backdev/admin-panel
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

add entity and controller for templates admin create

Browse Source
This commit is contained in:
backdev
2026-05-22 13:59:55 +07:00
parent 8a986ea2a0
commit bfeea41ee1
1 changed files with 33 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main/java/ru/soune/nocopy/adminpanel/handler/AdminUserHandler.java
+33 -7
View File
@@ -56,7 +56,7 @@ public class AdminUserHandler implements RequestHandler {
case "toggle_active" -> handleToggleActive(request, adminRequest); case "toggle_active" -> handleToggleActive(request, adminRequest);
case "delete" -> handleDelete(request, adminRequest); case "delete" -> handleDelete(request, adminRequest);
case "get_permissions_by_id" -> handleGetPermissionsById(request, adminRequest); case "get_permissions_by_id" -> handleGetPermissionsById(request, adminRequest);
case "get_permissions_by_token" -> handleGetPermissionsByToken(request); case "get_permissions_by_token" -> handleGetPermissionsByToken(request, adminRequest);
case "update_permissions" -> handleUpdatePermissions(request, adminRequest); case "update_permissions" -> handleUpdatePermissions(request, adminRequest);
default -> handleInvalidAction(request, action); default -> handleInvalidAction(request, action);
}; };
@@ -184,7 +184,7 @@ public class AdminUserHandler implements RequestHandler {
return BaseResponse.builder() return BaseResponse.builder()
.msgId(request.getMsgId()) .msgId(request.getMsgId())
.messageCode(MessageCode.PERMISSION_DENIED.getCode()) .messageCode(MessageCode.PERMISSION_DENIED.getCode())
.messageDesc("You can't update profile") .messageDesc("You can't reads")
.build(); .build();
} }
@@ -211,7 +211,7 @@ public class AdminUserHandler implements RequestHandler {
return BaseResponse.builder() return BaseResponse.builder()
.msgId(request.getMsgId()) .msgId(request.getMsgId())
.messageCode(MessageCode.PERMISSION_DENIED.getCode()) .messageCode(MessageCode.PERMISSION_DENIED.getCode())
.messageDesc("You can't update profile") .messageDesc("You can't read")
.build(); .build();
} }
} }
@@ -289,7 +289,7 @@ public class AdminUserHandler implements RequestHandler {
return BaseResponse.builder() return BaseResponse.builder()
.msgId(request.getMsgId()) .msgId(request.getMsgId())
.messageCode(MessageCode.PERMISSION_DENIED.getCode()) .messageCode(MessageCode.PERMISSION_DENIED.getCode())
.messageDesc("You can't create profile") .messageDesc("You can't update profile")
.build(); .build();
} }
@@ -370,7 +370,7 @@ public class AdminUserHandler implements RequestHandler {
return BaseResponse.builder() return BaseResponse.builder()
.msgId(request.getMsgId()) .msgId(request.getMsgId())
.messageCode(MessageCode.PERMISSION_DENIED.getCode()) .messageCode(MessageCode.PERMISSION_DENIED.getCode())
.messageDesc("You can't create profile") .messageDesc("You can't delete profile")
.build(); .build();
} }
@@ -410,6 +410,19 @@ public class AdminUserHandler implements RequestHandler {
private BaseResponse handleGetPermissionsById(BaseRequest request, AdminUserRequest adminRequest) { private BaseResponse handleGetPermissionsById(BaseRequest request, AdminUserRequest adminRequest) {
try { try {
Long currentUserId = (Long) httpServletRequest.getAttribute("userId");
if (!currentUserId.equals(adminRequest.getAdminId())) {
if (!adminSectionPermissionService.canRead(currentUserId,
AdminSection.USERS)) {
return BaseResponse.builder()
.msgId(request.getMsgId())
.messageCode(MessageCode.PERMISSION_DENIED.getCode())
.messageDesc("You can't update profile")
.build();
}
}
Long userId = adminRequest.getAdminId(); Long userId = adminRequest.getAdminId();
AdminUser admin = adminUserService.findById(userId); AdminUser admin = adminUserService.findById(userId);
@@ -444,8 +457,21 @@ public class AdminUserHandler implements RequestHandler {
} }
} }
private BaseResponse handleGetPermissionsByToken(BaseRequest request) { private BaseResponse handleGetPermissionsByToken(BaseRequest request, AdminUserRequest adminRequest) {
try { try {
Long currentUserId = (Long) httpServletRequest.getAttribute("userId");
if (!currentUserId.equals(adminRequest.getAdminId())) {
if (!adminSectionPermissionService.canRead(currentUserId,
AdminSection.USERS)) {
return BaseResponse.builder()
.msgId(request.getMsgId())
.messageCode(MessageCode.PERMISSION_DENIED.getCode())
.messageDesc("You can't update profile")
.build();
}
}
String token = request.getToken(); String token = request.getToken();
if (token == null || token.isEmpty()) { if (token == null || token.isEmpty()) {
return BaseResponse.builder() return BaseResponse.builder()
@@ -497,7 +523,7 @@ public class AdminUserHandler implements RequestHandler {
return BaseResponse.builder() return BaseResponse.builder()
.msgId(request.getMsgId()) .msgId(request.getMsgId())
.messageCode(MessageCode.PERMISSION_DENIED.getCode()) .messageCode(MessageCode.PERMISSION_DENIED.getCode())
.messageDesc("You can't create profile") .messageDesc("You can't update profile")
.build(); .build();
} }