This commit is contained in:
2026-08-03 14:58:17 +08:00
parent bc44a7942d
commit ee997ae894
17 changed files with 1694 additions and 303 deletions
+265 -161
View File
@@ -1,237 +1,257 @@
<script setup lang="ts">
import { computed, nextTick, onMounted, reactive, ref } from 'vue'
import { ElMessage, ElMessageBox, type FormInstance, type FormRules } from 'element-plus'
import { KeyRound, Pencil, Plus, ShieldCheck } from '@lucide/vue'
import { Pencil, Plus } from '@lucide/vue'
import {
assignPlatformInternalUserRoles,
changePlatformInternalUserStatus,
createPlatformInternalUser,
listPlatformInternalUsers,
listPlatformRoles,
resetPlatformInternalUserPassword,
updatePlatformInternalUser,
type PlatformInternalUser,
type PlatformRoleResource,
changePlatformManagedUserStatus,
createPlatformManagedUser,
getPlatformUserOptions,
listPlatformManagedUsers,
resetPlatformManagedUserPassword,
updatePlatformManagedUser,
type PlatformManagedUser,
type PlatformUserOptions,
} from '@/api/platformIam'
import { getApiErrorDetails, getApiErrorMessage, type ApiErrorDetails } from '@/api/http'
import ApiErrorMeta from '@/components/ApiErrorMeta.vue'
import StatusBadge from '@/components/StatusBadge.vue'
import DataTable, { type DataTableColumn } from '@/components/common/DataTable.vue'
import QueryToolbar, { type QueryField, type QueryModel } from '@/components/common/QueryToolbar.vue'
import { useUnsavedWorkRegistration } from '@/composables/useUnsavedWorkRegistration'
import { useAccessPreviewStore } from '@/stores/accessPreview'
import { useAuthStore } from '@/stores/auth'
const access = useAccessPreviewStore()
const auth = useAuthStore()
const users = ref<PlatformInternalUser[]>([])
const roles = ref<PlatformRoleResource[]>([])
const users = ref<PlatformManagedUser[]>([])
const options = ref<PlatformUserOptions>({ tenants: [], roles: [] })
const loading = ref(false)
const saving = ref(false)
const loadError = ref<ApiErrorDetails | null>(null)
const editorOpen = ref(false)
const formRef = ref<FormInstance>()
const editingMembershipId = ref<string | null>(null)
const roleEditorOpen = ref(false)
const assigningRoles = ref(false)
const roleAssignmentUser = ref<PlatformInternalUser | null>(null)
const assignedRoleIds = ref<string[]>([])
const editingUser = ref<PlatformManagedUser | null>(null)
const rowActionId = ref('')
const page = ref(1)
const pageSize = ref(10)
type InternalUserFilters = QueryModel & { keyword: string; status: string }
const filters = ref<InternalUserFilters>({ keyword: '', status: '' })
const appliedFilters = ref<InternalUserFilters>({ ...filters.value })
const queryFields: QueryField[] = [
{ key: 'keyword', type: 'input', placeholder: '登录账号、认证用户 ID、姓名或成员编号' },
{ key: 'status', type: 'select', placeholder: '全部状态', options: [{ label: '正常', value: 'ACTIVE' }, { label: '停用', value: 'DISABLED' }] },
]
const emptyForm = () => ({ authUserId: '', userType: 'INTERNAL', displayName: '', phone: '', email: '', memberNo: '', roleIds: [] as string[] })
const filters = reactive({ keyword: '', tenantId: '', status: '' })
const emptyForm = () => ({
username: '',
displayName: '',
phone: '',
email: '',
tenantId: '' as string,
roleIds: [] as string[],
password: '',
confirmPassword: '',
status: 'ACTIVE' as 'ACTIVE' | 'DISABLED',
resetPassword: false,
})
const form = reactive(emptyForm())
const formRules = computed<FormRules>(() => ({
authUserId: [
{ required: !editingMembershipId.value, message: '请输入认证用户 ID', trigger: 'blur' },
{ pattern: /^[1-9]\d*$/, message: '认证用户 ID 必须为正整数', trigger: 'blur' },
