使用者角色與權限 CURD 部分

app/Http/Controllers/PermissionController.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Spatie\Permission\Models\Permission;
+
+class PermissionController extends Controller
+{
+    use ApiTrait;
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function index()
+    {
+        $permissions = Permission::get(['name', 'description']);
+
+        return $this->returnSuccess('Success', $permissions);
+    }
+}

app/Http/Controllers/RoleController.php

@@ -0,0 +1,89 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\RoleRequest;
+use Spatie\Permission\Models\Role;
+
+class RoleController extends Controller
+{
+    use ApiTrait;
+    use CheckPermissionTrait;
+
+    /**
+     * RoleController constructor.
+     */
+    public function __construct()
+    {
+        $this->checkPermissionApiResource();
+    }
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function index()
+    {
+        $roles = Role::all();
+
+        return $this->returnSuccess('Success', $roles);
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     *
+     * @param RoleRequest $request
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function store(RoleRequest $request)
+    {
+        $role = Role::create($request->only('name'));
+        $role->syncPermissions($request->input('permissions'));
+
+        return $this->returnSuccess('Store Success', $role);
+    }
+
+    /**
+     * Display the specified resource.
+     *
+     * @param  int $id
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function show($id)
+    {
+        $role = Role::with('permissions')->find($id);
+
+        return $this->returnSuccess('Success', $role);
+    }
+
+    /**
+     * Update the specified resource in storage.
+     *
+     * @param RoleRequest $request
+     * @param             $id
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function update(RoleRequest $request, $id)
+    {
+        $role = Role::findOrFail($id);
+        $role->update($request->only('name'));
+        $role->syncPermissions($request->input('permissions'));
+
+        return $this->returnSuccess('Update Success', $role);
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     *
+     * @param $id
+     * @return \Illuminate\Http\JsonResponse
+     */
+    public function destroy($id)
+    {
+        $role = Role::findOrFail($id);
+        $role->delete();
+
+        return $this->returnSuccess('Success', $role);
+    }
+}

app/Http/Controllers/UserController.php

@@ -29,7 +29,8 @@ public function index(Request $request)
         $order_field = $request->input('orderby_field', 'id');
         $order_method = $request->input('order_method', 'desc');
         $limit = $request->input('limit', 15);
-        $user = User::orderBy($order_field, $order_method)
+        $user = User::with('roles')
+            ->orderBy($order_field, $order_method)
             ->paginate($limit);
 
         return $this->returnSuccess('Success.', $user);
@@ -42,31 +43,36 @@ public function index(Request $request)
     public function store(UserRequest $request)
     {
         $user = User::create($request->all());
+        $user->syncRoles($request->input('roles'));
 
         return $this->returnSuccess('Store Success.', $user);
     }
 
     /**
-     * @param User $user
+     * @param $id
      * @return \Illuminate\Http\JsonResponse
      */
-    public function show(User $user)
+    public function show($id)
     {
+        $user = User::with('roles')->findOrFail($id);
+
         return $this->returnSuccess('Show Success.', $user);
     }
 
     /**
      * @param UserRequest $request
-     * @param User        $user
+     * @param             $id
      * @return \Illuminate\Http\JsonResponse
      */
-    public function update(UserRequest $request, User $user)
+    public function update(UserRequest $request, $id)
     {
+        $user = User::findOrFail($id);
         $user->update([
             'name'  => $request->name,
             'email' => $request->email,
             'telegram_id' => $request->telegram_id,
         ]);
+        $user->syncRoles($request->input('roles'));
 
         return $this->returnSuccess('Show Success.', $user);
     }

app/Http/Requests/RoleRequest.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Http\Requests;
+
+class RoleRequest extends BaseRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     *
+     * @return bool
+     */
+    public function authorize()
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array
+     */
+    public function rules()
+    {
+        if ($this->getMethod() == 'PUT') {
+            $id = explode('/', $this->path())[2];
+
+            return [
+                'name'        => 'required|string|unique:roles,name,' . $id,
+                'permissions' => 'present|array',
+            ];
+        }
+
+        return [
+            'name'        => 'required|string|unique:roles',
+            'permissions' => 'present|array',
+        ];
+    }
+
+    /**
+     * Get custom attributes for validator errors.
+     *
+     * @return array
+     */
+    public function attributes()
+    {
+        return [
+            'name'        => '名稱',
+            'permissions' => '權限',
+        ];
+    }
+}

