forked from erp-dev/erp
feat: relaxed in restrict out
This commit is contained in:
@@ -20,4 +20,5 @@ __all__ = [
|
||||
'get_stock_change',
|
||||
'set_merchant_auto_complete_stock_change',
|
||||
'stateflow',
|
||||
'create_user_with_profile',
|
||||
]
|
||||
|
||||
@@ -63,6 +63,7 @@ stock_change_views/
|
||||
```python
|
||||
# 这些接口保持不变,URL 配置无需修改
|
||||
create_full_stock_change = CreateStockChangeView.as_view()
|
||||
create_relaxed_stock_change = CreateStockChangeRelaxedView.as_view()
|
||||
list_stock_changes = ListStockChangesView.as_view()
|
||||
get_stock_change = GetStockChangeView.as_view()
|
||||
set_merchant_auto_complete_stock_change = SetMerchantAutoCompleteView.as_view()
|
||||
@@ -87,6 +88,7 @@ from api_v1.views import stock_change_views
|
||||
|
||||
urlpatterns = [
|
||||
path('stock-change/', stock_change_views.create_full_stock_change),
|
||||
path('stock-change/relaxed/', stock_change_views.create_relaxed_stock_change),
|
||||
path('stock-changes/', stock_change_views.list_stock_changes),
|
||||
path('stock-change/<int:record_id>/', stock_change_views.get_stock_change),
|
||||
path('set-merchant-auto-complete-stock-change/', stock_change_views.set_merchant_auto_complete_stock_change),
|
||||
@@ -98,6 +100,7 @@ urlpatterns = [
|
||||
```python
|
||||
from api_v1.views.stock_change_views import (
|
||||
CreateStockChangeView,
|
||||
CreateStockChangeRelaxedView,
|
||||
ListStockChangesView,
|
||||
GetStockChangeView,
|
||||
SetMerchantAutoCompleteView,
|
||||
@@ -105,6 +108,7 @@ from api_v1.views.stock_change_views import (
|
||||
|
||||
urlpatterns = [
|
||||
path('stock-change/', CreateStockChangeView.as_view()),
|
||||
path('stock-change/relaxed/', CreateStockChangeRelaxedView.as_view()),
|
||||
path('stock-changes/', ListStockChangesView.as_view()),
|
||||
path('stock-change/<int:record_id>/', GetStockChangeView.as_view()),
|
||||
path('set-merchant-auto-complete-stock-change/', SetMerchantAutoCompleteView.as_view()),
|
||||
|
||||
@@ -5,13 +5,14 @@
|
||||
"""
|
||||
|
||||
from .mixins import StockChangeViewMixin
|
||||
from .create import CreateStockChangeView
|
||||
from .create import CreateStockChangeView, CreateStockChangeRelaxedView
|
||||
from .list import ListStockChangesView
|
||||
from .detail import GetStockChangeView
|
||||
from .settings import SetMerchantAutoCompleteView
|
||||
|
||||
# 向后兼容:保持原有的函数式接口
|
||||
create_full_stock_change = CreateStockChangeView.as_view()
|
||||
create_relaxed_stock_change = CreateStockChangeRelaxedView.as_view()
|
||||
list_stock_changes = ListStockChangesView.as_view()
|
||||
get_stock_change = GetStockChangeView.as_view()
|
||||
set_merchant_auto_complete_stock_change = SetMerchantAutoCompleteView.as_view()
|
||||
@@ -19,10 +20,12 @@ set_merchant_auto_complete_stock_change = SetMerchantAutoCompleteView.as_view()
|
||||
__all__ = [
|
||||
'StockChangeViewMixin',
|
||||
'CreateStockChangeView',
|
||||
'CreateStockChangeRelaxedView',
|
||||
'ListStockChangesView',
|
||||
'GetStockChangeView',
|
||||
'SetMerchantAutoCompleteView',
|
||||
'create_full_stock_change',
|
||||
'create_relaxed_stock_change',
|
||||
'list_stock_changes',
|
||||
'get_stock_change',
|
||||
'set_merchant_auto_complete_stock_change',
|
||||
|
||||
@@ -126,3 +126,89 @@ class CreateStockChangeView(StockChangeViewMixin, views.APIView):
|
||||
'error': '创建库存变动记录失败',
|
||||
'message': str(e)
|
||||
}, status=status.HTTP_500_INTERNAL_SERVER_ERROR)
|
||||
|
||||
|
||||
class CreateStockChangeRelaxedView(StockChangeViewMixin, views.APIView):
|
||||
"""宽松模式:根据总量与单条数量拆分的出入库记录"""
|
||||
|
||||
permission_classes = [IsAuthenticated]
|
||||
|
||||
@extend_schema(
|
||||
tags=['创建出入库'],
