Files
Django/merchant_ops/views_templates.py
T

137 lines
5.5 KiB
Python

"""子客服专用:派单模板 / 链接(独立路径;读模板用 merchant_id,写模板需 template_manage)。"""
from rest_framework import status
from rest_framework.permissions import IsAuthenticated
from rest_framework.response import Response
from rest_framework.views import APIView
from config.views import (
ShangjiaTianjiaMobanView,
ShangjiaGengxinMobanView,
ShangjiaShanchuMobanView,
)
from merchant_ops.helpers import proxy_as_merchant_user
from merchant_ops.services.authz import (
StaffAuthError, require_active_staff_member, member_has_perm, staff_order_read_perm,
)
from merchant_ops.services.template_query import list_merchant_templates
from merchant_ops.services.link import staff_generate_link, staff_list_links
from merchant_ops.services.audit import audit_staff
from merchant_ops.views_manage import _err
def _require_staff(request):
return require_active_staff_member(request.user)
def _can_read_templates(member):
"""派单/看单/管模板任一权限即可读模板列表。"""
return staff_order_read_perm(member) or member_has_perm(member, 'template_manage')
class StaffTemplateListView(APIView):
"""读商家全部模板(UserID=merchant_id),有 order_dispatch 即可。"""
permission_classes = [IsAuthenticated]
def post(self, request):
try:
member = _require_staff(request)
if not _can_read_templates(member):
raise StaffAuthError(403, '无权限查看模板')
payload, http_status = list_merchant_templates(member.merchant_id, request.data)
return Response(payload, status=http_status)
except Exception as e:
return _err(e)
class StaffTemplateCreateView(APIView):
permission_classes = [IsAuthenticated]
def post(self, request):
try:
member = _require_staff(request)
if not member_has_perm(member, 'template_manage'):
raise StaffAuthError(403, '无权限添加模板')
resp = proxy_as_merchant_user(request, member, ShangjiaTianjiaMobanView, 'template_manage')
if resp.status_code == 200 and resp.data.get('code') in (0, 200):
audit_staff(member, 'TEMPLATE_CREATE', request,
resource_id=(resp.data.get('data') or {}).get('id', ''))
return resp
except Exception as e:
return _err(e)
class StaffTemplateUpdateView(APIView):
permission_classes = [IsAuthenticated]
def post(self, request):
try:
member = _require_staff(request)
if not member_has_perm(member, 'template_manage'):
raise StaffAuthError(403, '无权限修改模板')
moban_id = request.data.get('mobanId') or request.data.get('id') or ''
resp = proxy_as_merchant_user(request, member, ShangjiaGengxinMobanView, 'template_manage')
if resp.status_code == 200 and resp.data.get('code') in (0, 200):
audit_staff(member, 'TEMPLATE_UPDATE', request, resource_id=str(moban_id))
return resp
except Exception as e:
return _err(e)
class StaffTemplateDeleteView(APIView):
permission_classes = [IsAuthenticated]
def post(self, request):
try:
member = _require_staff(request)
if not member_has_perm(member, 'template_manage'):
raise StaffAuthError(403, '无权限删除模板')
moban_id = request.data.get('mobanId') or request.data.get('id') or ''
resp = proxy_as_merchant_user(request, member, ShangjiaShanchuMobanView, 'template_manage')
if resp.status_code == 200 and resp.data.get('code') in (0, 200):
audit_staff(member, 'TEMPLATE_DELETE', request, resource_id=str(moban_id))
return resp
except Exception as e:
return _err(e)
class StaffLinkGenerateView(APIView):
"""POST /yonghu/merchant-staff/link/generate — 子客服独立实现,标记操作人身份。"""
permission_classes = [IsAuthenticated]
def post(self, request):
try:
member = _require_staff(request)
if not member_has_perm(member, 'order_dispatch'):
raise StaffAuthError(403, '无派单/生成链接权限')
ok, payload = staff_generate_link(member, request.user, request.data)
if ok:
audit_staff(
member, 'LINK_GENERATE', request,
resource_id=payload.get('data', {}).get('dingdanId'),
amount=payload.get('data', {}).get('jiage'),
remark=f"{member.role.role_name}:{member.display_name or member.staff_user_id}",
)
code = payload.get('code', 500)
return Response(payload, status=status.HTTP_200_OK if code in (0, 200) else status.HTTP_400_BAD_REQUEST)
except Exception as e:
return _err(e)
class StaffLinkListView(APIView):
"""POST /yonghu/merchant-staff/link/list — 子客服链接列表,含操作人身份。"""
permission_classes = [IsAuthenticated]
def post(self, request):
try:
member = _require_staff(request)
if not member_has_perm(member, 'order_dispatch'):
raise StaffAuthError(403, '无权限')
ok, payload = staff_list_links(member, request.data)
code = payload.get('code', 500)
return Response(payload, status=status.HTTP_200_OK if code in (0, 200) else status.HTTP_400_BAD_REQUEST)
except Exception as e:
return _err(e)