],
displayName: [{ required: true, whitespace: true, message: '请输入姓名', trigger: 'blur' }],
userType: editingMembershipId.value ? [] : [{ required: true, message: '请选择用户类型', trigger: 'change' }],
memberNo: editingMembershipId.value ? [{ required: true, whitespace: true, message: '请输入成员编号', trigger: 'blur' }] : [],
email: [{ type: 'email', message: '请输入有效的邮箱地址', trigger: 'blur' }],
}))
const editorLabel = computed(() => editingMembershipId.value ? '编辑内部用户' : '新增内部用户')
const { captureBaseline } = useUnsavedWorkRegistration({
key: 'internal-user-editor',
const canCreate = computed(() => access.can('platform:user:create') && access.can('platform:user:grant-role'))
const canEdit = computed(() => access.can('platform:user:edit'))
const canGrantRoles = computed(() => access.can('platform:user:grant-role'))
const canChangeStatus = computed(() => access.can('platform:user:status'))
const canResetPassword = computed(() => access.can('platform:user:reset-password'))
const editorLabel = computed(() => editingUser.value ? `编辑用户 - ${editingUser.value.displayName}` : '新增用户')
useUnsavedWorkRegistration({
key: 'platform-user-editor',
label: editorLabel,
isOpen: editorOpen,
model: form,
requiredPermission: computed(() => editingMembershipId.value ? 'platform:user:edit' : 'platform:user:create'),
requiredPermission: computed(() => editingUser.value ? 'platform:user:edit' : 'platform:user:create'),
})
const canCreate = computed(() => access.can('platform:user:create'))
const canEdit = computed(() => access.can('platform:user:edit'))
const canChangeStatus = computed(() => access.can('platform:user:status'))
const canResetPassword = computed(() => access.can('platform:user:reset-password'))
const canGrantRoles = computed(() => access.can('platform:user:grant-role'))
const roleNames = computed(() => new Map(roles.value.map((role) => [String(role.id), role.roleName])))
const roleOptions = computed(() => roles.value.filter((role) => role.status === 'ACTIVE' || form.roleIds.includes(String(role.id)) || assignedRoleIds.value.includes(String(role.id))))
const filteredRows = computed(() => users.value.filter((item) => {
const keyword = appliedFilters.value.keyword.trim().toLowerCase()
const matchesKeyword = !keyword || [item.displayName, item.username, item.memberNo ?? '', String(item.authUserId)]
.some((value) => value.toLowerCase().includes(keyword))
return matchesKeyword && (!appliedFilters.value.status || item.status === appliedFilters.value.status)
const enabledTenants = computed(() => options.value.tenants.filter((tenant) =>
tenant.status === 'ACTIVE' || String(tenant.id) === form.tenantId,
))
const availableRoles = computed(() => options.value.roles.filter((role) =>
String(role.tenantId) === form.tenantId
&& (role.status === 'ACTIVE' || form.roleIds.includes(String(role.id))),
))
const formRules = computed<FormRules>(() => ({
username: editingUser.value ? [] : [
{ required: true, whitespace: true, message: '请输入用户名', trigger: 'blur' },
{ pattern: /^[A-Za-z0-9_.@-]{4,64}$/, message: '用户名为 4-64 位字母、数字或 _ . @ -', trigger: 'blur' },
],
displayName: editingUser.value && !canEdit.value ? [] : [{ required: true, whitespace: true, message: '请输入姓名', trigger: 'blur' }],
phone: editingUser.value && !canEdit.value ? [] : [
{ required: true, message: '请输入手机号', trigger: 'blur' },
{ pattern: /^1\d{10}$/, message: '请输入正确的 11 位手机号', trigger: 'blur' },
],
email: editingUser.value && !canEdit.value ? [] : [{ type: 'email', message: '请输入有效的邮箱地址', trigger: 'blur' }],
