feat(role): 新增平台角色管理功能增强

- 权限表增加 available_for_role_types 字段,支持标记权限可用角色类型
- 权限列表和权限树接口支持按 available_for_role_type 过滤
- 新增角色状态切换接口 PUT /api/admin/roles/:id/status
- 角色分配权限时验证权限的可用角色类型
- 完善数据库迁移脚本和单元测试
- 补充数据库迁移相关开发规范文档
This commit is contained in:
2026-01-14 12:15:57 +08:00
parent 9c399df6bc
commit 5556b1028c
22 changed files with 1474 additions and 87 deletions

View File

@@ -0,0 +1,182 @@
package unit
import (
"testing"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
"github.com/break/junhong_cmp_fiber/internal/model"
"github.com/break/junhong_cmp_fiber/internal/service/role"
"github.com/break/junhong_cmp_fiber/internal/store/postgres"
"github.com/break/junhong_cmp_fiber/pkg/constants"
"github.com/break/junhong_cmp_fiber/tests/testutils"
)
func TestRoleService_AssignPermissions_ValidateAvailableForRoleTypes(t *testing.T) {
db, redisClient := testutils.SetupTestDB(t)
defer testutils.TeardownTestDB(t, db, redisClient)
roleStore := postgres.NewRoleStore(db)
permStore := postgres.NewPermissionStore(db)
rolePermStore := postgres.NewRolePermissionStore(db)
service := role.New(roleStore, permStore, rolePermStore)
ctx := createContextWithUserID(1)
platformRole := &model.Role{
RoleName: "平台管理员",
RoleDesc: "平台角色",
RoleType: 1,
Status: constants.StatusEnabled,
BaseModel: model.BaseModel{
Creator: 1,
Updater: 1,
},
}
err := roleStore.Create(ctx, platformRole)
require.NoError(t, err)
customerRole := &model.Role{
RoleName: "客户管理员",
RoleDesc: "客户角色",
RoleType: 2,
Status: constants.StatusEnabled,
BaseModel: model.BaseModel{
Creator: 1,
Updater: 1,
},
}
err = roleStore.Create(ctx, customerRole)
require.NoError(t, err)
platformPerm := &model.Permission{
PermName: "平台权限",
PermCode: "platform:manage",
PermType: 1,
Platform: "all",
AvailableForRoleTypes: "1",
Status: constants.StatusEnabled,
BaseModel: model.BaseModel{
Creator: 1,
Updater: 1,
},
}
err = permStore.Create(ctx, platformPerm)
require.NoError(t, err)
customerPerm := &model.Permission{
PermName: "客户权限",
PermCode: "customer:manage",
PermType: 1,
Platform: "all",
AvailableForRoleTypes: "2",
Status: constants.StatusEnabled,
BaseModel: model.BaseModel{
Creator: 1,
Updater: 1,
},
}
err = permStore.Create(ctx, customerPerm)
require.NoError(t, err)
commonPerm := &model.Permission{
PermName: "通用权限",
PermCode: "common:view",
PermType: 1,
Platform: "all",
AvailableForRoleTypes: "1,2",
Status: constants.StatusEnabled,
BaseModel: model.BaseModel{
Creator: 1,
Updater: 1,
},
}
err = permStore.Create(ctx, commonPerm)
require.NoError(t, err)
t.Run("为平台角色分配平台权限-成功", func(t *testing.T) {
rps, err := service.AssignPermissions(ctx, platformRole.ID, []uint{platformPerm.ID})
require.NoError(t, err)
assert.NotEmpty(t, rps)
})
t.Run("为平台角色分配通用权限-成功", func(t *testing.T) {
rps, err := service.AssignPermissions(ctx, platformRole.ID, []uint{commonPerm.ID})
require.NoError(t, err)
assert.NotEmpty(t, rps)
})
t.Run("为平台角色分配客户专用权限-失败", func(t *testing.T) {
_, err := service.AssignPermissions(ctx, platformRole.ID, []uint{customerPerm.ID})
require.Error(t, err)
assert.Contains(t, err.Error(), "不适用于此角色类型")
})
t.Run("为客户角色分配客户权限-成功", func(t *testing.T) {
rps, err := service.AssignPermissions(ctx, customerRole.ID, []uint{customerPerm.ID})
require.NoError(t, err)
assert.NotEmpty(t, rps)
})
t.Run("为客户角色分配平台专用权限-失败", func(t *testing.T) {
_, err := service.AssignPermissions(ctx, customerRole.ID, []uint{platformPerm.ID})
require.Error(t, err)
assert.Contains(t, err.Error(), "不适用于此角色类型")
})
t.Run("批量分配权限时部分不匹配-失败", func(t *testing.T) {
_, err := service.AssignPermissions(ctx, platformRole.ID, []uint{platformPerm.ID, customerPerm.ID})
require.Error(t, err)
assert.Contains(t, err.Error(), "不适用于此角色类型")
})
}
func TestRoleService_UpdateStatus(t *testing.T) {
db, redisClient := testutils.SetupTestDB(t)
defer testutils.TeardownTestDB(t, db, redisClient)
roleStore := postgres.NewRoleStore(db)
permStore := postgres.NewPermissionStore(db)
rolePermStore := postgres.NewRolePermissionStore(db)
service := role.New(roleStore, permStore, rolePermStore)
ctx := createContextWithUserID(1)
testRole := &model.Role{
RoleName: "测试角色",
RoleDesc: "用于测试状态切换",
RoleType: 1,
Status: constants.StatusEnabled,
BaseModel: model.BaseModel{
Creator: 1,
Updater: 1,
},
}
err := roleStore.Create(ctx, testRole)
require.NoError(t, err)
t.Run("禁用角色", func(t *testing.T) {
err := service.UpdateStatus(ctx, testRole.ID, constants.StatusDisabled)
require.NoError(t, err)
role, err := roleStore.GetByID(ctx, testRole.ID)
require.NoError(t, err)
assert.Equal(t, constants.StatusDisabled, role.Status)
})
t.Run("启用角色", func(t *testing.T) {
err := service.UpdateStatus(ctx, testRole.ID, constants.StatusEnabled)
require.NoError(t, err)
role, err := roleStore.GetByID(ctx, testRole.ID)
require.NoError(t, err)
assert.Equal(t, constants.StatusEnabled, role.Status)
})
t.Run("更新不存在的角色-失败", func(t *testing.T) {
err := service.UpdateStatus(ctx, 99999, constants.StatusEnabled)
require.Error(t, err)
assert.Contains(t, err.Error(), "角色不存在")
})
}