You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
OneAuth/ui/page/sys/role/index.html

833 lines
25 KiB
HTML

<!DOCTYPE html>
<html>
<head>
<meta name="description" content="Role Management">
<title>{{ $t('nav.roles') }}</title>
<style>
body {
display: flex;
flex-direction: column;
gap: var(--spacing-lg);
padding: var(--spacing-lg);
box-sizing: border-box;
background-color: var(--bg-color);
}
.page-header {
display: flex;
justify-content: space-between;
align-items: center;
flex-wrap: wrap;
gap: var(--spacing-md);
padding-bottom: var(--spacing-md);
border-bottom: 1px solid var(--border-color);
}
.page-title {
font-size: var(--font-size-2xl);
font-weight: var(--font-weight-bold);
color: var(--text-color);
display: flex;
align-items: center;
gap: var(--spacing-sm);
}
.search-box {
display: flex;
align-items: center;
gap: var(--spacing-sm);
background: var(--bg-color-secondary);
padding: 0 var(--spacing-md);
border-radius: var(--radius-full);
border: 1px solid var(--border-color);
min-width: 320px;
height: 40px;
transition: all var(--transition-base);
}
.search-box:focus-within {
border-color: var(--color-primary);
box-shadow: 0 0 0 3px color-mix(in srgb, var(--color-primary), transparent 85%);
}
.search-box input {
border: none;
background: transparent;
outline: none;
font-size: var(--font-size-md);
color: var(--text-color);
width: 100%;
height: 100%;
}
.table-container {
flex: 1;
overflow: auto;
background: var(--bg-color-secondary);
border-radius: var(--radius-lg);
box-shadow: var(--shadow-sm);
border: 1px solid var(--border-color);
}
table {
width: 100%;
border-collapse: collapse;
white-space: nowrap;
}
th,
td {
text-align: left;
padding: var(--spacing-md);
border-bottom: 1px solid var(--border-color);
}
th {
background-color: var(--bg-color-tertiary);
font-weight: 600;
position: sticky;
top: 0;
z-index: 10;
}
tr:last-child td {
border-bottom: none;
}
tr:hover td {
background-color: var(--bg-color-tertiary);
}
.status-badge {
display: inline-block;
padding: 2px 8px;
border-radius: var(--radius-full);
font-size: var(--font-size-xs);
font-weight: 500;
}
.status-active {
background-color: color-mix(in srgb, var(--color-success), transparent 85%);
color: var(--color-success);
}
.status-inactive {
background-color: color-mix(in srgb, var(--text-color-disabled), transparent 85%);
color: var(--text-color-secondary);
}
/* Tab Styles */
.tab, .tab-active {
padding: 12px 20px;
cursor: pointer;
border-bottom: 2px solid transparent;
transition: all var(--transition-base);
display: flex;
align-items: center;
gap: 8px;
font-weight: 500;
}
.tab {
color: var(--text-color-secondary);
}
.tab:hover {
color: var(--text-color);
}
.tab-active {
color: var(--color-primary);
border-bottom-color: var(--color-primary);
}
/* Permission List */
.permission-list, .user-list, .available-permission-list, .available-user-list {
max-height: 400px;
overflow-y: auto;
display: flex;
flex-direction: column;
gap: 8px;
}
.permission-item, .user-item, .available-permission-item, .available-user-item {
display: flex;
align-items: center;
gap: 12px;
padding: 12px;
background: var(--bg-color-tertiary);
border-radius: var(--radius-md);
transition: background var(--transition-base);
}
.permission-item:hover, .user-item:hover {
background: var(--border-color);
}
.permission-info, .user-info {
flex: 1;
min-width: 0;
}
.permission-id, .user-name {
font-weight: 500;
color: var(--text-color);
}
.permission-scope, .user-username {
font-size: var(--font-size-sm);
color: var(--text-color-secondary);
}
.permission-level {
flex-shrink: 0;
}
.level-badge {
