sysmgr-nest/src/orgs/orgs.controller.ts
liuyun 127707ffde feat(rbac): 批量删除 + 数据权限自定义闭环 + 若干修复
- users/orgs/resources 新增 POST /batch-delete(事务 + 失败汇总 + 用户踢下线)
- 角色数据权限自定义:GET/PUT /roles/:roleCode/orgs(roleOrg 写入路径)
- assignResources 校验 resourceCodes 存在性;角色 :id 语义改 :roleCode
- createTenant 补 createdBy;登录锁定双层阈值(IP+用户名 / 用户名全局)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-10-11 17:42:05 +08:00

52 lines
1.4 KiB
TypeScript

import { Body, Controller, Delete, Get, Param, Patch, Post } from '@nestjs/common';
import { Permissions } from '../common/permissions.js';
import { AuditLog, RequirePermissions } from '../auth/decorators.js';
import { CreateOrgDto, UpdateOrgDto } from './dto.js';
import { BatchDeleteDto } from '../common/page.dto.js';
import { OrgsService } from './orgs.service.js';
@Controller('orgs')
export class OrgsController {
constructor(private readonly service: OrgsService) {}
@Get()
@RequirePermissions(Permissions.org.list)
list() {
return this.service.listOrgs();
}
@Get(':id')
@RequirePermissions(Permissions.org.list)
get(@Param('id') id: string) {
return this.service.findById(id);
}
@Post()
@RequirePermissions(Permissions.org.create)
@AuditLog('org', 'create')
create(@Body() dto: CreateOrgDto) {
return this.service.createOrg(dto);
}
@Patch(':id')
@RequirePermissions(Permissions.org.update)
@AuditLog('org', 'update')
update(@Param('id') id: string, @Body() dto: UpdateOrgDto) {
return this.service.updateOrg(id, dto);
}
@Delete(':id')
@RequirePermissions(Permissions.org.delete)
@AuditLog('org', 'delete')
remove(@Param('id') id: string) {
return this.service.softRemove(id);
}
@Post('batch-delete')
@RequirePermissions(Permissions.org.delete)
@AuditLog('org', 'batch-delete')
batchDelete(@Body() dto: BatchDeleteDto) {
return this.service.batchDelete(dto.ids);
}
}