137 lines
5.5 KiB
Python
137 lines
5.5 KiB
Python
"""子客服专用：派单模板 / 链接（独立路径；读模板用 merchant_id，写模板需 template_manage）。"""
|
||
from rest_framework import status
|
||
from rest_framework.permissions import IsAuthenticated
|
||
from rest_framework.response import Response
|
||
from rest_framework.views import APIView
|
||
|
||
from config.views import (
|
||
ShangjiaTianjiaMobanView,
|
||
ShangjiaGengxinMobanView,
|
||
ShangjiaShanchuMobanView,
|
||
)
|
||
from merchant_ops.helpers import proxy_as_merchant_user
|
||
from merchant_ops.services.authz import (
|
||
StaffAuthError, require_active_staff_member, member_has_perm, staff_order_read_perm,
|
||
)
|
||
from merchant_ops.services.template_query import list_merchant_templates
|
||
from merchant_ops.services.link import staff_generate_link, staff_list_links
|
||
from merchant_ops.services.audit import audit_staff
|
||
from merchant_ops.views_manage import _err
|
||
|
||
|
||
def _require_staff(request):
|
||
return require_active_staff_member(request.user)
|
||
|
||
|
||
def _can_read_templates(member):
|
||
"""派单/看单/管模板任一权限即可读模板列表。"""
|
||
return staff_order_read_perm(member) or member_has_perm(member, 'template_manage')
|
||
|
||
|
||
class StaffTemplateListView(APIView):
|
||
"""读商家全部模板（UserID=merchant_id），有 order_dispatch 即可。"""
|
||
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def post(self, request):
|
||
try:
|
||
member = _require_staff(request)
|
||
if not _can_read_templates(member):
|
||
raise StaffAuthError(403, '无权限查看模板')
|
||
payload, http_status = list_merchant_templates(member.merchant_id, request.data)
|
||
return Response(payload, status=http_status)
|
||
except Exception as e:
|
||
return _err(e)
|
||
|
||
|
||
class StaffTemplateCreateView(APIView):
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def post(self, request):
|
||
try:
|
||
member = _require_staff(request)
|
||
if not member_has_perm(member, 'template_manage'):
|
||
raise StaffAuthError(403, '无权限添加模板')
|
||
resp = proxy_as_merchant_user(request, member, ShangjiaTianjiaMobanView, 'template_manage')
|
||
if resp.status_code == 200 and resp.data.get('code') in (0, 200):
|
||
audit_staff(member, 'TEMPLATE_CREATE', request,
|
||
resource_id=(resp.data.get('data') or {}).get('id', ''))
|
||
return resp
|
||
except Exception as e:
|
||
return _err(e)
|
||
|
||
|
||
class StaffTemplateUpdateView(APIView):
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def post(self, request):
|
||
try:
|
||
member = _require_staff(request)
|
||
if not member_has_perm(member, 'template_manage'):
|
||
raise StaffAuthError(403, '无权限修改模板')
|
||
moban_id = request.data.get('mobanId') or request.data.get('id') or ''
|
||
resp = proxy_as_merchant_user(request, member, ShangjiaGengxinMobanView, 'template_manage')
|
||
if resp.status_code == 200 and resp.data.get('code') in (0, 200):
|
||
audit_staff(member, 'TEMPLATE_UPDATE', request, resource_id=str(moban_id))
|
||
return resp
|
||
except Exception as e:
|
||
return _err(e)
|
||
|
||
|
||
class StaffTemplateDeleteView(APIView):
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def post(self, request):
|
||
try:
|
||
member = _require_staff(request)
|
||
if not member_has_perm(member, 'template_manage'):
|
||
raise StaffAuthError(403, '无权限删除模板')
|
||
moban_id = request.data.get('mobanId') or request.data.get('id') or ''
|
||
resp = proxy_as_merchant_user(request, member, ShangjiaShanchuMobanView, 'template_manage')
|
||
if resp.status_code == 200 and resp.data.get('code') in (0, 200):
|
||
audit_staff(member, 'TEMPLATE_DELETE', request, resource_id=str(moban_id))
|
||
return resp
|
||
except Exception as e:
|
||
return _err(e)
|
||
|
||
|
||
class StaffLinkGenerateView(APIView):
|
||
"""POST /yonghu/merchant-staff/link/generate — 子客服独立实现，标记操作人身份。"""
|
||
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def post(self, request):
|
||
try:
|
||
member = _require_staff(request)
|
||
if not member_has_perm(member, 'order_dispatch'):
|
||
raise StaffAuthError(403, '无派单/生成链接权限')
|
||
ok, payload = staff_generate_link(member, request.user, request.data)
|
||
if ok:
|
||
audit_staff(
|
||
member, 'LINK_GENERATE', request,
|
||
resource_id=payload.get('data', {}).get('dingdanId'),
|
||
amount=payload.get('data', {}).get('jiage'),
|
||
remark=f"{member.role.role_name}:{member.display_name or member.staff_user_id}",
|
||
)
|
||
code = payload.get('code', 500)
|
||
return Response(payload, status=status.HTTP_200_OK if code in (0, 200) else status.HTTP_400_BAD_REQUEST)
|
||
except Exception as e:
|
||
return _err(e)
|
||
|
||
|
||
class StaffLinkListView(APIView):
|
||
"""POST /yonghu/merchant-staff/link/list — 子客服链接列表，含操作人身份。"""
|
||
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def post(self, request):
|
||
try:
|
||
member = _require_staff(request)
|
||
if not member_has_perm(member, 'order_dispatch'):
|
||
raise StaffAuthError(403, '无权限')
|
||
ok, payload = staff_list_links(member, request.data)
|
||
code = payload.get('code', 500)
|
||
return Response(payload, status=status.HTTP_200_OK if code in (0, 200) else status.HTTP_400_BAD_REQUEST)
|
||
except Exception as e:
|
||
return _err(e)
|