<?php

namespace app\admin\Controller;

use app\admin\model\AuthGroup as AuthGroupModel;
use app\admin\model\AuthRule;
use app\admin\service\User;
use app\common\controller\Adminbase;
use think\Db;
use util\Tree;

/**
 * 权限管理控制器
 */
class AuthManager extends Adminbase
{
    //当前登录管理员所有子组别
    protected $childrenGroupIds = [];
    //当前组别列表数据
    protected $groupdata = [];

    protected function initialize()
    {
        parent::initialize();
        $this->AuthGroupModel   = new AuthGroupModel;
        $this->childrenGroupIds = User::instance()->getChildrenGroupIds(true);

        $groupList = AuthGroupModel::where('id', 'in', $this->childrenGroupIds)->select()->toArray();
        Tree::instance()->init($groupList);
        $result = [];
        if (User::instance()->isAdministrator()) {
            $result = Tree::instance()->getTreeList(Tree::instance()->getTreeArray(0), 'title');
        } else {
            $groups = User::instance()->getGroups();
            foreach ($groups as $m => $n) {
                $result = array_merge($result, Tree::instance()->getTreeList(Tree::instance()->getTreeArray($n['parentid']), 'title'));
            }
        }

        $groupName = [];
        foreach ($result as $k => $v) {
            $groupName[$v['id']] = $v['title'];
        }
        $this->groupdata = $groupName;
        $this->assign('groupdata', $this->groupdata);
    }

    //权限管理首页
    public function index()
    {
        if ($this->request->isAjax()) {
            $result    = AuthGroupModel::all(array_keys($this->groupdata))->toArray();
            $groupList = [];
            foreach ($result as $k => $v) {
                $groupList[$v['id']] = $v;
            }
            $result = [];
            foreach ($this->groupdata as $k => $v) {
                if (isset($groupList[$k])) {
                    $groupList[$k]['title'] = $v;
                    $result[]               = $groupList[$k];
                }
            }
            $result = array("code" => 0, "data" => $result);
            return json($result);
        } else {
            return $this->fetch();
        }

    }

    //访问授权页面
    public function access()
    {
        $group_id = $this->request->param('group_id/d');
        if (!in_array($group_id, $this->childrenGroupIds)) {
            $this->error('你没有权限访问!');
        }
        $this->updateRules(); //更新节点

        $result = model('admin/Menu')->returnNodes(false);

        $rules = Db::name('AuthGroup')
            ->where('status', '<>', 0)
            ->where('id', '=', $group_id)
            ->where(['type' => AuthGroupModel::TYPE_ADMIN])
            ->find();

        $map        = array('status' => 1);
        $main_rules = Db::name('AuthRule')->where($map)->column('name,id');
        $json       = array();
        foreach ($result as $rs) {
            $data = array(
                'nid'      => $rs['id'],
                'checked'  => $rs['id'],
                'parentid' => $rs['parentid'],
                'name'     => $rs['title'],
                'id'       => $main_rules[$rs['url']],
                'checked'  => $this->isCompetence($main_rules[$rs['url']], $rules['rules']) ? true : false,
            );
            $json[] = $data;
        }
        $this->assign('rules', $rules);
        $this->assign('json', json_encode($json));
        return $this->fetch('managergroup');
    }

    public function isCompetence($id, $ids)
    {
        $ids  = explode(',', $ids);
        $info = in_array($id, $ids);
        if ($info) {
            return true;
        } else {
            return false;
        }
    }

    //创建管理员用户组
    public function createGroup()
    {
        if (empty($this->auth_group)) {
            //清除编辑权限的值
            $this->assign('auth_group', array('title' => null, 'id' => null, 'description' => null, 'rules' => null, 'status' => 1));
        }
        $_list = Db::name('AuthGroup')->where('module', 'admin')->order(['id' => 'ASC'])->column('*', 'id');
        Tree::instance()->init($_list);
        $Groupdata = Tree::instance()->getTree(0);
        $this->assign("Groupdata", $Groupdata);
        return $this->fetch('edit_group');

    }

    //编辑管理员用户组
    public function editGroup()
    {
        $id = $this->request->param('id/d');
        if (!in_array($id, $this->childrenGroupIds)) {
            $this->error('你没有权限访问!');
        }
        $auth_group = Db::name('AuthGroup')->where(array('module' => 'admin', 'type' => AuthGroupModel::TYPE_ADMIN))->find($id);
        $_list      = Db::name('AuthGroup')->where('module', 'admin')->order(['id' => 'ASC'])->column('*', 'id');
        Tree::instance()->init($_list);
        $Groupdata = Tree::instance()->getTree(0, '', $auth_group['parentid']);
        $this->assign("Groupdata", $Groupdata);
        $this->assign('auth_group', $auth_group);
        return $this->fetch();

