update. 完善用户相关基础数据的模型与接口配置

users/roles.py

@@ -0,0 +1,70 @@
+# api/roles.py
+from typing import List
+
+from django.shortcuts import get_object_or_404
+from ninja import Router
+from ninja.errors import HttpError
+
+from users.models import Role
+from users.permission import has_permission, clear_user_permissions_cache
+from users.schema import RoleOut, RoleCreate, RoleMenuAssign, RoleUpdate
+
+router = Router(tags=['roles'])
+
+
+@router.post("/", response=RoleOut, summary="创建角色")
+def create_role(request, payload: RoleCreate):
+    if not has_permission(request.auth.id, "role:create"):
+        raise HttpError(403, "权限不足")
+    role = Role.objects.create(**payload.dict())
+    return role
+
+
+@router.get("/", response=List[RoleOut], summary="获取角色列表")
+def list_roles(request):
+    if not has_permission(request.auth.id, "role:list"):
+        raise HttpError(403, "权限不足")
+    return Role.objects.all()
+
+
+@router.get("/{role_id}/", response=RoleOut, summary="获取角色详情")
+def get_role(request, role_id: int):
+    if not has_permission(request.auth.id, "role:view"):
+        raise HttpError(403, "权限不足")
+    role = get_object_or_404(Role, id=role_id)
+    return role
+
+
+@router.put("/{role_id}/", response=RoleOut, summary="更新角色")
+def update_role(request, role_id: int, payload: RoleUpdate):
+    if not has_permission(request.auth.id, "role:update"):
+        raise HttpError(403, "权限不足")
+    role = get_object_or_404(Role, id=role_id)
+    for attr, value in payload.dict().items():
+        setattr(role, attr, value)
+    role.save()
+    return role
+
+
+@router.delete("/{role_id}/", summary="删除角色")
+def delete_role(request, role_id: int):
+    if not has_permission(request.auth.id, "role:delete"):
+        raise HttpError(403, "权限不足")
+    role = get_object_or_404(Role, id=role_id)
+    role.delete()
+    return {"success": True}
+
+
+@router.post("/{role_id}/menus/", summary="分配角色菜单权限")
+def assign_role_menus(request, role_id: int, payload: RoleMenuAssign):
+    if not has_permission(request.auth.id, "role:assign_menus"):
+        raise HttpError(403, "权限不足")
+
+    role = get_object_or_404(Role, id=role_id)
+    # 直接使用 ManyToManyField 的 set() 方法
+    role.menus.set(payload.menu_ids)
+
+    # 清除该角色下所有用户的权限缓存
+    clear_user_permissions_cache(role_id)
+
+    return {"success": True}