display: inline-block;
padding: 2px 8px;
border-radius: var(--radius-full);
font-size: var(--font-size-xs);
font-weight: 500;
}
.level-1 { background: color-mix(in srgb, var(--color-info), transparent 85%); color: var(--color-info); }
.level-2 { background: color-mix(in srgb, var(--color-success), transparent 85%); color: var(--color-success); }
.level-4 { background: color-mix(in srgb, var(--color-warning), transparent 85%); color: var(--color-warning); }
.level-6 { background: color-mix(in srgb, var(--color-warning), transparent 70%); color: var(--color-warning); }
.level-7 { background: color-mix(in srgb, var(--color-danger), transparent 85%); color: var(--color-danger); }
/* User Avatar */
.user-avatar, .user-avatar-sm {
border-radius: var(--radius-full);
object-fit: cover;
}
.user-avatar {
width: 40px;
height: 40px;
}
.user-avatar-sm {
width: 32px;
height: 32px;
}
/* Empty State */
.empty-state {
display: flex;
flex-direction: column;
align-items: center;
justify-content: center;
padding: 40px;
color: var(--text-color-secondary);
gap: 12px;
}
.empty-state p {
margin: 0;
}
/* Checkbox styling */
input[type="checkbox"] {
width: 18px;
height: 18px;
cursor: pointer;
accent-color: var(--color-primary);
}
</style>
</head>
<body>
<div class="page-header">
<div class="page-title">
<i class="fas fa-user-tag" style="color: var(--color-primary);"></i>
{{ $t('nav.roles') }}
</div>
<div style="display: flex; gap: var(--spacing-md); align-items: center;">
<div class="search-box">
<i class="fas fa-search" style="color: var(--text-color-tertiary);"></i>
<input type="text" v:value="searchQuery" :placeholder="$t('role.search_placeholder')">
</div>
<v-btn color="primary" :click="openCreateModal">
<i class="fas fa-plus"></i>
{{ $t('common.create') }}
</v-btn>
</div>
</div>
<div class="table-container">
<table>
<thead>
<tr>
<th>ID</th>
<th>{{ $t('role.code') }}</th>
<th>{{ $t('role.name') }}</th>
<th>{{ $t('role.description') }}</th>
<th>System</th>
<th>Status</th>
<th>{{ $t('common.actions') }}</th>
</tr>
</thead>
<tbody>
<tr v-for="r in filteredRoles">
<td>{{ r.id }}</td>
<td>{{ r.code }}</td>
<td>{{ r.name }}</td>
<td>{{ r.description }}</td>
<td>
<span class="status-badge" :class="r.is_system ? 'status-active' : 'status-inactive'">
{{ r.is_system ? 'Yes' : 'No' }}
</span>
</td>
<td>
<span class="status-badge" :class="r.status === 1 ? 'status-active' : 'status-inactive'">
{{ r.status === 1 ? 'Active' : 'Inactive' }}
</span>
</td>
<td>
<div style="display: flex; gap: 8px;">
<v-btn icon size="sm" variant="outline" :click="() => openDetailModal(r)" :title="$t('common.detail')">
<i class="fas fa-eye"></i>
</v-btn>
<v-btn icon size="sm" variant="outline" :click="() => openEditModal(r)" :title="$t('common.edit')" :disabled="r.is_system">
<i class="fas fa-edit"></i>
</v-btn>
<v-btn icon size="sm" color="danger" variant="outline" :click="() => deleteRole(r)" :title="$t('common.delete')" :disabled="r.is_system">
<i class="fas fa-trash"></i>
</v-btn>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- Create/Edit Dialog -->
<v-dialog v:visible="showModal"
:title="isEdit ? $t('role.edit') : $t('role.create')">
<form @submit.prevent="saveRole" style="display: grid; gap: 16px;">
<v-input :label="$t('role.code')" required v:value="formData.code" :disabled="isEdit" placeholder="e.g. admin"></v-input>
<v-input :label="$t('role.name')" required v:value="formData.name" placeholder="e.g. Administrator"></v-input>
<v-input :label="$t('role.description')" v:value="formData.description" placeholder="Description..."></v-input>
</form>
<div vslot="footer">
