sysmgr-nest/src/roles/roles.service.ts

import { Injectable } from '@nestjs/common';
import { BaseCrudService } from '../common/base-crud.service.js';
import { PrismaService } from '../prisma/prisma.service.js';
import { RedisService } from '../common/redis/redis.service.js';
import { getRequestContext } from '../common/context/request-context.js';
import { AssignResourcesDto, CreateRoleDto, UpdateRoleDto } from './dto.js';

@Injectable()
export class RolesService extends BaseCrudService {
  constructor(
    prisma: PrismaService,
    private readonly redis: RedisService,
  ) {
    super(prisma, 'role');
  }

  createRole(dto: CreateRoleDto) {
    return this.create({ ...dto });
  }

  updateRole(id: string, dto: UpdateRoleDto) {
    return this.update(id, { ...dto });
  }

  async assignedResources(roleCode: string) {
    const ctx = getRequestContext()!;
    const rows = await this.prisma.client.roleResource.findMany({
      where: { tenantCode: ctx.tenantCode, roleCode },
      select: { resourceCode: true },
    });
    return rows.map((r) => r.resourceCode);
  }

  async assignResources(roleCode: string, dto: AssignResourcesDto) {
    const ctx = getRequestContext()!;
    await this.prisma.client.roleResource.deleteMany({ where: { tenantCode: ctx.tenantCode, roleCode } });
    if (dto.resourceCodes.length > 0) {
      await this.prisma.client.roleResource.createMany({
        data: dto.resourceCodes.map((resourceCode) => ({ tenantCode: ctx.tenantCode, roleCode, resourceCode })),
      });
    }
    // 授权变更：删除该租户全部用户权限缓存，下一次请求守卫重新聚合并回填
    await this.redis.delByPrefix(`perm:${ctx.tenantCode}:`);
    return null;
  }
}