schedule-management-system/backend/app/routers/departments.py

from uuid import UUID
from fastapi import APIRouter, Depends, HTTPException
from sqlalchemy import select
from sqlalchemy.ext.asyncio import AsyncSession
from backend.app.core.dependencies import require_any_permissions, require_permissions
from backend.app.db.session import get_db
from backend.app.models import Department, User
from backend.app.schemas.department import DepartmentCreate, DepartmentResponse, DepartmentUpdate


router = APIRouter(prefix="/departments", tags=["departments"])


def is_limited_scope(user: User) -> bool:
    return user.role and user.role.name not in {"管理员", "排班员"}


@router.get("", response_model=list[DepartmentResponse])
async def list_departments(
    db: AsyncSession = Depends(get_db),
    current_user: User = Depends(require_any_permissions(["users.view", "schedule.view"])),
):
    query = select(Department)
    if is_limited_scope(current_user):
        if current_user.dept_id:
            query = query.where(Department.id == current_user.dept_id)
        elif current_user.campus_id:
            query = query.where(Department.campus_id == current_user.campus_id)
        else:
            return []
    result = await db.execute(query.order_by(Department.name))
    return result.scalars().all()


@router.post("", response_model=DepartmentResponse, dependencies=[Depends(require_permissions(["users.edit"]))])
async def create_department(payload: DepartmentCreate, db: AsyncSession = Depends(get_db)):
    dept = Department(campus_id=payload.campus_id, name=payload.name)
    db.add(dept)
    await db.commit()
    await db.refresh(dept)
    return dept


@router.put("/{dept_id}", response_model=DepartmentResponse, dependencies=[Depends(require_permissions(["users.edit"]))])
async def update_department(dept_id: UUID, payload: DepartmentUpdate, db: AsyncSession = Depends(get_db)):
    result = await db.execute(select(Department).where(Department.id == dept_id))
    dept = result.scalar_one_or_none()
    if not dept:
        raise HTTPException(status_code=404, detail="科室不存在")
    dept.campus_id = payload.campus_id
    dept.name = payload.name
    await db.commit()
    await db.refresh(dept)
    return dept


@router.delete("/{dept_id}", dependencies=[Depends(require_permissions(["users.delete"]))])
async def delete_department(dept_id: UUID, db: AsyncSession = Depends(get_db)):
    result = await db.execute(select(Department).where(Department.id == dept_id))
    dept = result.scalar_one_or_none()
    if not dept:
        raise HTTPException(status_code=404, detail="科室不存在")
    await db.delete(dept)
    await db.commit()
    return {"success": True}