<v-btn variant="outline" :click="closeModal">{{ $t('common.cancel') }}</v-btn>
<v-btn color="primary" :click="saveRole">
{{ isEdit ? $t('common.save') : $t('common.create') }}
</v-btn>
</div>
</v-dialog>
<!-- Role Detail Dialog - Permissions & Users -->
<v-dialog v:visible="showDetailModal" width="800px"
:title="$t('role.detail') + ' - ' + (currentRole?.name || '')">
<div style="display: flex; flex-direction: column; gap: 20px;">
<!-- Tabs -->
<div style="display: flex; gap: 8px; border-bottom: 1px solid var(--border-color);">
<div :class="detailTab === 'permissions' ? 'tab-active' : 'tab'" @click="switchTab('permissions')">
<i class="fas fa-shield-alt"></i> {{ $t('role.permissions') }}
</div>
<div :class="detailTab === 'users' ? 'tab-active' : 'tab'" @click="switchTab('users')">
<i class="fas fa-users"></i> {{ $t('role.users') }}
</div>
</div>
<!-- Permissions Tab -->
<div v-if="detailTab === 'permissions'" style="display: flex; flex-direction: column; gap: 16px;">
<div style="display: flex; justify-content: space-between; align-items: center;">
<span style="color: var(--text-color-secondary); font-size: var(--font-size-sm);">
{{ $t('role.permissions_desc') }}
</span>
<v-btn size="sm" color="primary" :click="openPermissionSelector" :disabled="currentRole?.is_system">
<i class="fas fa-plus"></i> {{ $t('role.add_permission') }}
</v-btn>
</div>
<div class="permission-list">
<div v-for="p in rolePermissions" class="permission-item">
<div class="permission-info">
<div class="permission-id">{{ p.permission_id }}</div>
<div class="permission-scope">{{ p.scope }}</div>
</div>
<div class="permission-level">
<span :class="'level-badge level-' + p.level">{{ formatLevel(p.level) }}</span>
</div>
<v-btn v-if="!currentRole?.is_system" icon size="xs" color="danger" variant="ghost"
:click="() => removePermission(p)" :title="$t('common.remove')">
<i class="fas fa-times"></i>
</v-btn>
</div>
<div v-if="rolePermissions.length === 0" class="empty-state">
<i class="fas fa-shield-alt" style="font-size: 48px; color: var(--text-color-disabled);"></i>
<p>{{ $t('role.no_permissions') }}</p>
</div>
</div>
</div>
<!-- Users Tab -->
<div v-if="detailTab === 'users'" style="display: flex; flex-direction: column; gap: 16px;">
<div style="display: flex; justify-content: space-between; align-items: center;">
<div class="search-box" style="min-width: 240px;">
<i class="fas fa-search" style="color: var(--text-color-tertiary);"></i>
<input type="text" v:value="userSearchQuery" :placeholder="$t('role.search_users')">
</div>
<v-btn size="sm" color="primary" :click="openUserSelector" :disabled="currentRole?.is_system">
<i class="fas fa-plus"></i> {{ $t('role.add_user') }}
</v-btn>
</div>
<div class="user-list">
<div v-for="u in filteredRoleUsers" class="user-item">
<img :src="u.avatar || '/assets/default-avatar.png'" class="user-avatar" alt="">
<div class="user-info">
<div class="user-name">{{ u.nickname || u.username }}</div>
<div class="user-username">@{{ u.username }}</div>
</div>
<v-btn v-if="!currentRole?.is_system" icon size="xs" color="danger" variant="ghost"
:click="() => removeUserFromRole(u)" :title="$t('common.remove')">
<i class="fas fa-times"></i>
</v-btn>
</div>
<div v-if="filteredRoleUsers.length === 0" class="empty-state">
<i class="fas fa-users" style="font-size: 48px; color: var(--text-color-disabled);"></i>
<p>{{ $t('role.no_users') }}</p>
</div>
</div>
</div>
</div>
<div vslot="footer">
<v-btn variant="outline" :click="closeDetailModal">{{ $t('common.close') }}</v-btn>
</div>
</v-dialog>
<!-- Permission Selector Dialog -->