app/Http/Requests/UserRequest.php

@@ -38,13 +38,15 @@ public function rules()
                 'email'                 => 'required|email|unique:users,email',
                 'password_confirmation' => 'required',
                 'password'              => 'required|string|min:8|confirmed',
+                'roles'                 => 'present|array',
             ];
         } else {
             $id = $path[2];
 
             return [
                 'name'  => 'required|string',
                 'email' => 'required|email|unique:users,email,' . $id,
+                'roles' => 'present|array',
             ];
         }
     }

config/database.php

@@ -40,6 +40,12 @@
             'foreign_key_constraints' => env('DB_FOREIGN_KEYS', true),
         ],
 
+        'testing' => [
+            'driver'   => 'sqlite',
+            'database' => ':memory:',
+            'prefix'   => '',
+        ],
+
         'mysql' => [
             'driver' => 'mysql',
             'host' => env('DB_HOST', '127.0.0.1'),

database/factories/RoleFactory.php

@@ -0,0 +1,10 @@
+<?php
+
+use Faker\Generator as Faker;
+use Spatie\Permission\Models\Role;
+
+$factory->define(Role::class, function (Faker $faker) {
+    return [
+        'name' => $faker->name,
+    ];
+});

database/migrations/2017_10_25_170616_add_type_to__loan_table.php

@@ -13,7 +13,7 @@ class AddTypeToLoanTable extends Migration
     public function up()
     {
         Schema::table('loans', function ($table) {
-            $table->unsignedInteger('type')->comment = '類型(0:Equipment,1:RaiseEquipment)';
+            $table->unsignedInteger('type')->default(0)->comment = '類型(0:Equipment,1:RaiseEquipment)';
         });
     }
 

database/seeds/RolesAndPermissionsSeeder.php

@@ -41,6 +41,8 @@ public function run()
             ['name' => 'Barcode:Read', 'description' => '檢視所有 Barcode'],
             ['name' => 'ImportExport:Read', 'description' => '匯出資料'],
             ['name' => 'ImportExport:Write', 'description' => '匯入資料'],
+            ['name' => 'Role:Read', 'description' => '檢視角色'],
+            ['name' => 'Role:Write', 'description' => '管理角色'],
         ];
 
         foreach ($permissions as $permission) {

phpunit.xml

@@ -29,5 +29,6 @@
         <env name="MAIL_DRIVER" value="array"/>
         <env name="QUEUE_CONNECTION" value="sync"/>
         <env name="SESSION_DRIVER" value="array"/>
+        <env name="DB_CONNECTION" value="testing"/>
     </php>
 </phpunit>

resources/js/app.js

@@ -33,7 +33,7 @@ axios.interceptors.response.use(
     response => response,
     (error) => {
         if (error.response.status === 403) {
-            router.push('403')
+            router.push('/403');
         }
     }
 );

resources/js/include/Sidebar.vue

@@ -76,14 +76,24 @@
                         icon: 'fas fa-id-card',
                         href: '/student-verify'
                     }, {
-                        title: '設定',
-                        icon: 'fas fa-cogs',
+                        title: '使用者管理',
+                        icon: 'fas fa-users-cog',
                         child: [
                             {
                                 href: '/user',
-                                title: '帳號管理',
+                                title: '使用者管理',
                                 icon: 'fas fa-user-secret'
                             }, {
+                                href: '/user/role',
+                                title: '角色管理',
+                                icon: 'fas fa-id-badge'
+                            }
+                        ]
+                    }, {
+                        title: '設定',
+                        icon: 'fas fa-cogs',
+                        child: [
+                            {
                                 href: '/tool/print',
                                 title: '條碼列印',
                                 icon: 'fas fa-barcode'

resources/js/pages/telegram_bot/index.vue

@@ -306,6 +306,9 @@
             this.getAllMessageInterval = setInterval(function () {
                 self.getAllMessage();
             }, 1000 * 10);
+        },
+        destroyed() {
+            clearInterval(this.getAllMessageInterval);
         }
     }
 </script>