328 lines
15 KiB
Python
328 lines
15 KiB
Python
"""CMS 用户管理 + 师生关系管理 + 带教医生「我的学生」。
|
||
|
||
用户管理（超管全平台 / 医院管理员本院）：CMS-USER-1~8、CMS-HUSER-1~3。
|
||
师生关系管理（医院管理员）：CMS-REL-1~4。
|
||
带教医生「我的学生」（doctor 名下学生，只读）：CMS-TEA-1~2。
|
||
"""
|
||
import re
|
||
|
||
from django.db import IntegrityError
|
||
from rest_framework import viewsets, filters, status
|
||
from rest_framework.decorators import action
|
||
from rest_framework.parsers import MultiPartParser, FormParser
|
||
from rest_framework.permissions import IsAuthenticated
|
||
from rest_framework.response import Response
|
||
from rest_framework import serializers
|
||
from django_filters.rest_framework import DjangoFilterBackend
|
||
from drf_spectacular.utils import extend_schema, extend_schema_view
|
||
|
||
from config.exceptions import AppError
|
||
from apps.cms.permissions import IsSuperOrHospitalAdmin, IsTeacher, is_super
|
||
from apps.common.excel import xlsx_response, rows_from_xlsx
|
||
from .models import User, Institution, TeacherStudentRelation
|
||
from .utils.jwt_redis import invalidate_user_tokens
|
||
|
||
ALL_ROLES = ('super_admin', 'hospital_admin', 'content_admin', 'doctor', 'student')
|
||
# 医院管理员可管理 / 创建的角色（本院：医生、学生、内容管理员）
|
||
# —— 医院管理员可给本院工作人员授予内容管理员权限，故内容管理员也纳入其人员管理范围。
|
||
HOSPITAL_ADMIN_ROLES = ('doctor', 'student', 'content_admin')
|
||
ROLE_LABEL_BY_CODE = {
|
||
'super_admin': '超级管理员', 'hospital_admin': '医院管理员',
|
||
'content_admin': '内容管理员', 'doctor': '医生', 'student': '学生',
|
||
}
|
||
ROLE_CODE_BY_LABEL = {
|
||
'超级管理员': 'super_admin', '医院管理员': 'hospital_admin',
|
||
'内容管理员': 'content_admin', '医生': 'doctor', '带教医生': 'doctor',
|
||
'带教老师': 'doctor', '学生': 'student', '医学生': 'student',
|
||
}
|
||
USER_IMPORT_HEADERS = ['手机号', '姓名', '角色', '机构编码']
|
||
USER_EXPORT_HEADERS = ['ID', '手机号', '姓名', '角色', '机构', '状态']
|
||
|
||
|
||
def _resolve_role(value):
|
||
value = (value or '').strip()
|
||
if value in ALL_ROLES:
|
||
return value
|
||
return ROLE_CODE_BY_LABEL.get(value)
|
||
|
||
|
||
# ── 序列化器 ──────────────────────────────────────────────────────────────────
|
||
|
||
class CmsUserSerializer(serializers.ModelSerializer):
|
||
"""读取（列表 / 详情）。"""
|
||
institution_name = serializers.CharField(source='institution.name', read_only=True, default=None)
|
||
role_label = serializers.SerializerMethodField()
|
||
|
||
class Meta:
|
||
model = User
|
||
fields = [
|
||
'id', 'username', 'real_name', 'phone', 'role_type', 'role_label',
|
||
'institution', 'institution_name',
|
||
'gender', 'title_name', 'major', 'training_stage', 'status', 'created_at',
|
||
]
|
||
|
||
def get_role_label(self, obj):
|
||
return ROLE_LABEL_BY_CODE.get(obj.role_type, obj.role_type)
|
||
|
||
|
||
class CmsUserWriteSerializer(serializers.ModelSerializer):
|
||
"""新增 / 编辑（role 必填）。"""
|
||
phone = serializers.CharField(max_length=20)
|
||
|
||
class Meta:
|
||
model = User
|
||
# 科室不在 CMS 维护（科室仅用于病例分类，用户在移动端自选学习科室）
|
||
fields = [
|
||
'real_name', 'phone', 'role_type', 'institution',
|
||
'gender', 'title_name', 'major', 'training_stage', 'status',
|
||
]
|
||
|
||
def validate_phone(self, value):
|
||
value = (value or '').strip()
|
||
if not re.match(r'^1[3-9]\d{9}$', value):
|
||