tenantId: editingUser.value && !canEdit.value ? [] : [{ required: true, message: '请选择所属租户', trigger: 'change' }],
roleIds: editingUser.value && !canEdit.value ? [] : [{ type: 'array', required: true, min: 1, message: '请选择角色', trigger: 'change' }],
password: editingUser.value && !form.resetPassword ? [] : [
{ required: true, message: '请输入密码', trigger: 'blur' },
{ pattern: /^(?=.*[A-Za-z])(?=.*\d).{8,64}$/, message: '密码为 8-64 位,且必须包含字母和数字', trigger: 'blur' },
],
confirmPassword: editingUser.value && !form.resetPassword ? [] : [
{ required: true, message: '请再次输入密码', trigger: 'blur' },
{ validator: (_rule, value, callback) => value === form.password ? callback() : callback(new Error('两次输入的密码不一致')), trigger: 'blur' },
],
}))
const filteredRows = computed(() => {
const keyword = filters.keyword.trim().toLowerCase()
return users.value.filter((item) => {
const matchesKeyword = !keyword || [item.username, item.displayName, item.phone ?? '', item.email ?? '', item.tenantName, ...item.roleNames]
.some((value) => value.toLowerCase().includes(keyword))
return matchesKeyword
&& (!filters.tenantId || String(item.tenantId) === filters.tenantId)
&& (!filters.status || item.status === filters.status)
})
})
const pagedRows = computed(() => filteredRows.value.slice((page.value - 1) * pageSize.value, page.value * pageSize.value))
const userColumns: DataTableColumn[] = [
{ key: 'actions', label: '操作', width: 355, fixed: 'left', slotName: 'actions' },
{ prop: 'displayName', label: '姓名', minWidth: 150 },
{ prop: 'username', label: '登录账号', minWidth: 150 },
{ prop: 'authUserId', label: '认证用户 ID', minWidth: 145 },
{ prop: 'memberNo', label: '成员编号', minWidth: 170 },
{ prop: 'memberType', label: '成员类型', minWidth: 130 },
{ key: 'roles', label: '角色', minWidth: 190, slotName: 'roles' },
{ key: 'actions', label: '操作', width: 170, fixed: 'left', slotName: 'actions' },
{ prop: 'username', label: '用户名', minWidth: 145 },
{ prop: 'displayName', label: '姓名', minWidth: 130 },
{ prop: 'tenantName', label: '所属租户', minWidth: 190 },
{ key: 'roles', label: '角色', minWidth: 180, slotName: 'roles' },
{ key: 'status', label: '状态', width: 100, slotName: 'status' },
{ key: 'lastLoginAt', label: '最后登录', minWidth: 170, slotName: 'lastLoginAt' },
]
async function loadUsers() {
loading.value = true
loadError.value = null
users.value = []
try {
const [userRecords, roleRecords] = await Promise.all([listPlatformInternalUsers(), listPlatformRoles()])
const [userRecords, optionRecords] = await Promise.all([
listPlatformManagedUsers(),
getPlatformUserOptions(),
])
users.value = userRecords
roles.value = roleRecords
options.value = optionRecords
} catch (error) {
loadError.value = getApiErrorDetails(error, '内部用户列表加载失败,请稍后重试')
users.value = []
loadError.value = getApiErrorDetails(error, '用户列表加载失败,请稍后重试')
} finally {
loading.value = false
}
}
function applyFilters() {
appliedFilters.value = { ...filters.value }
page.value = 1
void loadUsers()
}
function roleLabel(roleId: number | string) { return roleNames.value.get(String(roleId)) ?? `角色 #${roleId}` }
function openCreate() {
Object.assign(form, emptyForm())
editingMembershipId.value = null
captureBaseline()
const defaultTenant = options.value.tenants.find((tenant) => tenant.status === 'ACTIVE')
form.tenantId = defaultTenant ? String(defaultTenant.id) : ''
editingUser.value = null
editorOpen.value = true
nextTick(() => formRef.value?.clearValidate())
}
function openEdit(row: PlatformInternalUser) {
if (!canEdit.value) return