<v-dialog v:visible="showPermissionSelector" width="600px"
:title="$t('role.select_permissions')">
<div style="display: flex; flex-direction: column; gap: 16px;">
<div class="search-box">
<i class="fas fa-search" style="color: var(--text-color-tertiary);"></i>
<input type="text" v:value="permissionSearchQuery" :placeholder="$t('role.search_permissions')">
</div>
<div class="available-permission-list">
<div v-for="p in filteredAvailablePermissions" class="available-permission-item">
<input type="checkbox" :checked="isPermissionSelected(p.id)" @change="togglePermission(p.id)">
<div class="permission-info">
<div class="permission-id">{{ p.permission_id }}</div>
<div class="permission-scope">{{ p.scope }}</div>
</div>
</div>
<div v-if="filteredAvailablePermissions.length === 0" class="empty-state">
<p>{{ $t('role.no_available_permissions') }}</p>
</div>
</div>
</div>
<div vslot="footer">
<v-btn variant="outline" :click="closePermissionSelector">{{ $t('common.cancel') }}</v-btn>
<v-btn color="primary" :click="saveRolePermissions">{{ $t('common.save') }}</v-btn>
</div>
</v-dialog>
<!-- User Selector Dialog -->
<v-dialog v:visible="showUserSelector" width="600px"
:title="$t('role.select_users')">
<div style="display: flex; flex-direction: column; gap: 16px;">
<div class="search-box">
<i class="fas fa-search" style="color: var(--text-color-tertiary);"></i>
<input type="text" v:value="availableUserSearchQuery" @input="searchAvailableUsers"
:placeholder="$t('role.search_users_placeholder')">
</div>
<div class="available-user-list">
<div v-for="u in availableUsers" class="available-user-item">
<input type="checkbox" :checked="isUserSelected(u.id)" @change="toggleUser(u.id)">
<img :src="u.avatar || '/assets/default-avatar.png'" class="user-avatar-sm" alt="">
<div class="user-info">
<div class="user-name">{{ u.nickname || u.username }}</div>
<div class="user-username">@{{ u.username }}</div>
</div>
</div>
<div v-if="availableUsers.length === 0" class="empty-state">
<p>{{ $t('role.no_available_users') }}</p>
</div>
</div>
</div>
<div vslot="footer">
<v-btn variant="outline" :click="closeUserSelector">{{ $t('common.cancel') }}</v-btn>
<v-btn color="primary" :click="saveRoleUsers">{{ $t('common.save') }}</v-btn>
</div>
</v-dialog>
</body>
<script setup>
// Basic data
roles = [];
searchQuery = "";
showModal = false;
isEdit = false;
formData = {
id: null,
code: "",
name: "",
description: ""
};
// Detail modal data
showDetailModal = false;
detailTab = "permissions";
currentRole = null;
// Permissions data
rolePermissions = [];
showPermissionSelector = false;
permissionSearchQuery = "";
availablePermissions = [];
selectedPermissionIds = [];
// Users data
roleUsers = [];
userSearchQuery = "";
showUserSelector = false;
availableUserSearchQuery = "";
availableUsers = [];
selectedUserIds = [];
loadRoles = async () => {
try {
const res = await $axios.get('/api/roles');
roles = res.items || [];
} catch (e) {
$message.error(e.message);
}
};
filteredRoles = () => {
if (!searchQuery) return roles;
const query = searchQuery.toLowerCase();
return roles.filter(r =>
r.name.toLowerCase().includes(query) ||
r.code.toLowerCase().includes(query) ||
(r.description && r.description.toLowerCase().includes(query))
);
};
openCreateModal = () => {
isEdit = false;
formData = { id: null, code: "", name: "", description: "" };
showModal = true;
};
openEditModal = (r) => {
isEdit = true;
formData = { ...r };
showModal = true;
};
closeModal = () => {
showModal = false;
};
saveRole = async () => {
if (!formData.code || !formData.name) {
$message.error($t('org.required_fields'));