|
||||
request=serializers.CreateStockChangeRelaxedSerializer,
|
||||
responses={201: serializers.CreateStockChangeResponseSerializer},
|
||||
summary="创建库存变动记录(宽松模式)",
|
||||
description="根据总数量与单条数量自动拆分明细"
|
||||
)
|
||||
def post(self, request):
|
||||
if not self.check_employee_permission(request):
|
||||
return self.permission_error_response('无权限访问')
|
||||
|
||||
record_data = {
|
||||
'type': request.data.get('type'),
|
||||
'warehouse': request.data.get('warehouse'),
|
||||
'source_type': request.data.get('source_type'),
|
||||
'source_id': request.data.get('source_id'),
|
||||
}
|
||||
|
||||
if not all([record_data['type'], record_data['warehouse'], record_data['source_type']]):
|
||||
return Response({
|
||||
'error': '缺少必要参数',
|
||||
'message': '请提供 type, warehouse, source_type'
|
||||
}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
products_data = request.data.get('products', [])
|
||||
if not products_data:
|
||||
return Response({
|
||||
'error': '产品列表不能为空'
|
||||
}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
if not self.validate_warehouse_visibility(record_data['warehouse'], request):
|
||||
return Response({
|
||||
'error': f'仓库ID {record_data["warehouse"]} 对当前用户不可见'
|
||||
}, status=status.HTTP_403_FORBIDDEN)
|
||||
|
||||
for p in products_data:
|
||||
product_id = p.get('product')
|
||||
if not self.validate_product_visibility(product_id, request):
|
||||
return Response({
|
||||
'error': f'产品ID {product_id} 对当前用户不可见'
|
||||
}, status=status.HTTP_403_FORBIDDEN)
|
||||
|
||||
serializer = serializers.CreateStockChangeRelaxedSerializer(data={'products': products_data})
|
||||
if not serializer.is_valid():
|
||||
return Response({
|
||||
'error': '产品数据验证失败',
|
||||
'details': serializer.errors
|
||||
}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
try:
|
||||
stock_change_record, created_details, created_count = stock_services.create_stock_change_record_relaxed(
|
||||
merchant=request.user.employee.merchant,
|
||||
created_by=request.user,
|
||||
type=record_data['type'],
|
||||
warehouse_id=record_data['warehouse'],
|
||||
source_type=record_data['source_type'],
|
||||
source_id=record_data['source_id'],
|
||||
products=products_data,
|
||||
)
|
||||
response_serializer = serializers.CreateStockChangeResponseSerializer({
|
||||
'stock_change_record': stock_change_record,
|
||||
'details': created_details,
|
||||
'message': f'成功创建库存变动记录及 {created_count} 条明细',
|
||||
'created_details_count': created_count
|
||||
})
|
||||
|
||||
return Response(response_serializer.data, status=status.HTTP_201_CREATED)
|
||||
|
||||
except ValueError as e:
|
||||
return Response({
|
||||
'error': str(e)
|
||||
}, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
except Exception as e:
|
||||
logger.error(f"创建宽松模式库存变动记录失败: {str(e)}", exc_info=True)
|
||||
return Response({
|
||||
'error': '创建库存变动记录失败',
|
||||
'message': str(e)
|
||||
}, status=status.HTTP_500_INTERNAL_SERVER_ERROR)
|
||||
|
||||
123
api_v1/views/users.py
Normal file
123
api_v1/views/users.py
Normal file
@@ -0,0 +1,123 @@
|
||||
from django.contrib.auth.models import User
|
||||
from rest_framework.decorators import permission_classes
|
||||
from rest_framework.permissions import IsAuthenticated, DjangoModelPermissions
|
||||
from rest_framework.response import Response
|
||||
from rest_framework.pagination import LimitOffsetPagination
|
||||
from rest_framework import status, serializers
|
||||
from rest_framework.generics import GenericAPIView
|
||||
from basic_info.models import UserProfile
|
||||
|
||||
|
||||
class UserCreationSerializer(serializers.Serializer):
|
||||
"""用户创建序列化器"""
|
||||