editingMembershipId.value = String(row.membershipId)
function openEdit(row: PlatformManagedUser) {
editingUser.value = row
Object.assign(form, {
authUserId: String(row.authUserId),
userType: row.memberType,
username: row.username,
displayName: row.displayName,
phone: row.phone ?? '',
email: row.email ?? '',
memberNo: row.memberNo ?? '',
tenantId: String(row.tenantId),
roleIds: row.roleIds.map(String),
password: '',
confirmPassword: '',
status: row.status,
resetPassword: false,
})
captureBaseline()
editorOpen.value = true
nextTick(() => formRef.value?.clearValidate())
}
function openRoleAssignment(row: PlatformInternalUser) {
if (!canGrantRoles.value) return
roleAssignmentUser.value = row
assignedRoleIds.value = row.roleIds.map(String)
roleEditorOpen.value = true
function handleTenantChange() {
const validRoleIds = new Set(availableRoles.value.map((role) => String(role.id)))
form.roleIds = form.roleIds.filter((roleId) => validRoleIds.has(roleId))
}
function isCurrentUser(row: PlatformInternalUser) {
function isCurrentUser(row: PlatformManagedUser | null) {
if (!row) return false
return String(row.userId) === auth.user?.id || String(row.authUserId) === auth.user?.id
}
function cannotDisable(row: PlatformManagedUser | null) {
return Boolean(row?.protectedAccount) || isCurrentUser(row)
}
async function saveUser() {
const valid = await formRef.value?.validate().catch(() => false)
if (!valid) return
saving.value = true
try {
if (editingMembershipId.value) {
await updatePlatformInternalUser(editingMembershipId.value, {
if (!editingUser.value) {
await createPlatformManagedUser({
username: form.username.trim(),
displayName: form.displayName.trim(),
phone: form.phone.trim(),
email: form.email.trim(),
memberNo: form.memberNo.trim(),
tenantId: form.tenantId,
roleIds: form.roleIds,
password: form.password,
status: form.status,
})
ElMessage.success('用户添加成功')
} else {
await createPlatformInternalUser({
authUserId: form.authUserId.trim(),
userType: form.userType,
displayName: form.displayName.trim(),
phone: form.phone.trim(),
email: form.email.trim(),
memberNo: form.memberNo.trim() || undefined,
roleIds: canGrantRoles.value ? form.roleIds : undefined,
})
const row = editingUser.value
if (canEdit.value) {
await updatePlatformManagedUser(row.membershipId, {
displayName: form.displayName.trim(),
phone: form.phone.trim(),
email: form.email.trim(),
tenantId: form.tenantId,
roleIds: form.roleIds,
})
}
if (canChangeStatus.value && form.status !== row.status) {
await changePlatformManagedUserStatus(row.membershipId, form.status)
}
if (canResetPassword.value && form.resetPassword) {
await resetPlatformManagedUserPassword(row.membershipId, form.password)
}
ElMessage.success(form.resetPassword ? '用户信息已更新,密码已重置' : '用户信息已更新')
}
editorOpen.value = false
ElMessage.success(editingMembershipId.value ? '内部用户已更新' : '内部用户已创建')
await loadUsers()
} catch (error) {
ElMessage.error(getApiErrorMessage(error, editingMembershipId.value ? '内部用户更新失败,请稍后重试' : '内部用户创建失败,请稍后重试'))
ElMessage.error(getApiErrorMessage(error, editingUser.value ? '用户更新失败,请稍后重试' : '用户添加失败,请稍后重试'))
} finally {
saving.value = false
}
}
async function toggleStatus(row: PlatformInternalUser) {
const target = row.status === 'ACTIVE' ? '停用' : '启用'
async function toggleStatus(row: PlatformManagedUser) {
const targetStatus = row.status === 'ACTIVE' ? 'DISABLED' : 'ACTIVE'
const targetLabel = targetStatus === 'ACTIVE' ? '启用' : '禁用'
try {
await ElMessageBox.confirm(`确认${target}内部用户“${row.displayName}”吗?`, '用户状态', { confirmButtonText: '确认', cancelButtonText: '取消' })