    }

    //删除管理员用户组
    public function deleteGroup()
    {
        $Groupid = $this->request->param('id/d');
        if ($this->AuthGroupModel->GroupDelete($Groupid)) {
            $this->success("删除成功！");
        } else {
            $error = $this->AuthGroupModel->getError();
            $this->error($error ? $error : '删除失败！');
        }
    }

    //管理员用户组数据写入/更新
    public function writeGroup()
    {
        $data           = $this->request->post();
        $data['module'] = 'admin';
        $data['type']   = AuthGroupModel::TYPE_ADMIN;
        $parentmodel    = AuthGroupModel::get($data['parentid']);
        if (!$parentmodel) {
            $this->error('父角色不存在!');
        }
        if (isset($data['id']) && !empty($data['id'])) {
            if (!in_array($data['parentid'], $this->childrenGroupIds)) {
                $this->error('父角色超出权限范围!');
            }
            if (in_array($data['parentid'], Tree::instance()->getChildrenIds($data['id'], true))) {
                $this->error('父角色不能是自身！');
            }
            if (isset($data['rules'])) {
                $parentrules   = explode(',', $parentmodel->rules);
                $currentrules  = User::instance()->getRuleIds();
                $rules         = explode(',', $data['rules']);
                $rules         = in_array('*', $parentrules) ? $rules : array_intersect($parentrules, $rules);
                $rules         = in_array('*', $currentrules) ? $rules : array_intersect($currentrules, $rules);
                $data['rules'] = implode(',', $rules);
            }
            //更新
            $r = $this->AuthGroupModel->allowField(true)->save($data, ['id' => $data['id']]);
        } else {
            $result = $this->validate($data, 'AuthGroup');
            if (true !== $result) {
                return $this->error($result);
            }
            if (!in_array($data['parentid'], $this->childrenGroupIds)) {
                $this->error('父角色超出权限范围!');
            }
            $r = $this->AuthGroupModel->allowField(true)->save($data);
        }
        if ($r === false) {
            $this->error('操作失败' . $this->AuthGroupModel->getError());
        } else {
            $this->success('操作成功!');
        }
    }

    /**
     * 后台节点配置的url作为规则存入auth_rule
     * 执行新节点的插入,已有节点的更新,无效规则的删除三项任务
     */
    public function updateRules()
    {
        //需要新增的节点必然位于$nodes
        $nodes    = model("admin/Menu")->returnNodes(false);
        $AuthRule = model('AuthRule');
        //需要更新和删除的节点必然位于$rules
        $rules = $AuthRule->where('type', 'in', '1,2')->order('name')->select()->toArray();
        //构建insert数据
        $data = array(); //保存需要插入和更新的新节点
        foreach ($nodes as $value) {
            $temp['name']   = $value['url'];
            $temp['title']  = $value['title'];
            $temp['module'] = $value['app'];
            if ($value['parentid'] > 0) {
                $temp['type'] = AuthRule::RULE_URL;
            } else {
                $temp['type'] = AuthRule::RULE_MAIN;
            }
            $temp['status']                                                    = 1;
            $data[strtolower($temp['name'] . $temp['module'] . $temp['type'])] = $temp; //去除重复项
        }
        $update = array(); //保存需要更新的节点
        $ids    = array(); //保存需要删除的节点的id
        foreach ($rules as $index => $rule) {
            $key = strtolower($rule['name'] . $rule['module'] . $rule['type']);
            if (isset($data[$key])) {
                //如果数据库中的规则与配置的节点匹配,说明是需要更新的节点
                $data[$key]['id'] = $rule['id']; //为需要更新的节点补充id值
                $update[]         = $data[$key];
                unset($data[$key]); //排除已存在的
                unset($rules[$index]);
                unset($rule['condition']);
                $diff[$rule['id']] = $rule;
            } elseif ($rule['status'] == 1) {
                $ids[] = $rule['id'];
            }
        }
        if (count($update)) {
            foreach ($update as $k => $row) {
                if ($row != $diff[$row['id']]) {
                    $AuthRule->where(array('id' => $row['id']))->update($row);
                }
            }
        }
        if (count($ids)) {
            $AuthRule->where(['id' => $ids])->update(array('status' => -1));
            //删除规则是否需要从每个用户组的访问授权表中移除该规则?
        }
        if (count($data)) {
            $AuthRule->insertAll(array_values($data));
        }
        if ($AuthRule->getError()) {
            trace('[' . __METHOD__ . ']:' . $AuthRule->getError());
            return false;
        } else {
            return true;
        }
    }

    //添加
    public function add()
    {
        $this->error();
    }

    //编辑
    public function edit()
    {
        $this->error();
    }

    //批量更新
    public function multi()
    {
        // 管理员禁止批量操作
        $this->error();
    }

}