controlPanel/web
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(auth): enforce admin permissions in UI

Browse Source 
Add can()/router meta, HomePage module filtering, Admins permission
matrix, and hide write actions when the user lacks *:write.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Mahdi
2026-08-10 15:30:26 +03:30
co-authored by Cursor
parent 8d0b65f087
commit df83af90e8
15 changed files with 590 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pages/AdminsPage.vue
+201 -9
View File
@@ -11,6 +11,11 @@ import {
} from '@ant-design/icons-vue'
import api from '@/api/http'
import { useAuthStore } from '@/stores/auth'
import {
PERMISSION_MODULES,
normalizePermissionList,
type PermissionCode,
} from '@/auth/permissions'
type Admin = {
id: string
@@ -20,6 +25,8 @@ type Admin = {
name?: string
isActive: boolean
role: string
permissions?: string[]
isFullAccess?: boolean
createdAt: string
}
@@ -31,20 +38,90 @@ const modalOpen = ref(false)
const editingId = ref<string | null>(null)
const rows = ref<Admin[]>([])
const canWrite = computed(() => auth.can('admins:write'))
const canGrantFullAccess = computed(() => auth.isFullAccess)
const form = reactive({
firstName: '',
lastName: '',
mobile: '',
password: '',
isActive: true,
fullAccess: false,
permissions: [] as PermissionCode[],
})
const modalTitle = computed(() => (editingId.value ? 'ویرایش مدیر' : 'افزودن مدیر'))
const permissionSet = computed(() => new Set(form.permissions))
function fullName(item: Admin) {
return item.name || `${item.firstName} ${item.lastName}`.trim()
}
function canAssignCode(code: PermissionCode) {
if (canGrantFullAccess.value) return true
return auth.can(code)
}
function isChecked(code?: PermissionCode) {
if (!code) return false
return permissionSet.value.has(code)
}
function setPermission(code: PermissionCode | undefined, checked: boolean) {
if (!code) return
if (!canAssignCode(code)) return
const next = new Set(form.permissions)
if (checked) {
next.add(code)
if (code.endsWith(':write')) {
const read = code.replace(/:write$/, ':read') as PermissionCode
if (canAssignCode(read)) next.add(read)
}
} else {
next.delete(code)
if (code.endsWith(':read')) {
const write = code.replace(/:read$/, ':write') as PermissionCode
next.delete(write)
}
}
form.permissions = normalizePermissionList([...next])
}
function onReadChange(mod: (typeof PERMISSION_MODULES)[number], checked: boolean) {
setPermission(mod.read, checked)
}
function onWriteChange(mod: (typeof PERMISSION_MODULES)[number], checked: boolean) {
setPermission(mod.write, checked)
}
function permissionSummary(item: Admin) {
if (item.role === 'super_admin' || item.isFullAccess) return 'دسترسی کامل'
const list = normalizePermissionList(item.permissions || [])
if (!list.length) return 'بدون مجوز'
const labels: string[] = []
for (const mod of PERMISSION_MODULES) {
const hasWrite = mod.write && list.includes(mod.write)
const hasRead = mod.read && list.includes(mod.read)
if (hasWrite) labels.push(`${mod.label}: نوشتن`)
else if (hasRead) labels.push(`${mod.label}: خواندن`)
else if (mod.write && list.includes(mod.write)) labels.push(mod.label)
}
return labels.join(' · ') || `${list.length} مجوز`
}
function resetForm() {
form.firstName = ''
form.lastName = ''
form.mobile = ''
form.password = ''
form.isActive = true
form.fullAccess = false
form.permissions = []
}
async function load() {
loading.value = true
try {
@@ -58,26 +135,29 @@ async function load() {
}
function openCreate() {
if (!canWrite.value) return
editingId.value = null
form.firstName = ''
form.lastName = ''
form.mobile = ''
form.password = ''
form.isActive = true