raise AppError('CMS_VALIDATION_ERROR', '手机号格式不合法', status_code=400)
|
||
qs = User.all_objects.filter(phone=value)
|
||
if self.instance is not None:
|
||
qs = qs.exclude(pk=self.instance.pk)
|
||
if qs.exists():
|
||
raise AppError('CMS_USER_PHONE_EXISTS', '手机号已存在', status_code=400)
|
||
return value
|
||
|
||
def validate(self, attrs):
|
||
"""新增：角色/机构/姓名必填。
|
||
编辑：局部更新——角色/机构不必每次带（不传保持原值），但**若传则不能为空/非法**。
|
||
医院管理员：角色仅限 doctor/student，机构强制本院。
|
||
"""
|
||
actor = self.context['request'].user
|
||
actor_is_super = is_super(actor)
|
||
is_create = self.instance is None
|
||
|
||
# 角色：新增必填；编辑时若出现在请求里则校验非空且合法
|
||
if is_create or 'role_type' in attrs:
|
||
role = attrs.get('role_type')
|
||
if not role:
|
||
raise AppError('CMS_VALIDATION_ERROR', '角色（role_type）不能为空', status_code=400)
|
||
if role not in ALL_ROLES:
|
||
raise AppError('CMS_VALIDATION_ERROR', '角色非法', status_code=400)
|
||
if not actor_is_super and role not in HOSPITAL_ADMIN_ROLES:
|
||
raise AppError('CMS_ROLE_NOT_ALLOWED', '医院管理员只能管理医生 / 学生 / 内容管理员', status_code=403)
|
||
|
||
# 机构
|
||
if actor_is_super:
|
||
# 超管：机构必填（编辑时若传则不能为空）
|
||
if is_create or 'institution' in attrs:
|
||
if not attrs.get('institution'):
|
||
raise AppError('CMS_VALIDATION_ERROR', '机构（institution）不能为空', status_code=400)
|
||
else:
|
||
# 医院管理员：机构强制为本院（忽略请求里传的机构）
|
||
if not actor.institution_id:
|
||
raise AppError('CMS_NO_INSTITUTION', '当前医院管理员无所属机构，无法管理用户', status_code=403)
|
||
attrs['institution'] = actor.institution
|
||
|
||
# 姓名：仅新增必填
|
||
if is_create and not (attrs.get('real_name') or '').strip():
|
||
raise AppError('CMS_VALIDATION_ERROR', '姓名必填', status_code=400)
|
||
return attrs
|
||
|
||
def create(self, validated_data):
|
||
phone = validated_data['phone']
|
||
try:
|
||
return User.objects.create_user(
|
||
username=phone, password=f'Pass{phone}', **validated_data
|
||
)
|
||
except IntegrityError:
|
||
raise AppError('CMS_USER_PHONE_EXISTS', '手机号已存在', status_code=400)
|
||
|
||
def update(self, instance, validated_data):
|
||
for key, val in validated_data.items():
|
||
setattr(instance, key, val)
|
||
instance.save()
|
||
return instance
|
||
|
||
|
||
# ── ViewSet ──────────────────────────────────────────────────────────────────
|
||
|
||
@extend_schema_view(
|
||
list=extend_schema(summary='CMS-USER-1 用户列表', tags=['CMS-用户']),
|
||
create=extend_schema(summary='CMS-USER-2 新增用户', tags=['CMS-用户']),
|
||
retrieve=extend_schema(summary='用户详情', tags=['CMS-用户']),
|
||
partial_update=extend_schema(summary='CMS-USER-3 编辑用户', tags=['CMS-用户']),
|
||
destroy=extend_schema(summary='CMS-USER-4 停用用户（逻辑删除）', tags=['CMS-用户']),
|
||
)
|
||
class CmsUserViewSet(viewsets.ModelViewSet):
|
||
"""CMS 用户管理。停用为逻辑删除（User 软删除）。
|
||
|
||
- 超级管理员：全平台、任意角色。
|
||
- 医院管理员（CMS-HUSER-*）：仅本院、仅 doctor/student（医生管理 / 医学生管理）。
|
||
前端按 `?role_type=doctor` / `?role_type=student` 区分两个页面。
|
||
"""
|
||
permission_classes = [IsAuthenticated, IsSuperOrHospitalAdmin]
|
||
filter_backends = [DjangoFilterBackend, filters.SearchFilter]
|
||
filterset_fields = ['role_type', 'institution', 'status', 'gender']
|
||
search_fields = ['username', 'real_name', 'phone']
|
||
http_method_names = ['get', 'post', 'patch', 'delete', 'head', 'options']
|
||
|
||
def get_queryset(self):
