"""客服后台菜单可见性(侧栏展示,不影响各页面原有权限校验)。""" from backend.utils import _AllPermissions, verify_kefu_permission from jituan.models import KefuMenuPage from jituan.services.admin_context import ( build_admin_club_context, can_manage_admin_assignments, is_system_super_admin, ) def _is_super_permissions(permissions): return isinstance(permissions, _AllPermissions) def _has_super_perm(permissions): """俱乐部超级管理权限 000001(角色/后台用户等),不含集团级配置。""" if _is_super_permissions(permissions): return True return '000001' in permissions def _page_visible(page, permissions, user): # 集团级页面:数据范围、俱乐部密钥等,俱乐部 000001 不可见 if page.require_group_manage: return can_manage_admin_assignments(user) # 俱乐部超管页面:角色管理、后台用户等 if page.require_super: return _has_super_perm(permissions) or is_system_super_admin(user) # 000001 拥有全部业务功能菜单(订单/用户/财务等),但不绕过上面的集团级限制 if _is_super_permissions(permissions): return True codes = page.perm_codes or [] if not codes: return False return any(code in permissions for code in codes) def build_menu_access_payload(request, username=None): """ 根据用户 gvsdsdk 权限计算可见菜单 page_id 列表。 返回 (payload, error_response);error_response 非空时表示校验失败。 """ phone = (username or getattr(request.user, 'Phone', '') or '').strip() kefu, permissions = verify_kefu_permission(request, phone) if kefu is None: return None, permissions pages = list(KefuMenuPage.query.all().order_by('sort_order', 'page_id')) need_seed = not pages or not any(p.page_id == 'miniapp.assets' for p in pages) if need_seed: try: from django.core.management import call_command call_command('seed_kefu_menu') pages = list(KefuMenuPage.query.all().order_by('sort_order', 'page_id')) except Exception: if not pages: pages = [] visible_ids = [] for page in pages: if not page.path: continue if _page_visible(page, permissions, request.user): visible_ids.append(page.page_id) for page in pages: if page.path: continue children = [p for p in pages if p.parent_id == page.page_id and p.path] if any(child.page_id in visible_ids for child in children): visible_ids.append(page.page_id) club_ctx = build_admin_club_context(request.user) path_by_id = {p.page_id: p.path for p in pages if p.path} visible_paths = [path_by_id[pid] for pid in visible_ids if pid in path_by_id] return { 'visible_page_ids': sorted(set(visible_ids)), 'visible_paths': visible_paths, 'can_switch_club': bool(club_ctx.get('can_switch_club')), 'is_group_admin': bool(club_ctx.get('is_group_admin')), 'menu_ready': bool(pages), }, None