resetForm()
modalOpen.value = true
}
function openEdit(item: Admin) {
if (!canWrite.value) return
editingId.value = item.id
form.firstName = item.firstName
form.lastName = item.lastName
form.mobile = item.mobile
form.password = ''
form.isActive = item.isActive
form.fullAccess = item.role === 'super_admin' || Boolean(item.isFullAccess)
form.permissions = form.fullAccess
? []
: normalizePermissionList(item.permissions || [])
modalOpen.value = true
}
async function save() {
if (!canWrite.value) return
if (!form.firstName.trim() || !form.lastName.trim() || !form.mobile.trim()) {
message.warning('نام، نام خانوادگی و موبایل لازم است')
return
@@ -91,6 +171,20 @@ async function save() {
return
}
const editingWasFull =
Boolean(editingId.value) &&
rows.value.some(
(r) =>
r.id === editingId.value &&
(r.role === 'super_admin' || Boolean(r.isFullAccess)),
)
const role =
form.fullAccess && (canGrantFullAccess.value || editingWasFull)
? 'super_admin'
: 'admin'
const permissions = role === 'super_admin' ? [] : normalizePermissionList(form.permissions)
saving.value = true
try {
if (editingId.value) {
@@ -101,6 +195,11 @@ async function save() {
isActive: form.isActive,
}
if (form.password) payload.password = form.password
// Limited editors must not re-assign role/permissions on a full-access user
if (!(editingWasFull && !canGrantFullAccess.value)) {
payload.role = role
payload.permissions = permissions
}
await api.patch(`/admins/${editingId.value}`, payload)
message.success('مدیر به‌روزرسانی شد')
} else {
@@ -109,6 +208,11 @@ async function save() {
lastName: form.lastName.trim(),
mobile: form.mobile.trim(),
password: form.password,
role: canGrantFullAccess.value && form.fullAccess ? 'super_admin' : 'admin',
permissions:
canGrantFullAccess.value && form.fullAccess
? []
: normalizePermissionList(form.permissions),
})
message.success('مدیر اضافه شد')
}
@@ -123,6 +227,7 @@ async function save() {
}
function confirmDelete(item: Admin) {
if (!canWrite.value) return
if (item.id === auth.user?.id) {
message.warning('نمی‌توانید خودتان را حذف کنید')
return
@@ -147,6 +252,7 @@ function confirmDelete(item: Admin) {
}
async function testSms(item: Admin) {
if (!canWrite.value) return
try {
await api.post(`/admins/${item.id}/test-sms`, {})
message.success(`پیامک تست به ${item.mobile} ارسال شد`)
@@ -168,10 +274,10 @@ onMounted(load)
<div style="flex: 1">
<h1 class="page-title">مدیران</h1>
<p class="page-sub">
مدیریت کاربران سوپرادمین — ورود با موبایل و رمز. هشدارها به همین شماره‌ها پیامک می‌شود.
مدیریت کاربران سوپرادمین — ورود با موبایل و رمز. سطح دسترسی ماژول‌محور برای مدیران جدید.
</p>
</div>
<a-button type="primary" @click="openCreate">
<a-button v-if="canWrite" type="primary" @click="openCreate">
<PlusOutlined /> افزودن مدیر
</a-button>
</div>
@@ -186,10 +292,13 @@ onMounted(load)
<a-tag :color="item.isActive ? 'success' : 'default'">
{{ item.isActive ? 'فعال' : 'غیرفعال' }}
</a-tag>
<a-tag>{{ item.role }}</a-tag>
<a-tag :color="item.role === 'super_admin' ? 'gold' : 'blue'">
{{ item.role === 'super_admin' ? 'دسترسی کامل' : 'مدیر' }}
</a-tag>
</div>
<p class="perm-summary">{{ permissionSummary(item) }}</p>
</div>
<div class="admin-actions">
<div v-if="canWrite" class="admin-actions">
<a-button @click="testSms(item)">
<MessageOutlined /> تست SMS
</a-button>
@@ -211,6 +320,7 @@ onMounted(load)
:confirm-loading="saving"
ok-text="ذخیره"
cancel-text="انصراف"
width="720px"
@ok="save"
>
<a-form layout="vertical" style="margin-top: 12px">
@@ -229,6 +339,40 @@ onMounted(load)
<a-form-item v-if="editingId" label="فعال">
<a-switch v-model:checked="form.isActive" />