|
||
qs = User.objects.select_related('institution', 'department').all().order_by('-created_at')
|
||
user = self.request.user
|
||
if is_super(user):
|
||
return qs
|
||
# 医院管理员：仅本院 + 仅医生/学生（也保证只能查/改/停用本院 doctor/student）
|
||
return qs.filter(institution_id=user.institution_id, role_type__in=HOSPITAL_ADMIN_ROLES)
|
||
|
||
def get_serializer_class(self):
|
||
if self.action in ('create', 'update', 'partial_update'):
|
||
return CmsUserWriteSerializer
|
||
return CmsUserSerializer
|
||
|
||
def create(self, request, *args, **kwargs):
|
||
write = self.get_serializer(data=request.data)
|
||
write.is_valid(raise_exception=True)
|
||
user = write.save()
|
||
return Response(CmsUserSerializer(user).data, status=status.HTTP_201_CREATED)
|
||
|
||
def update(self, request, *args, **kwargs):
|
||
partial = kwargs.pop('partial', False)
|
||
instance = self.get_object()
|
||
write = self.get_serializer(instance, data=request.data, partial=partial)
|
||
write.is_valid(raise_exception=True)
|
||
user = write.save()
|
||
return Response(CmsUserSerializer(user).data)
|
||
|
||
@extend_schema(summary='CMS-USER-5 重置密码', tags=['CMS-用户'])
|
||
@action(detail=True, methods=['post'], url_path='reset-password')
|
||
def reset_password(self, request, pk=None):
|
||
"""重置为默认密码 `Pass{手机号}`（或请求体 password），并踢下线。"""
|
||
user = self.get_object()
|
||
new_password = (request.data.get('password') or '').strip() or f'Pass{user.phone}'
|
||
user.set_password(new_password)
|
||
user.save(update_fields=['password'])
|
||
invalidate_user_tokens(user.id)
|
||
return Response({'message': '密码重置成功', 'password': new_password})
|
||
|
||
@extend_schema(summary='CMS-USER-7 下载导入模板', tags=['CMS-用户'])
|
||
@action(detail=False, methods=['get'], url_path='import-template')
|
||
def import_template(self, request):
|
||
return xlsx_response('用户导入模板.xlsx', USER_IMPORT_HEADERS, [])
|
||
|
||
@extend_schema(summary='CMS-USER-8 导出用户', tags=['CMS-用户'])
|
||
@action(detail=False, methods=['get'], url_path='export')
|
||
def export(self, request):
|
||
qs = self.filter_queryset(self.get_queryset())
|
||
rows = [
|
||
[u.id, u.phone, u.real_name, ROLE_LABEL_BY_CODE.get(u.role_type, u.role_type),
|
||
u.institution.name if u.institution_id else '',
|
||
'正常' if u.status == 1 else '禁用']
|
||
for u in qs
|
||
]
|
||
return xlsx_response('用户列表.xlsx', USER_EXPORT_HEADERS, rows)
|
||
|
||
@extend_schema(summary='CMS-USER-6 导入用户', tags=['CMS-用户'])
|
||
@action(detail=False, methods=['post'], url_path='import',
|
||
parser_classes=[MultiPartParser, FormParser])
|
||
def import_users(self, request):
|
||
"""Excel 批量导入用户。
|
||
|
||
- 超管：列 手机号 | 姓名 | 角色 | 机构编码（均必填）。
|
||
- 医院管理员：机构强制本院（忽略机构编码列），角色仅限 医生 / 学生。
|
||
"""
|
||
actor = request.user
|
||
actor_is_super = is_super(actor)
|
||
if not actor_is_super and not actor.institution_id:
|
||
raise AppError('CMS_NO_INSTITUTION', '当前医院管理员无所属机构，无法导入', status_code=403)
|
||
|
||
file = request.FILES.get('file')
|
||
if not file:
|
||
raise AppError('CMS_IMPORT_FILE_REQUIRED', '请上传 .xlsx 文件（字段名 file）', status_code=400)
|
||
try:
|
||
rows = rows_from_xlsx(file)
|
||
except Exception:
|
||
raise AppError('CMS_IMPORT_BAD_FILE', '文件解析失败，请使用导入模板', status_code=400)
|
||
|
||