rowActionId.value = String(row.membershipId)
const updated = await changePlatformInternalUserStatus(row.membershipId, target === '启用' ? 'ACTIVE' : 'DISABLED')
Object.assign(row, updated)
ElMessage.success(`用户已${target}`)
} catch (error) {
if (error === 'cancel' || error === 'close') return
ElMessage.error(getApiErrorMessage(error, '用户状态更新失败,请稍后重试'))
} finally {
rowActionId.value = ''
}
}
async function resetPassword(row: PlatformInternalUser) {
try {
const { value } = await ElMessageBox.prompt(`为“${row.displayName}”设置新密码`, '重置密码', {
confirmButtonText: '确认重置',
await ElMessageBox.confirm(`确认${targetLabel}用户“${row.displayName}”吗?`, `${targetLabel}用户`, {
confirmButtonText: `确认${targetLabel}`,
cancelButtonText: '取消',
inputType: 'password',
inputPlaceholder: '8-64 位,必须包含字母和数字',
inputValidator: (password) => /^(?=.*[A-Za-z])(?=.*\d).{8,64}$/.test(password) || '密码需为 8-64 位,且同时包含字母和数字',
type: targetStatus === 'DISABLED' ? 'warning' : 'info',
})
rowActionId.value = String(row.membershipId)
await resetPlatformInternalUserPassword(row.membershipId, value)
ElMessage.success('密码已重置')
const updated = await changePlatformManagedUserStatus(row.membershipId, targetStatus)
Object.assign(row, updated)
ElMessage.success(`用户已${targetLabel}`)
} catch (error) {
if (error === 'cancel' || error === 'close') return
ElMessage.error(getApiErrorMessage(error, '密码重置失败,请稍后重试'))
ElMessage.error(getApiErrorMessage(error, `用户${targetLabel}失败,请稍后重试`))
} finally {
rowActionId.value = ''
}
}
async function saveRoleAssignment() {
if (!roleAssignmentUser.value) return
assigningRoles.value = true
try {
const updated = await assignPlatformInternalUserRoles(roleAssignmentUser.value.membershipId, assignedRoleIds.value)
const index = users.value.findIndex((item) => String(item.membershipId) === String(updated.membershipId))
if (index >= 0) users.value[index] = updated
roleEditorOpen.value = false
ElMessage.success('用户角色已更新')
} catch (error) {
ElMessage.error(getApiErrorMessage(error, '用户角色更新失败,请稍后重试'))
} finally {
assigningRoles.value = false
}
function formatLogin(value: string | null) {
if (!value) return '—'
return value.replace('T', ' ').slice(0, 16)
}
function resetFilters() {
filters.keyword = ''
filters.tenantId = ''
filters.status = ''
page.value = 1
}
onMounted(loadUsers)
@@ -240,34 +260,118 @@ onMounted(loadUsers)
<template>
<div class="business-page">
<el-alert v-if="loadError" type="error" :closable="false" show-icon role="alert">
<template #title><div class="api-error-alert-title"><span>{{ loadError.message }}</span><ApiErrorMeta :details="loadError" /></div><el-button link type="danger" @click="loadUsers">重新加载</el-button></template>
<template #title>
<div class="api-error-alert-title"><span>{{ loadError.message }}</span><ApiErrorMeta :details="loadError" /></div>
<el-button link type="danger" @click="loadUsers">重新加载</el-button>
</template>
</el-alert>
<QueryToolbar v-model="filters" class="surface-panel" ariaLabel="内部用户筛选" :fields="queryFields" @search="applyFilters" />
<section class="surface-panel table-panel">
<header class="panel-heading"><div><h2>内部用户 <span class="secondary-text">共 {{ filteredRows.length }} 条</span></h2><p>数据和维护操作均由平台 IAM 提供,角色关系按成员维度保存。</p></div><el-button v-if="canCreate" type="primary" @click="openCreate"><Plus :size="16" />新增用户</el-button></header>
<DataTable v-model:page="page" v-model:page-size="pageSize" :data="pagedRows" :columns="userColumns" :loading="loading" :total="filteredRows.length" row-key="membershipId" empty-text="没有符合条件的内部用户">
