
||||
const permNodes = checkedNodes.filter(node => !node.isParent)
|
||||
const permIds = permNodes.map(node => node.id)
|
||||
const roleDetailUrl = `/api/v1/rbac/${this.object.scope}-roles/${this.object.id}/`
|
||||
const data = {
|
||||
permissions: permIds
|
||||
}
|
||||
this.$axios.patch(roleDetailUrl, data).then(() => {
|
||||
this.$message.success(this.$t('common.updateSuccessMsg'))
|
||||
}).catch(error => {
|
||||
this.$message.error(this.$t('common.updateErrorMsg') + error)
|
||||
this.$log.error(error)
|
||||
})
|
||||
}
|
||||
}
|
||||
}
|
||||
</script>
|
||||
|
||||
<style lang="scss" scoped>
|
||||
.perm-tree >>> .ztree * {
|
||||
background: white;
|
||||
}
|
||||
.perm-tree >>> .ztree {
|
||||
background: white !important;
|
||||
}
|
||||
.perm-tree >>> .checkbox_true_disable,
|
||||
.perm-tree >>> .checkbox_false_disable {
|
||||
cursor: not-allowed!important;
|
||||
}
|
||||
.perm-tree >>> .checkbox_true_disable:before,
|
||||
.perm-tree >>> .checkbox_false_disable:before {
|
||||
color: #aaaaaa!important;
|
||||
}
|
||||
</style>
|
@ -15,14 +15,12 @@
|
||||
import { GenericDetailPage } from '@/layout/components'
|
||||
import RoleInfo from './RoleInfo'
|
||||
import RoleUsers from './RoleUsers'
|
||||
import RolePerms from './RolePerms'
|
||||
|
||||
export default {
|
||||
components: {
|
||||
GenericDetailPage,
|
||||
RoleInfo,
|
||||
RoleUsers,
|
||||
RolePerms
|
||||
RoleUsers
|
||||
},
|
||||
data() {
|
||||
const vm = this
|
||||
@ -54,10 +52,6 @@ export default {
|
||||
title: this.$t('users.RoleInfo'),
|
||||
name: 'RoleInfo'
|
||||
},
|
||||
{
|
||||
title: this.$t('users.RolePerms'),
|
||||
name: 'RolePerms'
|
||||
},
|
||||
{
|
||||
title: this.$t('users.RoleUsers'),
|
||||
name: 'RoleUsers',
|
||||
|
Loading…
Reference in New Issue
Block a user