pro/im_manager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add tenant bound restriction for IM dashboard and management pages

Browse Source 
1. extract isTenantBound utility from user store logic
2. add disabled state to tenant select components across all IM pages
3. update policy tenant options logic to hide global option for bound tenants
4. add backend scope validation for IM admin operations
This commit is contained in:
Austin
2026-09-22 11:34:40 +08:00
parent 40ac52923e
commit 0596599db9
31 changed files with 154 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/internal/logic/sys/im_kafka_command.go
+29 -8
View File
@@ -33,7 +33,12 @@ func (s *sSysImKafkaCommand) List(ctx context.Context, in *sysin.ImKafkaCommandL
if err = in.Filter(ctx); err != nil {
return
}
where, args := buildImKafkaCommandWhere(in)
// 强制租户范围：商户绑定账号忽略前端所选租户，平台管理员使用所选租户
scope, err := resolveImAdminScope(ctx, in.TenantId)
if err != nil {
return
}
where, args := buildImKafkaCommandWhere(in, scope.TenantId)
db := imtenant.RegistryDB()
totalValue, err := db.GetValue(ctx, "SELECT COUNT(*) FROM im_admin_commands "+where, args...)
if err != nil {
@@ -91,16 +96,16 @@ func (s *sSysImKafkaCommand) View(ctx context.Context, in *sysin.ImKafkaCommandV
if err = row.Struct(&res); err != nil {
return nil, gerror.Wrap(err, "解析IM后台命令详情失败，请稍后重试！")
}
// 后置校验记录归属租户是否在操作者允许范围内
if err = ensureImRecordTenantAllowed(ctx, res.TenantId); err != nil {
return nil, err
}
return
}
func buildImKafkaCommandWhere(in *sysin.ImKafkaCommandListInp) (string, []any) {
parts := []string{"1=1"}
args := []any{}
if in.TenantId > 0 {
parts = append(parts, "tenant_id=?")
args = append(args, in.TenantId)
}
func buildImKafkaCommandWhere(in *sysin.ImKafkaCommandListInp, scopeTenantId int64) (string, []any) {
parts := []string{"tenant_id=?"}
args := []any{scopeTenantId}
if in.CommandId != "" {
parts = append(parts, "command_id LIKE ?")
args = append(args, "%"+in.CommandId+"%")
@@ -136,6 +141,14 @@ func (s *sSysImKafkaCommand) CacheInvalidate(ctx context.Context, in *sysin.ImKa
if err = in.Filter(ctx); err != nil {
return nil, err
}
// 校验目标租户是否在操作者允许范围内
tenant, err := lookupImTenantByCode(ctx, in.TenantCode)
if err != nil {
return nil, err
}
if err = ensureImRecordTenantAllowed(ctx, tenant.Id); err != nil {
return nil, err
}
user := contexts.GetUser(ctx)
actor := &imkafka.Actor{
Type: "admin",
@@ -170,6 +183,14 @@ func (s *sSysImKafkaCommand) WorkbenchEvent(ctx context.Context, in *sysin.ImKaf
if err = in.Filter(ctx); err != nil {
return nil, err
}
// 校验目标租户是否在操作者允许范围内
tenant, err := lookupImTenantByCode(ctx, in.TenantCode)
if err != nil {
return nil, err
}
if err = ensureImRecordTenantAllowed(ctx, tenant.Id); err != nil {
return nil, err
}
user := contexts.GetUser(ctx)
actor := &imkafka.Actor{
Type: "admin",