inst_by_code = {i.code: i for i in Institution.objects.all()}
|
||
|
||
success, errors = 0, []
|
||
for idx, row in enumerate(rows, start=2): # 第 2 行起为数据
|
||
phone = (row.get('手机号') or '').strip()
|
||
real_name = (row.get('姓名') or '').strip()
|
||
role = _resolve_role(row.get('角色'))
|
||
|
||
if not re.match(r'^1[3-9]\d{9}$', phone):
|
||
errors.append({'row': idx, 'reason': f'手机号格式不合法：{phone}'}); continue
|
||
if not real_name:
|
||
errors.append({'row': idx, 'reason': '姓名为空'}); continue
|
||
if not role:
|
||
errors.append({'row': idx, 'reason': f"角色非法：{row.get('角色')}"}); continue
|
||
if not actor_is_super and role not in HOSPITAL_ADMIN_ROLES:
|
||
errors.append({'row': idx, 'reason': '医院管理员只能导入医生 / 学生 / 内容管理员'}); continue
|
||
|
||
# 机构：超管按机构编码、医院管理员强制本院
|
||
if actor_is_super:
|
||
inst_code = (row.get('机构编码') or '').strip()
|
||
if not inst_code:
|
||
errors.append({'row': idx, 'reason': '机构编码为空'}); continue
|
||
inst = inst_by_code.get(inst_code)
|
||
if inst is None:
|
||
errors.append({'row': idx, 'reason': f'机构编码不存在：{inst_code}'}); continue
|
||
else:
|
||
inst = actor.institution
|
||
|
||
if User.all_objects.filter(phone=phone).exists():
|
||
errors.append({'row': idx, 'reason': '手机号已存在'}); continue
|
||
try:
|
||
User.objects.create_user(
|
||
username=phone, password=f'Pass{phone}', phone=phone,
|
||
real_name=real_name, role_type=role, institution=inst, status=1,
|
||
)
|
||
success += 1
|
||
except IntegrityError:
|
||
errors.append({'row': idx, 'reason': '手机号已存在'})
|
||
|
||
return Response({
|
||
'total': len(rows), 'success': success, 'failed': len(errors), 'errors': errors,
|
||
})
|
||
|
||
|
||
# ── 带教医生「我的学生」（CMS-TEA-1~2）─────────────────────────────────────────
|
||
|
||
class CmsStudentSerializer(CmsUserSerializer):
|
||
"""学生基础信息（读取）。
|
||
|
||
复用 `CmsUserSerializer` 的用户对象字段，额外补科室与训练统计，便于带教医生
|
||
在「我的学生」列表 / 详情查看学习概况。
|
||
"""
|
||
department_name = serializers.CharField(source='department.name', read_only=True, default=None)
|
||
|
||
class Meta(CmsUserSerializer.Meta):
|
||
fields = CmsUserSerializer.Meta.fields + [
|
||
'department', 'department_name', 'practice_years',
|
||
'total_training_count', 'total_case_count', 'current_level',
|
||
]
|
||
|
||
|
||
@extend_schema_view(
|
||
list=extend_schema(summary='CMS-TEA-1 我的学生列表', tags=['CMS-我的学生']),
|
||
retrieve=extend_schema(summary='CMS-TEA-2 学生基础信息', tags=['CMS-我的学生']),
|
||
)
|
||
class CmsStudentViewSet(viewsets.ReadOnlyModelViewSet):
|
||
"""带教医生「我的学生」：名下进行中（status=1）的学生，只读。
|
||
|
||
数据范围 = `teacher_student_relation` 中 `teacher=当前医生 且 status=1` 的学生。
|
||
非名下学生访问详情时不在 queryset 内 → 404。
|
||
"""
|
||
permission_classes = [IsAuthenticated, IsTeacher]
|
||
serializer_class = CmsStudentSerializer
|
||
filter_backends = [DjangoFilterBackend, filters.SearchFilter]
|
||
filterset_fields = ['gender', 'status']
|
||
search_fields = ['username', 'real_name', 'phone']
|
||
|
||
def get_queryset(self):
|
||
student_ids = TeacherStudentRelation.objects.filter(
|
||
teacher=self.request.user, status=1
|
||
).values_list('student_id', flat=True)
|
||
return (
|
||
User.objects.filter(id__in=student_ids)
|
||
.select_related('institution', 'department')
|
||
.order_by('-created_at')
|
||
)
|