<template #actions="{ row }"><div v-if="canEdit || canChangeStatus || canResetPassword || canGrantRoles" class="table-actions"><el-button v-if="canEdit" link type="primary" :disabled="rowActionId === String((row as PlatformInternalUser).membershipId)" @click="openEdit(row as PlatformInternalUser)"><Pencil :size="15" />编辑</el-button><el-button v-if="canGrantRoles" link type="primary" :disabled="rowActionId === String((row as PlatformInternalUser).membershipId)" @click="openRoleAssignment(row as PlatformInternalUser)"><ShieldCheck :size="15" />分配角色</el-button><el-button v-if="canChangeStatus" link :type="(row as PlatformInternalUser).status === 'ACTIVE' ? 'danger' : 'success'" :loading="rowActionId === String((row as PlatformInternalUser).membershipId)" :disabled="isCurrentUser(row as PlatformInternalUser)" :title="isCurrentUser(row as PlatformInternalUser) ? '不能停用当前登录用户' : undefined" @click="toggleStatus(row as PlatformInternalUser)">{{ (row as PlatformInternalUser).status === 'ACTIVE' ? '停用' : '启用' }}</el-button><el-button v-if="canResetPassword" link type="warning" :loading="rowActionId === String((row as PlatformInternalUser).membershipId)" @click="resetPassword(row as PlatformInternalUser)"><KeyRound :size="15" />重置密码</el-button></div><span v-else class="secondary-text">仅查看</span></template>
<template #roles="{ row }"><div class="tag-list"><el-tag v-for="roleId in (row as PlatformInternalUser).roleIds" :key="roleId" effect="plain" size="small">{{ roleLabel(roleId) }}</el-tag><span v-if="(row as PlatformInternalUser).roleIds.length === 0" class="secondary-text">未分配</span></div></template>
<template #status="{ row }"><StatusBadge :status="(row as PlatformInternalUser).status === 'ACTIVE' ? '正常' : '停用'" /></template>
<header class="panel-heading">
<div><h2>用户管理 <span class="secondary-text">共 {{ filteredRows.length }} 条</span></h2></div>
<el-button v-if="canCreate" type="primary" @click="openCreate"><Plus :size="16" />新增用户</el-button>
</header>
<div class="query-toolbar">
<el-input v-model="filters.keyword" clearable placeholder="用户名、姓名、手机号、租户或角色" @keyup.enter="page = 1" />
<el-select v-model="filters.tenantId" clearable placeholder="全部租户" @change="page = 1">
<el-option v-for="tenant in options.tenants" :key="tenant.id" :label="tenant.name" :value="String(tenant.id)" />
</el-select>
<el-select v-model="filters.status" clearable placeholder="全部状态" @change="page = 1">
<el-option label="正常" value="ACTIVE" />
<el-option label="禁用" value="DISABLED" />
</el-select>
<el-button @click="resetFilters">重置</el-button>
</div>
<DataTable v-model:page="page" v-model:page-size="pageSize" :data="pagedRows" :columns="userColumns"
:loading="loading" :total="filteredRows.length" row-key="membershipId" empty-text="暂无用户数据">
<template #actions="{ row }">
<div class="table-actions">
<el-button v-if="canEdit || canChangeStatus || canResetPassword" link type="primary" @click="openEdit(row as PlatformManagedUser)">
<Pencil :size="15" />编辑
</el-button>
<el-button v-if="canChangeStatus" link :type="(row as PlatformManagedUser).status === 'ACTIVE' ? 'danger' : 'success'"
:loading="rowActionId === String((row as PlatformManagedUser).membershipId)"
:disabled="cannotDisable(row as PlatformManagedUser)"
:title="(row as PlatformManagedUser).protectedAccount ? '系统管理员不能被禁用' : isCurrentUser(row as PlatformManagedUser) ? '不能禁用当前登录用户' : undefined"
@click="toggleStatus(row as PlatformManagedUser)">
{{ (row as PlatformManagedUser).status === 'ACTIVE' ? '禁用' : '启用' }}
