import { defHttp } from '#/api/request';
|
|
export type DmsAction = 'CREATE' | 'DELETE' | 'READ' | 'UPDATE';
|
export type DmsPrincipalType = 'GROUP' | 'ORG' | 'POSITION' | 'ROLE' | 'USER';
|
export type DmsResourceScope = 'SELF' | 'SUBTREE';
|
export type DmsResourceType = 'DOCUMENT' | 'FILE_VERSION' | 'FOLDER';
|
export type DmsSourceType = 'MANUAL' | 'MIGRATION' | 'SYSTEM' | 'WORKFLOW';
|
export type DmsAccessExclusionStatus = 'ACTIVE' | 'EXPIRED' | 'PENDING' | 'REVOKED';
|
|
export interface DmsApiResult<T> {
|
code: number;
|
data: T;
|
msg?: string;
|
}
|
|
export interface DmsCursorPage<T> {
|
hasMore: boolean;
|
list: T[];
|
nextCursor?: string;
|
}
|
|
export interface DmsPermissionResource {
|
checksumSha256?: string;
|
createdAt: string;
|
documentId?: string;
|
documentName?: string;
|
documentNo?: string;
|
effectiveFrom?: string;
|
effectiveTo?: string;
|
fileName?: string;
|
id: string;
|
lifecycleStatus?: 'EFFECTIVE' | 'EXPIRED' | 'INVALIDATED' | 'OBSOLETE' | 'PENDING_EFFECTIVE' | 'REVOKED' | 'SUPERSEDED';
|
mimeType?: string;
|
name: string;
|
parentId?: string;
|
resourceType: DmsResourceType;
|
sizeBytes?: number;
|
sourceId: string;
|
sourceType: string;
|
versionLabel?: string;
|
versionNo?: number;
|
}
|
|
export interface DmsPermissionGrant {
|
actionCode: DmsAction;
|
createdAt: string;
|
grantReason?: string;
|
id: string;
|
includeChildOrgs: boolean;
|
inherited: boolean;
|
maxUseCount?: number;
|
principalId: string;
|
principalName?: string;
|
principalType: DmsPrincipalType;
|
remainingUseCount?: number;
|
resourceId: string;
|
resourceScope: DmsResourceScope;
|
resourceType: DmsResourceType;
|
revokeReason?: string;
|
revokedAt?: string;
|
revision: number;
|
sourceId: string;
|
sourceType: DmsSourceType;
|
status: 'ACTIVE' | 'EXHAUSTED' | 'EXPIRED' | 'PENDING' | 'REVOKED';
|
updatedAt: string;
|
usedCount: number;
|
validFrom: string;
|
validTo?: string;
|
}
|
|
export interface DmsPermissionUsage {
|
actionCode: DmsAction;
|
actualResourceId: string;
|
actualResourceType: DmsResourceType;
|
id: number;
|
operationId: string;
|
permissionId: string;
|
sessionExpiresAt?: string;
|
usedAt: string;
|
userId: string;
|
}
|
|
export interface DmsAccessExclusion {
|
actionCode: 'READ';
|
createdAt: string;
|
excludeReason?: string;
|
excludedById: string;
|
excludedByType: string;
|
id: string;
|
resourceId: string;
|
resourceType: Exclude<DmsResourceType, 'FOLDER'>;
|
revokeReason?: string;
|
revokedAt?: string;
|
revokedById?: string;
|
revokedByType?: string;
|
revision: number;
|
sourceId: string;
|
sourceType: DmsSourceType;
|
status: DmsAccessExclusionStatus;
|
updatedAt: string;
|
userId: string;
|
userName?: string;
|
validFrom: string;
|
validTo?: string;
|
}
|
|
export interface DmsAccessExclusionItem {
|
excludeReason?: string;
|
resourceId: string;
|
resourceType: Exclude<DmsResourceType, 'FOLDER'>;
|
userId: string;
|
validFrom?: string;
|
validTo?: string;
|
}
|
|
export interface DmsAccessExclusionBatch {
|
items: DmsAccessExclusionItem[];
|
sourceId: string;
|
sourceType: DmsSourceType;
|
}
|
|
export interface DmsFolderCreate {
|
name: string;
|
parentId: string;
|
sourceId: string;
|
}
|
|
export interface DmsPrincipalOption {
|
id: string;
|
name: string;
|
}
|
|
export interface DmsGrantItem {
|
actionCode: DmsAction;
|
grantReason?: string;
|
includeChildOrgs: boolean;
|
maxUseCount?: number;
|
principalId: string;
|