</a-form-item>
<a-form-item v-if="canGrantFullAccess" label="دسترسی کامل (super)">
<a-switch v-model:checked="form.fullAccess" />
<div class="field-hint">با روشن بودن، همه ماژول‌ها بدون محدودیت در دسترس است.</div>
</a-form-item>
<div v-if="!form.fullAccess" class="perm-matrix">
<div class="perm-matrix-head">
<span>ماژول</span>
<span>خواندن</span>
<span>نوشتن</span>
</div>
<div v-for="mod in PERMISSION_MODULES" :key="mod.key" class="perm-matrix-row">
<span class="mod-label">{{ mod.label }}</span>
<span>
<a-checkbox
v-if="mod.read"
:checked="isChecked(mod.read)"
:disabled="!canAssignCode(mod.read)"
@change="(e: any) => onReadChange(mod, e.target.checked)"
/>
<span v-else class="dash">—</span>
</span>
<span>
<a-checkbox
v-if="mod.write"
:checked="isChecked(mod.write)"
:disabled="!canAssignCode(mod.write)"
@change="(e: any) => onWriteChange(mod, e.target.checked)"
/>
<span v-else class="dash">—</span>
</span>
</div>
</div>
</a-form>
</a-modal>
</div>
@@ -263,9 +407,57 @@ onMounted(load)
font-size: 0.92rem;
}
.perm-summary {
margin: 8px 0 0;
color: #64748b;
font-size: 0.85rem;
line-height: 1.5;
}
.admin-actions {
display: flex;
flex-wrap: wrap;
gap: 8px;
}
.field-hint {
margin-top: 6px;
color: #64748b;
font-size: 0.82rem;
}
.perm-matrix {
margin-top: 8px;
border: 1px solid #e8eef5;
border-radius: 14px;
overflow: hidden;
}
.perm-matrix-head,
.perm-matrix-row {
display: grid;
grid-template-columns: 1fr 72px 72px;
gap: 8px;
align-items: center;
padding: 10px 14px;
}
.perm-matrix-head {
background: #f8fafc;
font-weight: 600;
font-size: 0.85rem;
color: #475569;
}
.perm-matrix-row + .perm-matrix-row {
border-top: 1px solid #eef2f7;
}
.mod-label {
font-size: 0.92rem;
}
.dash {
color: #94a3b8;
}
</style>
src/pages/HamkarUiConfigPage.vue
+12 -1
View File
@@ -16,9 +16,12 @@ import {
type HamkarUiConfig,
} from '@/config/defaultHamkarUiConfig'
import { resolveHamkarEffectiveTheme } from '@/config/hamkarEffectiveTheme'
import { useAuthStore } from '@/stores/auth'
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const canWrite = computed(() => auth.can('hamkar:write'))
const loading = ref(true)
const saving = ref(false)
const resetting = ref(false)
@@ -420,6 +423,7 @@ onMounted(load)
<div class="sticky-actions">
<a-button
v-if="canWrite"
size="large"
block
:loading="resetting"
@@ -428,7 +432,14 @@ onMounted(load)
>
بازگشت به ظاهر اولیه
</a-button>
<a-button type="primary" size="large" block :loading="saving" @click="save">
<a-button
v-if="canWrite"
type="primary"
size="large"
block
:loading="saving"
@click="save"
>
ذخیره ظاهر همکار
</a-button>
</div>
src/pages/HomePage.vue
+91 -46
View File
@@ -12,6 +12,7 @@ import {
} from '@ant-design/icons-vue'
import { message } from 'ant-design-vue'
import api from '@/api/http'
import { useAuthStore } from '@/stores/auth'
type BalanceLevel = 'healthy' | 'warning' | 'critical' | 'unknown'
@@ -56,6 +57,7 @@ type ExpiringPlugin = {
type ExpiringSupport = ExpiringPlugin
const router = useRouter()
const auth = useAuthStore()
const loading = ref(true)
const tenants = ref<Tenant[]>([])
const smsTenants = ref<Tenant[]>([])
@@ -67,52 +69,95 @@ const hamkarCount = computed(() => tenants.value.filter((t) => t.product === 'ha
const khanegiCount = computed(() => tenants.value.filter((t) => t.product === 'khanegi').length)
const lowestSmsTenants = computed(() => smsTenants.value.slice(0, 5))
const modules = computed(() => [
{
key: 'admins',
className: 'admins',
title: 'مدیران',
desc: 'افزودن و ویرایش مدیران؛ ورود با موبایل و دریافت هشدار SMS',
meta: 'دسترسی',
icon: UserOutlined,
to: { name: 'admins' as const },
},
{
key: 'hamkar',
