56 lines
1.3 KiB
Go
56 lines
1.3 KiB
Go
package commonservice
|
||
|
||
import "gorm.io/gorm"
|
||
|
||
// TeamRole 查询用户在团队中的角色；非成员返回空串。
|
||
func TeamRole(db *gorm.DB, teamID, userID int64) (string, error) {
|
||
if teamID <= 0 || userID <= 0 {
|
||
return "", nil
|
||
}
|
||
var role string
|
||
err := db.Table("team_members").Select("role").
|
||
Where("team_id = ? AND user_id = ?", teamID, userID).
|
||
Scan(&role).Error
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
return role, nil
|
||
}
|
||
|
||
// TeamRoleRank 角色权重：owner=3 admin=2 member=1。
|
||
func TeamRoleRank(role string) int {
|
||
switch role {
|
||
case "owner":
|
||
return 3
|
||
case "admin":
|
||
return 2
|
||
case "member":
|
||
return 1
|
||
}
|
||
return 0
|
||
}
|
||
|
||
// IsTeamAdmin 该用户是否为团队 owner/admin。
|
||
func IsTeamAdmin(db *gorm.DB, teamID, userID int64) bool {
|
||
if teamID <= 0 || userID <= 0 {
|
||
return false
|
||
}
|
||
var n int64
|
||
db.Table("team_members").
|
||
Where("team_id = ? AND user_id = ? AND role IN ('owner','admin')", teamID, userID).
|
||
Count(&n)
|
||
return n > 0
|
||
}
|
||
|
||
// RequireTeamRole 校验最低角色，返回实际角色。
|
||
func RequireTeamRole(db *gorm.DB, teamID, userID int64, min string) (string, error) {
|
||
role, err := TeamRole(db, teamID, userID)
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
if TeamRoleRank(role) < TeamRoleRank(min) {
|
||
return role, Forbidden("TEAM_FORBIDDEN")
|
||
}
|
||
return role, nil
|
||
}
|