</el-button>
</div>
</template>
<template #roles="{ row }">
<div class="tag-list">
<el-tag v-for="role in (row as PlatformManagedUser).roleNames" :key="role" effect="plain" size="small">{{ role }}</el-tag>
<span v-if="!(row as PlatformManagedUser).roleNames.length" class="secondary-text">未分配</span>
</div>
</template>
<template #status="{ row }"><StatusBadge :status="(row as PlatformManagedUser).status === 'ACTIVE' ? '正常' : '禁用'" /></template>
<template #lastLoginAt="{ row }">{{ formatLogin((row as PlatformManagedUser).lastLoginAt) }}</template>
</DataTable>
</section>
<el-drawer v-model="editorOpen" :title="editorLabel" size="560px" class="business-drawer editor-drawer" :modal="false" :close-on-click-modal="false">
<el-form ref="formRef" :model="form" :rules="formRules" label-position="top" class="drawer-form">
<div class="form-section"><h3>用户信息</h3><div class="form-grid two-cols">
<el-form-item label="认证用户 ID" prop="authUserId" :required="!editingMembershipId"><el-input v-model="form.authUserId" :disabled="Boolean(editingMembershipId)" inputmode="numeric" placeholder="输入已有认证账号的数字 ID" /></el-form-item>
<el-form-item label="姓名" prop="displayName" required><el-input v-model="form.displayName" placeholder="如:张三" maxlength="64" /></el-form-item>
<el-form-item label="用户类型" prop="userType" :required="!editingMembershipId"><el-select v-model="form.userType" :disabled="Boolean(editingMembershipId)"><el-option label="平台内部用户" value="INTERNAL" /><el-option label="平台管理员" value="PLATFORM" /></el-select></el-form-item>
<el-form-item label="手机号"><el-input v-model="form.phone" placeholder="如:13800138000" inputmode="tel" /></el-form-item>
<el-form-item label="邮箱" prop="email"><el-input v-model="form.email" placeholder="如:name@example.com" inputmode="email" /></el-form-item>
<el-form-item v-if="editingMembershipId" label="成员编号" prop="memberNo" required><el-input v-model="form.memberNo" placeholder="如:PLATFORM-0001" maxlength="64" /></el-form-item>
<el-form-item v-if="canGrantRoles" label="角色"><el-select v-model="form.roleIds" multiple collapse-tags collapse-tags-tooltip placeholder="选择用户角色"><el-option v-for="role in roleOptions" :key="role.id" :label="role.roleName" :value="String(role.id)" :disabled="role.status !== 'ACTIVE'" /></el-select></el-form-item>
</div></div>
<el-dialog v-model="editorOpen" :title="editorLabel" width="min(760px, calc(100vw - 32px))" :close-on-click-modal="false" destroy-on-close>
<el-form ref="formRef" :model="form" :rules="formRules" label-position="top">
<div class="form-grid two-cols">
<el-form-item label="用户名" prop="username" required>
<el-input v-model="form.username" :disabled="Boolean(editingUser)" placeholder="登录用户名" maxlength="64" />
</el-form-item>
<el-form-item label="姓名" prop="displayName" required>
<el-input v-model="form.displayName" :disabled="Boolean(editingUser) && !canEdit" placeholder="真实姓名" maxlength="64" />
</el-form-item>
<el-form-item label="手机号" prop="phone" required>
<el-input v-model="form.phone" :disabled="Boolean(editingUser) && !canEdit" placeholder="手机号码" inputmode="tel" maxlength="11" />
</el-form-item>
<el-form-item label="邮箱" prop="email">
<el-input v-model="form.email" :disabled="Boolean(editingUser) && !canEdit" placeholder="邮箱地址" inputmode="email" maxlength="128" />
</el-form-item>
<el-form-item label="所属租户" prop="tenantId" required>
<el-select v-model="form.tenantId" :disabled="Boolean(editingUser) && (!canEdit || !canGrantRoles || editingUser?.protectedAccount)" placeholder="选择所属租户" @change="handleTenantChange">