principalType: DmsPrincipalType;
|
resourceId: string;
|
resourceScope: DmsResourceScope;
|
resourceType: DmsResourceType;
|
validFrom?: string;
|
validTo?: string;
|
}
|
|
export interface DmsGrantBatch {
|
items: DmsGrantItem[];
|
sourceId: string;
|
sourceType: DmsSourceType;
|
}
|
|
const prefix = '/api/dms';
|
const silentErrorOptions = { errorMessageMode: 'none' as const };
|
|
export function getPermissionAdminCapabilities() {
|
return defHttp.get<DmsApiResult<{ permissionAdministrator: boolean }>>({ url: `${prefix}/permission-admin/capabilities` }, silentErrorOptions);
|
}
|
|
export function getPermissionResources(params: { cursor?: string; pageSize?: number; resourceType?: DmsResourceType }) {
|
return defHttp.get<DmsApiResult<DmsCursorPage<DmsPermissionResource>>>({ url: `${prefix}/permission-resources`, params }, silentErrorOptions);
|
}
|
|
export function getPermissionResourceTree(params: { pageSize?: number; parentId?: string }) {
|
return defHttp.get<DmsApiResult<DmsPermissionResource[]>>({ url: `${prefix}/permission-resources/tree`, params }, silentErrorOptions);
|
}
|
|
export function getPermissionResource(id: string) {
|
return defHttp.get<DmsApiResult<DmsPermissionResource>>({ url: `${prefix}/permission-resources/${id}` }, silentErrorOptions);
|
}
|
|
export function createDmsFolder(data: DmsFolderCreate) {
|
return defHttp.post<DmsApiResult<DmsPermissionResource>>({ url: `${prefix}/folders`, data }, silentErrorOptions);
|
}
|
|
export function getResourceGrants(id: string) {
|
return defHttp.get<DmsApiResult<DmsPermissionGrant[]>>({ url: `${prefix}/permission-resources/${id}/grants` }, silentErrorOptions);
|
}
|
|
export function createPermissionGrant(data: DmsGrantBatch) {
|
return defHttp.post<DmsApiResult<DmsPermissionGrant[]>>({ url: `${prefix}/permission-grants`, data }, silentErrorOptions);
|
}
|
|
export function getPermissionGrant(id: string) {
|
return defHttp.get<DmsApiResult<DmsPermissionGrant>>({ url: `${prefix}/permission-grants/${id}` }, silentErrorOptions);
|
}
|
|
export function revokePermissionGrants(data: { permissionIds: string[]; reason: string }) {
|
return defHttp.post<DmsApiResult<DmsPermissionGrant[]>>({ url: `${prefix}/permission-grants/revoke`, data }, silentErrorOptions);
|
}
|
|
export function getPermissionUsages(id: string, pageSize = 100) {
|
return defHttp.get<DmsApiResult<DmsPermissionUsage[]>>({ url: `${prefix}/permission-grants/${id}/usages`, params: { pageSize } }, silentErrorOptions);
|
}
|
|
export function getAccessExclusions(params: { cursor?: string; pageSize?: number; resourceId?: string; userId?: string }) {
|
return defHttp.get<DmsApiResult<DmsCursorPage<DmsAccessExclusion>>>({ url: `${prefix}/access-exclusions`, params }, silentErrorOptions);
|
}
|
|
export function createAccessExclusions(data: DmsAccessExclusionBatch) {
|
return defHttp.post<DmsApiResult<DmsAccessExclusion[]>>({ url: `${prefix}/access-exclusions`, data }, silentErrorOptions);
|
}
|
|
export function revokeAccessExclusions(data: { exclusionIds: string[]; reason: string }) {
|
return defHttp.post<DmsApiResult<DmsAccessExclusion[]>>({ url: `${prefix}/access-exclusions/revoke`, data }, silentErrorOptions);
|
}
|
|
export function getPermissionGroups(params: { keyword?: string; pageSize?: number }) {
|
return defHttp.get<DmsApiResult<DmsPrincipalOption[]>>({ url: `${prefix}/permission-principals/groups`, params }, silentErrorOptions);
|
}
|