return;
}
try {
if (isEdit) {
const payload = {
name: formData.name,
description: formData.description
};
await $axios.patch(`/api/roles/${formData.id}`, payload);
$message.success($t('org.updated'));
} else {
await $axios.post('/api/roles', formData);
$message.success($t('org.created'));
}
closeModal();
loadRoles();
} catch (e) {
$message.error(e.message);
}
};
deleteRole = async (r) => {
try {
await $message.confirm($t('role.delete_confirm'));
await $axios.delete(`/api/roles/${r.id}`);
$message.success($t('org.deleted'));
loadRoles();
} catch (e) {
// Cancelled
}
};
// Detail modal functions
openDetailModal = (r) => {
currentRole = r;
detailTab = "permissions";
showDetailModal = true;
loadRolePermissions();
loadRoleUsers();
};
closeDetailModal = () => {
showDetailModal = false;
currentRole = null;
rolePermissions = [];
roleUsers = [];
};
switchTab = (tab) => {
detailTab = tab;
};
// Permission functions
loadRolePermissions = async () => {
if (!currentRole) return;
try {
const res = await $axios.get(`/api/roles/${currentRole.id}/permissions`);
rolePermissions = res || [];
} catch (e) {
$message.error(e.message);
}
};
openPermissionSelector = async () => {
selectedPermissionIds = rolePermissions.map(p => p.id);
showPermissionSelector = true;
await loadAvailablePermissions();
};
closePermissionSelector = () => {
showPermissionSelector = false;
permissionSearchQuery = "";
selectedPermissionIds = [];
};
loadAvailablePermissions = async () => {
// Get all permissions from user's own permissions or a dedicated endpoint
// For now, we'll use a mock approach - in real implementation,
// you might need a /api/permissions endpoint to list all available permissions
try {
// This is a placeholder - adjust based on your actual API
const res = await $axios.get('/api/auth/me');
if (res.permissions) {
// Extract unique permission IDs
const uniquePerms = [];
const seen = new Set();
res.permissions.forEach(p => {
if (!seen.has(p.permission_id)) {
seen.add(p.permission_id);
uniquePerms.push({
id: p.permission_id,
permission_id: p.permission_id,
scope: p.scope,
level: p.level
});
}
});
availablePermissions = uniquePerms;
}
} catch (e) {
// Fallback: use current role permissions as base
availablePermissions = rolePermissions.map(p => ({
id: p.id,
permission_id: p.permission_id,
scope: p.scope,
level: p.level
}));
}
};
filteredAvailablePermissions = () => {
if (!permissionSearchQuery) return availablePermissions;
const query = permissionSearchQuery.toLowerCase();
return availablePermissions.filter(p =>
p.permission_id.toLowerCase().includes(query) ||
p.scope.toLowerCase().includes(query)
);
};
isPermissionSelected = (id) => {
return selectedPermissionIds.includes(id);
};
togglePermission = (id) => {
const idx = selectedPermissionIds.indexOf(id);
if (idx > -1) {
selectedPermissionIds.splice(idx, 1);
} else {
selectedPermissionIds.push(id);
}
// Trigger reactivity
selectedPermissionIds = [...selectedPermissionIds];
};
saveRolePermissions = async () => {
if (!currentRole) return;
try {
await $axios.put(`/api/roles/${currentRole.id}/permissions`, {
permission_ids: selectedPermissionIds
});
$message.success($t('role.permissions_updated'));
closePermissionSelector();
loadRolePermissions();
} catch (e) {
$message.error(e.message);
}
};
removePermission = async (p) => {
if (!currentRole || currentRole.is_system) return;
try {
await $message.confirm($t('role.remove_permission_confirm'));
const newPermissions = rolePermissions
.filter(rp => rp.id !== p.id)
.map(rp => rp.id);
await $axios.put(`/api/roles/${currentRole.id}/permissions`, {