className: 'hamkar',
title: 'همکار',
desc: 'مدیریت نسخه‌های فروشی پروژه همکار',
meta: `${hamkarCount.value} نسخه`,
icon: TeamOutlined,
to: { name: 'product-versions' as const, params: { product: 'hamkar' } },
},
{
key: 'khanegi',
className: 'khanegi',
title: 'خانگی',
desc: 'مدیریت نسخه‌های فروشی و ظاهر اپ خانگی',
meta: `${khanegiCount.value} نسخه`,
icon: HomeOutlined,
to: { name: 'product-versions' as const, params: { product: 'khanegi' } },
},
])
const canSms = computed(() => auth.can('sms:read'))
const canServers = computed(() => auth.can('servers:read'))
const canPlugins = computed(() => auth.can('plugins:read'))
const canSupport = computed(() => auth.can('support:read'))
const canAdmins = computed(() => auth.can('admins:read'))
const canHamkar = computed(() => auth.can('hamkar:read'))
const canKhanegi = computed(() => auth.can('khanegi:read'))
const modules = computed(() =>
[
{
key: 'admins',
className: 'admins',
title: 'مدیران',
desc: 'افزودن و ویرایش مدیران؛ تعیین سطح دسترسی',
meta: 'دسترسی',
icon: UserOutlined,
to: { name: 'admins' as const },
visible: canAdmins.value,
},
{
key: 'hamkar',
className: 'hamkar',
title: 'همکار',
desc: 'مدیریت نسخه‌های فروشی پروژه همکار',
meta: `${hamkarCount.value} نسخه`,
icon: TeamOutlined,
to: { name: 'product-versions' as const, params: { product: 'hamkar' } },
visible: canHamkar.value,
},
{
key: 'khanegi',
className: 'khanegi',
title: 'خانگی',
desc: 'مدیریت نسخه‌های فروشی و ظاهر اپ خانگی',
meta: `${khanegiCount.value} نسخه`,
icon: HomeOutlined,
to: { name: 'product-versions' as const, params: { product: 'khanegi' } },
visible: canKhanegi.value,
},
].filter((item) => item.visible),
)
async function load() {
loading.value = true
try {
const [tenantsRes, lowestRes, expiringRes, pluginExpiringRes, supportExpiringRes] =
await Promise.all([
api.get('/tenants'),
api.get('/sms/lowest', { params: { limit: 5 } }),
api.get('/servers/expiring', { params: { limit: 5 } }),
api.get('/plugins/expiring', { params: { limit: 5 } }),
api.get('/support/expiring', { params: { limit: 5 } }),
])
tenants.value = tenantsRes.data
smsTenants.value = lowestRes.data
expiringServers.value = expiringRes.data
expiringPlugins.value = pluginExpiringRes.data
expiringSupports.value = supportExpiringRes.data
const tasks: Array<Promise<void>> = []
if (canHamkar.value || canKhanegi.value) {
tasks.push(
api.get('/tenants').then((res) => {
tenants.value = res.data
}),
)
}
if (canSms.value) {
tasks.push(
api.get('/sms/lowest', { params: { limit: 5 } }).then((res) => {
smsTenants.value = res.data
}),
)
}
if (canServers.value) {
tasks.push(
api.get('/servers/expiring', { params: { limit: 5 } }).then((res) => {
expiringServers.value = res.data
}),
)
}
if (canPlugins.value) {
tasks.push(
api.get('/plugins/expiring', { params: { limit: 5 } }).then((res) => {
expiringPlugins.value = res.data
}),
)
}
if (canSupport.value) {
tasks.push(
api.get('/support/expiring', { params: { limit: 5 } }).then((res) => {
expiringSupports.value = res.data
}),
)
}
const results = await Promise.allSettled(tasks)
const failed = results.some((r) => r.status === 'rejected')
if (failed) {
message.error('خطا در دریافت بخشی از آمار داشبورد')
}
} catch (e: any) {
message.error(e?.response?.data?.message || 'خطا در دریافت آمار')
} finally {
@@ -193,7 +238,7 @@ onMounted(load)
<a-spin :spinning="loading">
<div class="dash-modules">
<div class="module-card sms sms-dashboard-card" @click="openSmsPanel()">
<div v-if="canSms" class="module-card sms sms-dashboard-card" @click="openSmsPanel()">
<div>
<div class="icon-wrap">
<MessageOutlined />
@@ -227,7 +272,7 @@ onMounted(load)