<el-option v-for="tenant in enabledTenants" :key="tenant.id" :label="tenant.name" :value="String(tenant.id)" :disabled="tenant.status !== 'ACTIVE'" />
</el-select>
</el-form-item>
<el-form-item label="角色" prop="roleIds" required>
<el-select v-model="form.roleIds" multiple collapse-tags collapse-tags-tooltip
:disabled="Boolean(editingUser) && (!canEdit || !canGrantRoles || editingUser?.protectedAccount)" placeholder="选择角色">
<el-option v-for="role in availableRoles" :key="role.id" :label="role.name" :value="String(role.id)" :disabled="role.status !== 'ACTIVE'" />
</el-select>
</el-form-item>
<el-form-item label="状态" prop="status">
<el-select v-model="form.status" :disabled="Boolean(editingUser) && (!canChangeStatus || cannotDisable(editingUser))">
<el-option label="正常" value="ACTIVE" />
<el-option label="禁用" value="DISABLED" />
</el-select>
</el-form-item>
<el-form-item v-if="editingUser" label="最后登录">
<el-input :model-value="formatLogin(editingUser.lastLoginAt)" disabled />
</el-form-item>
</div>
<template v-if="!editingUser || canResetPassword">
<el-checkbox v-if="editingUser" v-model="form.resetPassword">同时重置密码</el-checkbox>
<div v-if="!editingUser || form.resetPassword" class="form-grid two-cols password-fields">
<el-form-item :label="editingUser ? '新密码' : '初始密码'" prop="password" required>
<el-input v-model="form.password" type="password" show-password autocomplete="new-password" placeholder="8-64 位,包含字母和数字" />
</el-form-item>
<el-form-item label="确认密码" prop="confirmPassword" required>
<el-input v-model="form.confirmPassword" type="password" show-password autocomplete="new-password" placeholder="再次输入密码" />
</el-form-item>
</div>
</template>
</el-form>
<template #footer><div class="drawer-footer"><el-button :disabled="saving" @click="editorOpen = false">取消</el-button><el-button v-if="editingMembershipId ? canEdit : canCreate" type="primary" :loading="saving" @click="saveUser">{{ editingMembershipId ? '保存修改' : '创建用户' }}</el-button></div></template>
</el-drawer>
<el-drawer v-model="roleEditorOpen" :title="roleAssignmentUser ? `分配角色:${roleAssignmentUser.displayName}` : '分配角色'" size="520px" class="business-drawer editor-drawer" :modal="false" :close-on-click-modal="false">
<el-form label-position="top" class="drawer-form"><div class="form-section"><h3>平台角色</h3><p class="secondary-text">保存后按后端契约全量替换当前用户的角色;不选择角色表示清空。</p><el-form-item label="角色"><el-select v-model="assignedRoleIds" multiple collapse-tags collapse-tags-tooltip placeholder="选择用户角色"><el-option v-for="role in roleOptions" :key="role.id" :label="role.roleName" :value="String(role.id)" :disabled="role.status !== 'ACTIVE'" /></el-select></el-form-item></div></el-form>
<template #footer><div class="drawer-footer"><el-button :disabled="assigningRoles" @click="roleEditorOpen = false">取消</el-button><el-button type="primary" :loading="assigningRoles" @click="saveRoleAssignment">保存角色</el-button></div></template>
</el-drawer>
<template #footer>
<el-button :disabled="saving" @click="editorOpen = false">取消</el-button>
<el-button type="primary" :loading="saving" @click="saveUser">{{ editingUser ? '保存修改' : '确认添加' }}</el-button>
</template>
</el-dialog>
</div>
</template>
<style scoped>
.query-toolbar { display: grid; grid-template-columns: minmax(240px, 1fr) 220px 160px auto; gap: 12px; padding: 0 20px 16px; }
.password-fields { margin-top: 16px; }
@media (max-width: 720px) {
.query-toolbar, .form-grid.two-cols { grid-template-columns: 1fr; }
}
</style>