username = serializers.CharField(max_length=150)
|
||||
email = serializers.EmailField(required=False)
|
||||
password = serializers.CharField(min_length=6, write_only=True)
|
||||
is_staff = serializers.BooleanField(default=False)
|
||||
description = serializers.CharField(required=False, allow_blank=True)
|
||||
merchant_id = serializers.IntegerField()
|
||||
|
||||
def validate_username(self, value):
|
||||
"""验证用户名是否已存在"""
|
||||
if User.objects.filter(username=value).exists():
|
||||
raise serializers.ValidationError("用户名已存在")
|
||||
return value
|
||||
|
||||
def validate_merchant_id(self, value):
|
||||
"""验证merchant_id是否存在"""
|
||||
from basic_info.models import Merchant
|
||||
if not Merchant.objects.filter(id=value).exists():
|
||||
raise serializers.ValidationError("商户不存在")
|
||||
return value
|
||||
|
||||
|
||||
class UserSerializer(serializers.ModelSerializer):
|
||||
"""用户信息序列化器"""
|
||||
class Meta:
|
||||
model = User
|
||||
fields = ['id', 'username', 'email', 'is_staff', 'is_active', 'date_joined']
|
||||
|
||||
|
||||
class UserProfileDetailSerializer(serializers.ModelSerializer):
|
||||
"""用户资料详细信息序列化器"""
|
||||
user = UserSerializer(read_only=True)
|
||||
|
||||
class Meta:
|
||||
model = UserProfile
|
||||
fields = ['id', 'user', 'merchant', 'description', 'created_at', 'updated_at']
|
||||
|
||||
|
||||
class CreateUserWithProfileView(GenericAPIView):
|
||||
"""创建用户和关联的用户资料信息视图"""
|
||||
queryset = User.objects.all()
|
||||
permission_classes = [IsAuthenticated, DjangoModelPermissions]
|
||||
pagination_class = LimitOffsetPagination
|
||||
|
||||
def post(self, request):
|
||||
"""
|
||||
创建用户和用户资料
|
||||
|
||||
POST /api/v1/users/create/
|
||||
|
||||
请求参数:
|
||||
- username: 用户名 (必需)
|
||||
- email: 邮箱 (可选)
|
||||
- password: 密码 (必需, 最少6位)
|
||||
- is_staff: 是否为员工 (可选, 默认为False)
|
||||
- description: 用户资料描述 (可选)
|
||||
- merchant_id: 商户ID (必需)
|
||||
|
||||
返回:
|
||||
- user: 创建的用户信息
|
||||
- profile: 创建的用户资料信息
|
||||
"""
|
||||
# 检查当前用户是否有权限(超级用户或有员工身份)
|
||||
if not request.user.is_authenticated:
|
||||
return Response({'error': '未授权'}, status=status.HTTP_401_UNAUTHORIZED)
|
||||
|
||||
# 序列化和验证请求数据
|
||||
serializer = UserCreationSerializer(data=request.data)
|
||||
if not serializer.is_valid():
|
||||
return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
|
||||
|
||||
username = serializer.validated_data['username']
|
||||
email = serializer.validated_data.get('email', '')
|
||||
password = serializer.validated_data['password']
|
||||
is_staff = serializer.validated_data.get('is_staff', False)
|
||||
description = serializer.validated_data.get('description', '')
|
||||
merchant_id = serializer.validated_data['merchant_id']
|
||||
|
||||
try:
|
||||
# 创建用户
|
||||
user = User.objects.create_user(
|
||||
username=username,
|
||||
email=email,
|
||||
password=password,
|
||||
is_staff=is_staff
|
||||
)
|
||||
|
||||
# 创建用户资料
|
||||
from basic_info.models import Merchant
|
||||
merchant = Merchant.objects.get(id=merchant_id)
|
||||
profile = UserProfile.objects.create(
|
||||
user=user,
|
||||
merchant=merchant,
|
||||
description=description
|
||||
)
|
||||
|
||||
# 返回创建的用户和用户资料信息
|
||||
user_data = UserSerializer(user).data
|
||||
profile_data = UserProfileDetailSerializer(profile).data
|
||||
|
||||
return Response({
|
||||
'user': user_data,
|
||||
'profile': profile_data
|
||||
}, status=status.HTTP_201_CREATED)
|
||||
|
||||
except Exception as e:
|
||||
# 如果创建过程中出现错误,删除已创建的用户
|
||||
if 'user' in locals():
|
||||
user.delete()
|
||||
return Response({
|
||||
'error': f'创建用户失败: {str(e)}'
|
||||
}, status=status.HTTP_500_INTERNAL_SERVER_ERROR)
|
||||
Reference in New Issue
Block a user