</div>
</div>
<div class="module-card server sms-dashboard-card" @click="openServerPanel()">
<div v-if="canServers" class="module-card server sms-dashboard-card" @click="openServerPanel()">
<div>
<div class="icon-wrap">
<CloudServerOutlined />
@@ -266,7 +311,7 @@ onMounted(load)
</div>
</div>
<div class="module-card plugin sms-dashboard-card" @click="openPluginPanel()">
<div v-if="canPlugins" class="module-card plugin sms-dashboard-card" @click="openPluginPanel()">
<div>
<div class="icon-wrap">
<AppstoreAddOutlined />
@@ -300,7 +345,7 @@ onMounted(load)
</div>
</div>
<div class="module-card support sms-dashboard-card" @click="openSupportPanel()">
<div v-if="canSupport" class="module-card support sms-dashboard-card" @click="openSupportPanel()">
<div>
<div class="icon-wrap">
<CustomerServiceOutlined />
src/pages/KhanegiModularUiConfigPage.vue
+13 -2
View File
@@ -4,9 +4,12 @@ import { useRoute, useRouter } from 'vue-router'
import { message } from 'ant-design-vue'
import { ArrowRightOutlined } from '@ant-design/icons-vue'
import api from '@/api/http'
import { useAuthStore } from '@/stores/auth'
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const canWrite = computed(() => auth.can('khanegi:write'))
const loading = ref(true)
const saving = ref(false)
const switching = ref(false)
@@ -165,10 +168,18 @@ onMounted(load)
{ value: 'modular', label: 'Modular' },
{ value: 'newTheme', label: 'New theme' },
]"
:disabled="switching || saving || loading"
:disabled="!canWrite || switching || saving || loading"
@change="(v: string) => v === 'newTheme' && switchToNewTheme()"
/>
<a-button type="primary" size="large" :loading="saving" @click="save">ذخیره</a-button>
<a-button
v-if="canWrite"
type="primary"
size="large"
:loading="saving"
@click="save"
>
ذخیره
</a-button>
</a-space>
</div>
src/pages/PluginTenantPage.vue
+7 -4
View File
@@ -9,6 +9,7 @@ import MoneyInput from '@/components/MoneyInput.vue'
import TenantPanelShortcuts from '@/components/TenantPanelShortcuts.vue'
import { formatIranDate, todayIranDateInput, iranDateInputToIso } from '@/utils/datetime'
import { formatMoney } from '@/utils/money'
import { useAuthStore } from '@/stores/auth'
type ExpiryLevel = 'healthy' | 'warning' | 'critical' | 'unknown' | 'none'
@@ -34,6 +35,8 @@ type PluginItem = {
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const canWrite = computed(() => auth.can('plugins:write'))
const loading = ref(false)
const saving = ref(false)
const renewing = ref(false)
@@ -272,7 +275,7 @@ onMounted(loadDetail)
{{ tenant?.product === 'hamkar' ? 'همکار' : 'خانگی' }} · {{ tenant?.domain }}
</p>
</div>
<a-button type="primary" @click="showCreate = true">
<a-button v-if="canWrite" type="primary" @click="showCreate = true">
<PlusOutlined /> افزونه جدید
</a-button>
</div>
@@ -312,7 +315,7 @@ onMounted(loadDetail)
<section class="form-section">
<div class="section-head">
<h3>مشخصات افزونه</h3>
<a-button danger type="text" @click="confirmDelete">
<a-button v-if="canWrite" danger type="text" @click="confirmDelete">
<DeleteOutlined /> حذف
</a-button>
</div>
@@ -369,13 +372,13 @@ onMounted(loadDetail)
</a-form>
</section>
<div class="sticky-actions settings-save">
<div v-if="canWrite" class="sticky-actions settings-save">
<a-button type="primary" size="large" block :loading="saving" @click="savePlugin">
ذخیره تنظیمات
</a-button>
</div>
<section class="form-section renew-section">
<section v-if="canWrite" class="form-section renew-section">
<h3>شارژ / تمدید جدید</h3>
<p class="field-hint">
با ثبت شارژ، تاریخ انقضا تمدید می‌شود و هشدارهای قبلی قطع می‌گردد تا دوباره نزدیک پایان برسد.