permission_ids: newPermissions
});
$message.success($t('role.permission_removed'));
loadRolePermissions();
} catch (e) {
// Cancelled or error
}
};
formatLevel = (level) => {
const levels = {
1: $t('permission.level.create') || 'Create',
2: $t('permission.level.read') || 'Read',
4: $t('permission.level.write') || 'Write',
6: $t('permission.level.rw') || 'Read+Write',
7: $t('permission.level.admin') || 'Admin'
};
return levels[level] || `Level ${level}`;
};
// User functions
loadRoleUsers = async () => {
if (!currentRole) return;
try {
// Get users who have this role
// We need to fetch users and filter by role
const res = await $axios.get('/api/users', { params: { page_size: 1000 } });
const allUsers = res.items || [];
// For each user, check if they have this role
const usersWithRole = [];
for (const user of allUsers) {
try {
const userRoles = await $axios.get(`/api/users/${user.id}/roles`);
if (userRoles.some(ur => ur.id === currentRole.id)) {
usersWithRole.push(user);
}
} catch (e) {
// Skip users we can't check
}
}
roleUsers = usersWithRole;
} catch (e) {
$message.error(e.message);
}
};
filteredRoleUsers = () => {
if (!userSearchQuery) return roleUsers;
const query = userSearchQuery.toLowerCase();
return roleUsers.filter(u =>
(u.nickname || u.username).toLowerCase().includes(query) ||
u.username.toLowerCase().includes(query)
);
};
openUserSelector = async () => {
selectedUserIds = roleUsers.map(u => u.id);
showUserSelector = true;
await searchAvailableUsers();
};
closeUserSelector = () => {
showUserSelector = false;
availableUserSearchQuery = "";
availableUsers = [];
selectedUserIds = [];
};
searchAvailableUsers = async () => {
try {
const res = await $axios.get('/api/auth/users', {
params: {
keyword: availableUserSearchQuery,
limit: 50
}
});
availableUsers = res.items || [];
} catch (e) {
$message.error(e.message);
}
};
isUserSelected = (id) => {
return selectedUserIds.includes(id);
};
toggleUser = (id) => {
const idx = selectedUserIds.indexOf(id);
if (idx > -1) {
selectedUserIds.splice(idx, 1);
} else {
selectedUserIds.push(id);
}
// Trigger reactivity
selectedUserIds = [...selectedUserIds];
};
saveRoleUsers = async () => {
if (!currentRole) return;
try {
// Update each user's roles
const currentUserIds = roleUsers.map(u => u.id);
// Users to add
const toAdd = selectedUserIds.filter(id => !currentUserIds.includes(id));
// Users to remove
const toRemove = currentUserIds.filter(id => !selectedUserIds.includes(id));
for (const userId of toAdd) {
const userRoles = await $axios.get(`/api/users/${userId}/roles`);
const roleIds = [...userRoles.map(r => r.id), currentRole.id];
await $axios.put(`/api/users/${userId}/roles`, { role_ids: roleIds });
}
for (const userId of toRemove) {
const userRoles = await $axios.get(`/api/users/${userId}/roles`);
const roleIds = userRoles.filter(r => r.id !== currentRole.id).map(r => r.id);
await $axios.put(`/api/users/${userId}/roles`, { role_ids: roleIds });
}
$message.success($t('role.users_updated'));
closeUserSelector();
loadRoleUsers();
} catch (e) {
$message.error(e.message);
}
};
removeUserFromRole = async (u) => {
if (!currentRole || currentRole.is_system) return;
try {
await $message.confirm($t('role.remove_user_confirm'));
const userRoles = await $axios.get(`/api/users/${u.id}/roles`);
const roleIds = userRoles.filter(r => r.id !== currentRole.id).map(r => r.id);
await $axios.put(`/api/users/${u.id}/roles`, { role_ids: roleIds });
$message.success($t('role.user_removed'));
loadRoleUsers();
} catch (e) {
// Cancelled or error
}
};
</script>
<script>
$data.loadRoles();
</script>
</html>