mirror of
https://github.com/fastapiadmin/FastapiAdmin.git
synced 2026-09-23 21:18:09 +00:00
zhangtao
c0d32a7eec
feat: 新增系统租户和用户初始化数据 style: 优化代码注释和格式 fix: 修复数据权限检查逻辑中的created_id字段判断 perf: 移除不必要的模型关系以提升性能 docs: 更新初始化数据的描述信息 chore: 清理废弃文件和冗余代码
143 lines
5.7 KiB
Python
143 lines
5.7 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
from typing import TYPE_CHECKING
|
|
from datetime import datetime
|
|
from sqlalchemy import Boolean, String, Integer, DateTime, ForeignKey
|
|
from sqlalchemy.orm import relationship, Mapped, mapped_column
|
|
|
|
from app.core.base_model import MappedBase, ModelMixin, UserMixin, TenantMixin, CustomerMixin
|
|
|
|
if TYPE_CHECKING:
|
|
from app.api.v1.module_system.dept.model import DeptModel
|
|
from app.api.v1.module_system.position.model import PositionModel
|
|
from app.api.v1.module_system.role.model import RoleModel
|
|
|
|
|
|
class UserRolesModel(MappedBase):
|
|
"""
|
|
用户角色关联表
|
|
|
|
定义用户与角色的多对多关系
|
|
"""
|
|
__tablename__: str = "system_user_roles"
|
|
__table_args__: dict[str, str] = ({'comment': '用户角色关联表'})
|
|
|
|
user_id: Mapped[int] = mapped_column(
|
|
Integer,
|
|
ForeignKey("system_user.id", ondelete="CASCADE", onupdate="CASCADE"),
|
|
primary_key=True,
|
|
comment="用户ID"
|
|
)
|
|
role_id: Mapped[int] = mapped_column(
|
|
Integer,
|
|
ForeignKey("system_role.id", ondelete="CASCADE", onupdate="CASCADE"),
|
|
primary_key=True,
|
|
comment="角色ID"
|
|
)
|
|
|
|
|
|
class UserPositionsModel(MappedBase):
|
|
"""
|
|
用户岗位关联表
|
|
|
|
定义用户与岗位的多对多关系
|
|
"""
|
|
__tablename__: str = "system_user_positions"
|
|
__table_args__: dict[str, str] = ({'comment': '用户岗位关联表'})
|
|
|
|
user_id: Mapped[int] = mapped_column(
|
|
Integer,
|
|
ForeignKey("system_user.id", ondelete="CASCADE", onupdate="CASCADE"),
|
|
primary_key=True,
|
|
comment="用户ID"
|
|
)
|
|
position_id: Mapped[int] = mapped_column(
|
|
Integer,
|
|
ForeignKey("system_position.id", ondelete="CASCADE", onupdate="CASCADE"),
|
|
primary_key=True,
|
|
comment="岗位ID"
|
|
)
|
|
|
|
|
|
class UserModel(ModelMixin, UserMixin, TenantMixin, CustomerMixin):
|
|
"""
|
|
用户模型
|
|
|
|
用户类型与数据隔离关系：
|
|
====================
|
|
- 系统用户(user_type=0):
|
|
* tenant_id=1(系统租户)
|
|
* customer_id=None
|
|
* 用于平台管理,可管理所有租户
|
|
|
|
- 租户管理员(user_type=1):
|
|
* tenant_id>1
|
|
* customer_id=None
|
|
* 可管理本租户内所有数据(包括所有客户)
|
|
|
|
- 租户普通用户(user_type=1):
|
|
* tenant_id>1
|
|
* customer_id=None
|
|
* 数据权限由role.data_scope控制
|
|
|
|
- 客户用户(user_type=2):
|
|
* tenant_id>1
|
|
* customer_id>1
|
|
* 只能访问其所属客户的数据
|
|
|
|
数据权限实现机制：
|
|
==================
|
|
通过角色的data_scope字段和用户-部门-角色关系实现:
|
|
- 1(仅本人): WHERE created_id = current_user.id
|
|
- 2(本部门): WHERE user.dept_id = current_user.dept_id
|
|
- 3(本部门及以下): WHERE dept.tree_path LIKE 'current_user.dept.tree_path%'
|
|
- 4(全部数据): WHERE tenant_id = current_user.tenant_id (AND customer_id IS NULL OR customer_id = current_user.customer_id)
|
|
- 5(自定义): WHERE dept_id IN (SELECT dept_id FROM role_depts WHERE role_id IN current_user.role_ids)
|
|
|
|
客户用户额外限制:
|
|
- 无论data_scope如何,都必须加上: AND customer_id = current_user.customer_id
|
|
"""
|
|
__tablename__: str = "system_user"
|
|
__table_args__: dict[str, str] = ({'comment': '用户表'})
|
|
__loader_options__: list[str] = ["dept", "roles", "positions", "created_by", "updated_by", "tenant", "customer"]
|
|
|
|
username: Mapped[str] = mapped_column(String(32), nullable=False, unique=True, comment="用户名/登录账号")
|
|
password: Mapped[str] = mapped_column(String(255), nullable=False, comment="密码哈希")
|
|
name: Mapped[str] = mapped_column(String(32), nullable=False, comment="昵称")
|
|
mobile: Mapped[str | None] = mapped_column(String(11), nullable=True, unique=True, comment="手机号")
|
|
email: Mapped[str | None] = mapped_column(String(64), nullable=True, unique=True, comment="邮箱")
|
|
gender: Mapped[str | None] = mapped_column(String(1), default='2', nullable=True, comment="性别(0:男 1:女 2:未知)")
|
|
avatar: Mapped[str | None] = mapped_column(String(255), nullable=True, comment="头像URL地址")
|
|
is_superuser: Mapped[bool] = mapped_column(Boolean, default=False, nullable=False, comment="是否超管")
|
|
last_login: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True, comment="最后登录时间")
|
|
|
|
gitee_login: Mapped[str | None] = mapped_column(String(32), nullable=True, comment="Gitee登录")
|
|
github_login: Mapped[str | None] = mapped_column(String(32), nullable=True, comment="Github登录")
|
|
wx_login: Mapped[str | None] = mapped_column(String(32), nullable=True, comment="微信登录")
|
|
qq_login: Mapped[str | None] = mapped_column(String(32), nullable=True, comment="QQ登录")
|
|
user_type: Mapped[int] = mapped_column(Integer, nullable=False, default=1, comment="用户类型(0:系统用户 1:租户用户 2:客户用户)")
|
|
salt: Mapped[str | None] = mapped_column(String(255), nullable=True, comment="加密盐")
|
|
|
|
dept_id: Mapped[int | None] = mapped_column(
|
|
Integer,
|
|
ForeignKey('system_dept.id', ondelete="SET NULL", onupdate="CASCADE"),
|
|
nullable=True,
|
|
index=True,
|
|
comment="部门ID"
|
|
)
|
|
dept: Mapped["DeptModel | None"] = relationship(
|
|
back_populates="users",
|
|
foreign_keys=[dept_id],
|
|
lazy="selectin"
|
|
)
|
|
roles: Mapped[list["RoleModel"]] = relationship(
|
|
secondary="system_user_roles",
|
|
back_populates="users",
|
|
lazy="selectin"
|
|
)
|
|
positions: Mapped[list["PositionModel"]] = relationship(
|
|
secondary="system_user_positions",
|
|
back_populates="users",
|
|
lazy="selectin"
|
|
)
|