src/pages/ProductVersionsPage.vue
+17 -3
View File
@@ -4,6 +4,7 @@ import { useRoute, useRouter } from 'vue-router'
import { message, Modal } from 'ant-design-vue'
import { ArrowRightOutlined, PlusOutlined, SearchOutlined } from '@ant-design/icons-vue'
import api from '@/api/http'
import { useAuthStore } from '@/stores/auth'
type Tenant = {
id: string
@@ -23,6 +24,7 @@ type Tenant = {
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const loading = ref(false)
const rows = ref<Tenant[]>([])
const q = ref('')
@@ -32,6 +34,10 @@ const product = computed(() => {
return p === 'khanegi' ? 'khanegi' : 'hamkar'
})
const canWrite = computed(() =>
product.value === 'hamkar' ? auth.can('hamkar:write') : auth.can('khanegi:write'),
)
const title = computed(() => (product.value === 'hamkar' ? 'همکار' : 'خانگی'))
const subtitle = computed(() =>
product.value === 'hamkar'
@@ -110,7 +116,7 @@ onMounted(load)
>
<template #prefix><SearchOutlined /></template>
</a-input>
<a-button type="primary" @click="addVersion">
<a-button v-if="canWrite" type="primary" @click="addVersion">
<PlusOutlined /> نسخه جدید
</a-button>
</div>
@@ -173,12 +179,20 @@ onMounted(load)
>
ظاهر اپ
</a-button>
<a-button danger ghost style="flex: 0 0 auto" @click="remove(item)">حذف</a-button>
<a-button
v-if="canWrite"
danger
ghost
style="flex: 0 0 auto"
@click="remove(item)"
>
حذف
</a-button>
</div>
</article>
</div>
<a-empty v-else description="نسخه‌ای ثبت نشده" style="margin: 32px 0">
<a-button type="primary" @click="addVersion">افزودن اولین نسخه</a-button>
<a-button v-if="canWrite" type="primary" @click="addVersion">افزودن اولین نسخه</a-button>
</a-empty>
</a-spin>
</div>
src/pages/ServerTenantPage.vue
+6 -3
View File
@@ -9,6 +9,7 @@ import MoneyInput from '@/components/MoneyInput.vue'
import TenantPanelShortcuts from '@/components/TenantPanelShortcuts.vue'
import { formatIranDate, todayIranDateInput, iranDateInputToIso } from '@/utils/datetime'
import { formatMoney } from '@/utils/money'
import { useAuthStore } from '@/stores/auth'
type ExpiryLevel = 'dedicated' | 'healthy' | 'warning' | 'critical' | 'unknown'
@@ -40,6 +41,8 @@ type ServerRow = {
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const canWrite = computed(() => auth.can('servers:write'))
const loading = ref(false)
const saving = ref(false)
const renewing = ref(false)
@@ -292,7 +295,7 @@ onMounted(loadDetail)
<section class="form-section server-picker">
<div class="picker-head">
<h3>سرورهای این نسخه</h3>
<a-button type="primary" :loading="creating" @click="addServer">
<a-button v-if="canWrite" type="primary" :loading="creating" @click="addServer">
<PlusOutlined /> افزودن سرور
</a-button>
</div>
@@ -395,7 +398,7 @@ onMounted(loadDetail)
</a-form>
</section>
<div class="sticky-actions settings-save actions-row">
<div v-if="canWrite" class="sticky-actions settings-save actions-row">
<a-button type="primary" size="large" :loading="saving" @click="saveAccount">
ذخیره تنظیمات
</a-button>
@@ -404,7 +407,7 @@ onMounted(loadDetail)
</a-button>
</div>
<section v-if="!form.isDedicated" class="form-section renew-section">
<section v-if="canWrite && !form.isDedicated" class="form-section renew-section">
<h3>شارژ / تمدید جدید</h3>
<p class="field-hint">
با ثبت شارژ، تاریخ انقضا تمدید می‌شود و هشدارهای قبلی قطع می‌گردد تا دوباره نزدیک پایان برسد.
