dd5b603149
- 项目总群：≥3 人 appchat/create 自动建群（chatid=pgc+projectId），成员 diff 增删同步；DROP project_group_chats；推送改 appchat/send 群发、无群降级逐人 - 任务负责人：tasks.owner_userid（新建/编辑任务通讯录选人），task_set_owner 分配即预建 tgc 任务群发介绍，群主链接只归属负责人 - 任务编辑 task_update：基础字段+截图任务数量/关键词/说明，contents 调平只删 available 尾行 - 删除「一键推送」：task-one-click-push-service 整体移除（recordCardAck 移入 wecom-callback-events） - 负责人后台视角：users.wecom_userid 绑定，lib/owner-scope 行级过滤（undefined=全量/""=空范围/非空=过滤），~30 action 补 managerGate/taskOwnerGate，owner 登录仅见工作台/任务中心/数据回收/复盘报表 - 任务绑定客户群+进群活码：tasks 增 customer_chat_id/name、join_config_id、join_qr_code 4 列，join_way add/update/get/del（换绑走 update 保 config_id 活码不变），后台「客户群」弹窗，portal 认领后扫码自助进群（满员自动开新群） - 迁移 0013/0014/0015；催办支持按任务；企微可信域名 IP 验证文件 - 288 测试全绿；真机全链路验收通过（列群/活码四端点/portal 渲染/解绑清空）
62 lines
1.7 KiB
TypeScript
62 lines
1.7 KiB
TypeScript
import type { DatabaseClient } from "./database";
|
|
import { getRequestPrincipal } from "./user-auth";
|
|
|
|
export type OwnerScope =
|
|
| { kind: "full" }
|
|
| { kind: "owner"; wecomUserId: string };
|
|
|
|
export async function getOwnerScope(request: Request): Promise<OwnerScope> {
|
|
const principal = await getRequestPrincipal(request);
|
|
if (!principal) return { kind: "owner", wecomUserId: "" };
|
|
if (principal.kind === "internal") return { kind: "full" };
|
|
if (
|
|
principal.user.role === "super_admin" ||
|
|
principal.user.role === "admin"
|
|
) {
|
|
return { kind: "full" };
|
|
}
|
|
return { kind: "owner", wecomUserId: principal.user.wecom_userid ?? "" };
|
|
}
|
|
|
|
export function ownerScopeUserid(scope: OwnerScope): string | undefined {
|
|
return scope.kind === "owner" ? scope.wecomUserId : undefined;
|
|
}
|
|
|
|
export async function isTaskOwner(
|
|
db: DatabaseClient,
|
|
taskId: string,
|
|
wecomUserId: string,
|
|
) {
|
|
const id = String(taskId ?? "").trim();
|
|
if (!id || !wecomUserId) return false;
|
|
const row = await db
|
|
.prepare("SELECT id FROM tasks WHERE id = ? AND owner_userid = ? LIMIT 1")
|
|
.bind(id, wecomUserId)
|
|
.first<{ id: string }>();
|
|
return Boolean(row);
|
|
}
|
|
|
|
export async function isDistributionOwner(
|
|
db: DatabaseClient,
|
|
distributionId: string,
|
|
wecomUserId: string,
|
|
) {
|
|
const id = String(distributionId ?? "").trim();
|
|
if (!id || !wecomUserId) return false;
|
|
const row = await db
|
|
.prepare(
|
|
`SELECT d.id
|
|
FROM distributions d
|
|
JOIN tasks t ON t.id = d.task_id
|
|
WHERE d.id = ? AND t.owner_userid = ?
|
|
LIMIT 1`,
|
|
)
|
|
.bind(id, wecomUserId)
|
|
.first<{ id: string }>();
|
|
return Boolean(row);
|
|
}
|
|
|
|
export function ownerForbidden() {
|
|
return Response.json({ error: "该任务未分配给您，无权操作" }, { status: 403 });
|
|
}
|