81 lines
3.6 KiB
C#
81 lines
3.6 KiB
C#
using F9WebAiTest.Application.Common.Exceptions;
|
|
using F9WebAiTest.Application.Interfaces.SnowflakeID;
|
|
using F9WebAiTest.Application.Interfaces.UOW;
|
|
using F9WebAiTest.Domain.Common;
|
|
using F9WebAiTest.Domain.Entities.SYS.RBAC;
|
|
using F9WebAiTest.Domain.Enums.SYS.RBAC;
|
|
using NotificationTypeEntity = F9WebAiTest.Domain.Entities.Notice.NotificationType;
|
|
using F9WebAiTest.Domain.Interfaces.SYS.RBAC.Permissions;
|
|
using F9WebAiTest.Domain.Interfaces.SYS.RBAC.Roles;
|
|
using MediatR;
|
|
|
|
namespace F9WebAiTest.Application.CQRS.SYS.RBAC.Roles.Commands;
|
|
|
|
/// <summary>命令定义</summary>
|
|
public record RolePermission_AssignCommand(long RoleId, Permission_Type_Enum PermissionType, Resource_Type_Enum ResourceType, string ResourceIdentity, long ResourceId) : IRequest<long>;
|
|
|
|
/// <summary>命令处理器</summary>
|
|
public class AssignRolePermissionCommandHandler(
|
|
IRoleWriteRepository roleRepository,
|
|
IUnitOfWork_F9 unitOfWork,
|
|
IRolePermissionWriteRepository rolePermissionRep,
|
|
IPermissionWriteRepository permissionWriteRepository,
|
|
IRepository<NotificationTypeEntity> notificationTypeRepository,
|
|
ISnowflakeIdGenerator snowflakeIdGenerator,
|
|
IPublisher eventBus) : IRequestHandler<RolePermission_AssignCommand, long>
|
|
{
|
|
public async Task<long> Handle(RolePermission_AssignCommand command, CancellationToken cancellationToken)
|
|
{
|
|
if (command.RoleId <= 0) throw new F9OperationException("角色ID不能为空");
|
|
if (command.ResourceId <= 0) throw new F9OperationException("资源ID不能为空");
|
|
if (string.IsNullOrWhiteSpace(command.ResourceIdentity)) throw new F9OperationException("资源标识不能为空");
|
|
|
|
Role role = null;
|
|
long rolePermissionId = 0;
|
|
|
|
var ok = await unitOfWork.ExecuteWithUow(async () =>
|
|
{
|
|
// 查或创建权限
|
|
var dbPermission = await permissionWriteRepository.GetByIdAsync(command.PermissionType, command.ResourceType, command.ResourceId);
|
|
if (dbPermission == null)
|
|
{
|
|
dbPermission = new Permission(
|
|
snowflakeIdGenerator.CreateId(),
|
|
command.PermissionType,
|
|
command.ResourceType,
|
|
command.ResourceIdentity,
|
|
command.ResourceId);
|
|
|
|
// 消息订阅权限：Code 对齐消息类型的 RequiredPermission（业务权限码），保证订阅校验一致
|
|
if (command.ResourceType == Resource_Type_Enum.消息订阅)
|
|
{
|
|
var type = await notificationTypeRepository.GetByIdAsync(command.ResourceId);
|
|
if (type != null && !string.IsNullOrEmpty(type.RequiredPermission))
|
|
dbPermission.SetCode(type.RequiredPermission);
|
|
}
|
|
|
|
await permissionWriteRepository.AddRangeAsync(new[] { dbPermission });
|
|
}
|
|
|
|
// 绑定角色权限
|
|
var rolePermission = new RolePermission(snowflakeIdGenerator.CreateId(), command.RoleId, dbPermission.Id);
|
|
var result = await rolePermissionRep.AssignAsync(rolePermission);
|
|
|
|
role = await roleRepository.GetByIdAsync(command.RoleId);
|
|
role.AddPermission(dbPermission.Id, command.ResourceType);
|
|
|
|
rolePermissionId = rolePermission.Id;
|
|
return result;
|
|
});
|
|
|
|
if (!ok) throw new F9OperationException("权限", "绑定");
|
|
|
|
// 发布领域事件
|
|
foreach (var domainEvent in role.DomainEvents)
|
|
await eventBus.Publish(domainEvent, cancellationToken);
|
|
role.ClearDomainEvents();
|
|
|
|
return rolePermissionId;
|
|
}
|
|
}
|