src/pages/SmsTenantPage.vue
+44 -5
View File
@@ -10,6 +10,7 @@ import MoneyInput from '@/components/MoneyInput.vue'
import TenantPanelShortcuts from '@/components/TenantPanelShortcuts.vue'
import { formatIranDateTime, todayIranDateInput } from '@/utils/datetime'
import { formatMoney, formatNumber } from '@/utils/money'
import { useAuthStore } from '@/stores/auth'
type BalanceLevel = 'healthy' | 'warning' | 'critical' | 'unknown'
@@ -28,6 +29,8 @@ type SmsSummary = {
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const canWrite = computed(() => auth.can('sms:write'))
const loading = ref(false)
const saving = ref(false)
const charging = ref(false)
@@ -452,7 +455,15 @@ onMounted(async () => {
<h3>تعرفه پیامک</h3>
<div class="inline-actions">
<MoneyInput v-model:value="form.pricePerPartRials" placeholder="قیمت هر پارت" />
<a-button type="primary" size="large" :loading="saving" @click="savePrice">ذخیره قیمت</a-button>
<a-button
v-if="canWrite"
type="primary"
size="large"
:loading="saving"
@click="savePrice"
>
ذخیره قیمت
</a-button>
</div>
</div>
@@ -465,7 +476,13 @@ onMounted(async () => {
placeholder="مبلغ (تومان)"
/>
<a-input v-model:value="chargeForm.note" size="large" placeholder="توضیح (اختیاری)" />
<a-button type="primary" size="large" :loading="charging" @click="openChargeConfirm">
<a-button
v-if="canWrite"
type="primary"
size="large"
:loading="charging"
@click="openChargeConfirm"
>
شارژ کیف پول
</a-button>
</div>
@@ -480,6 +497,7 @@ onMounted(async () => {
<a-switch
:checked="form.isBlocked"
:loading="blockLoading"
:disabled="!canWrite"
checked-children="مسدود"
un-checked-children="فعال"
@change="onBlockChange"
@@ -498,7 +516,14 @@ onMounted(async () => {
placeholder="راهنمای واریز"
/>
</div>
<a-button type="primary" :loading="chargeInfoSaving" @click="saveChargeInfo">ذخیره اطلاعات واریز</a-button>
<a-button
v-if="canWrite"
type="primary"
:loading="chargeInfoSaving"
@click="saveChargeInfo"
>
ذخیره اطلاعات واریز
</a-button>
</div>
<div class="subcard thresholds">
@@ -512,7 +537,15 @@ onMounted(async () => {
<span class="tone-label"><i class="dot warning" /> آستانه زرد</span>
<MoneyInput v-model:value="form.alertWarningRials" />
</label>
<a-button type="primary" size="large" :loading="saving" @click="saveThresholds">ذخیره آستانه‌ها</a-button>
<a-button
v-if="canWrite"
type="primary"
size="large"
:loading="saving"
@click="saveThresholds"
>
ذخیره آستانه‌ها
</a-button>
</div>
</div>
@@ -535,7 +568,13 @@ onMounted(async () => {
placeholder="مثلاً -50,000 — خالی = غیرفعال"
/>
</label>
<a-button type="primary" size="large" :loading="saving" @click="saveThresholds">
<a-button
v-if="canWrite"
type="primary"
size="large"
:loading="saving"
@click="saveThresholds"
>
ذخیره آستانه
</a-button>
</div>
src/pages/SupportTenantPage.vue
+7 -4
View File
@@ -9,6 +9,7 @@ import MoneyInput from '@/components/MoneyInput.vue'
import TenantPanelShortcuts from '@/components/TenantPanelShortcuts.vue'
import { formatIranDate, todayIranDateInput, iranDateInputToIso } from '@/utils/datetime'
import { formatMoney } from '@/utils/money'
import { useAuthStore } from '@/stores/auth'
type ExpiryLevel = 'healthy' | 'warning' | 'critical' | 'unknown' | 'none'
@@ -35,6 +36,8 @@ type SupportItem = {
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const canWrite = computed(() => auth.can('support:write'))
const loading = ref(false)
const saving = ref(false)
const renewing = ref(false)
@@ -306,7 +309,7 @@ onMounted(loadDetail)
{{ tenant?.product === 'hamkar' ? 'همکار' : 'خانگی' }} · {{ tenant?.domain }}
</p>
</div>
<a-button type="primary" @click="showCreate = true">
<a-button v-if="canWrite" type="primary" @click="showCreate = true">
<PlusOutlined /> پشتیبانی جدید
</a-button>
</div>
@@ -352,7 +355,7 @@ onMounted(loadDetail)
<section class="form-section">
<div class="section-head">
<h3>مشخصات پشتیبانی</h3>
<a-button danger type="text" @click="confirmDelete">
<a-button v-if="canWrite" danger type="text" @click="confirmDelete">
<DeleteOutlined /> حذف
</a-button>
</div>
@@ -415,13 +418,13 @@ onMounted(loadDetail)
</a-form>
</section>
<div class="sticky-actions settings-save">
<div v-if="canWrite" class="sticky-actions settings-save">
<a-button type="primary" size="large" block :loading="saving" @click="saveSupport">
ذخیره تنظیمات
</a-button>
</div>
<section class="form-section renew-section">
<section v-if="canWrite" class="form-section renew-section">
<h3>شارژ / تمدید جدید</h3>
<p class="field-hint">
با ثبت شارژ، تاریخ انقضا تمدید می‌شود و هشدارهای قبلی قطع می‌گردد تا دوباره نزدیک پایان برسد.
src/pages/TenantFormPage.vue
+19 -1
View File
@@ -4,9 +4,11 @@ import { useRoute, useRouter } from 'vue-router'
import { message } from 'ant-design-vue'
import { ArrowRightOutlined, PlusOutlined, DeleteOutlined } from '@ant-design/icons-vue'
import api from '@/api/http'
import { useAuthStore } from '@/stores/auth'
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const loading = ref(false)
const saving = ref(false)
const uploading = ref(false)
@@ -32,6 +34,9 @@ const form = reactive({
})
const productLabel = computed(() => (form.product === 'hamkar' ? 'همکار' : 'خانگی'))
const canWrite = computed(() =>
form.product === 'hamkar' ? auth.can('hamkar:write') : auth.can('khanegi:write'),
)
function backTarget() {
return {
@@ -104,6 +109,10 @@ function clearLogo() {
}
async function save() {
if (!canWrite.value) {
message.warning('دسترسی نوشتن ندارید')
return
}
saving.value = true
try {
const payload = { ...form }
@@ -256,7 +265,16 @@ onMounted(load)
</section>
<div class="sticky-actions">
<a-button type="primary" html-type="submit" size="large" block :loading="saving">ذخیره</a-button>
<a-button
v-if="canWrite"
type="primary"
html-type="submit"
size="large"
block
:loading="saving"
>
ذخیره
</a-button>
<a-button size="large" @click="router.push(backTarget())">انصراف</a-button>
</div>
</a-form>
src/pages/UiConfigPage.vue
+24 -3
View File
@@ -18,9 +18,12 @@ import {
type KhanegiPresetId,
} from '@/config/khanegiThemePresets'
import { colorFieldLabels } from '@/theme/tokens'
import { useAuthStore } from '@/stores/auth'
const route = useRoute()
const router = useRouter()
const auth = useAuthStore()
const canWrite = computed(() => auth.can('khanegi:write'))
const loading = ref(true)
const saving = ref(false)
const resetting = ref(false)
@@ -325,10 +328,18 @@ onMounted(load)
{ value: 'modular', label: 'Modular' },
{ value: 'newTheme', label: 'New theme' },
]"
:disabled="switching || saving || loading"
:disabled="!canWrite || switching || saving || loading"
@change="(v: string) => v === 'modular' && switchToModular()"
/>
<a-button type="primary" size="large" :loading="saving" @click="save">ذخیره ظاهر</a-button>
<a-button
v-if="canWrite"
type="primary"
size="large"
:loading="saving"
@click="save"
>
ذخیره ظاهر
</a-button>
</a-space>
</div>
@@ -557,6 +568,7 @@ onMounted(load)
<div class="sticky-actions">
<a-button
v-if="canWrite"
size="large"
block
:loading="resetting"
@@ -565,7 +577,16 @@ onMounted(load)
>
بازگشت به ظاهر اولیه
</a-button>
<a-button type="primary" size="large" block :loading="saving" @click="save">ذخیره ظاهر</a-button>
<a-button
v-if="canWrite"
type="primary"
size="large"
block
:loading="saving"
@click="save"
>
ذخیره ظاهر
</a-button>
</div>
</div>
<div v-else class="page-shell" style="display: grid; place-items: center; min-height: 240px">