feat(testing): 增加质检报告独立编辑与详情页面，不再使用弹窗

application/common/controller/GranaryBackend.php

@@ -0,0 +1,69 @@
+<?php
+namespace app\common\controller;
+
+use app\common\library\GranarySite;
+use think\Db;
+
+/** Apply site authorization to every grain-management read and write route. */
+class GranaryBackend extends Backend
+{
+    protected $granarySites = [];
+    protected $filterSites = [];
+
+    public function _initialize()
+    {
+        parent::_initialize();
+        $this->initializeGranarySiteAccess();
+    }
+
+    protected function initializeGranarySiteAccess()
+    {
+        $this->granarySites = GranarySite::allowed($this->auth);
+        $site = $this->request->get('site', '');
+        if ($site !== '' && (!GranarySite::valid($site) || !in_array($site, $this->granarySites, true))) {
+            $this->error('无权访问此库区');
+        }
+        $this->filterSites = $site === '' ? $this->granarySites : [$site];
+        $this->assignconfig('granarySites', GranarySite::options($this->granarySites));
+
+        $controller = strtolower($this->request->controller());
+        $action = strtolower($this->request->action());
+        $actions = [
+            'granary' => ['index', 'add', 'detail', 'dell'],
+            'testing' => ['index', 'add', 'sort', 'dell'],
+            'content' => ['index', 'add', 'status', 'getcontent', 'dell'],
+            'forecast' => ['index', 'detail', 'add', 'retry', 'actual'],
+        ];
+        if (!isset($actions[$controller]) || !in_array($action, $actions[$controller], true)) $this->error('不支持此操作');
+        $table = $controller === 'forecast' ? 'grain_forecast' : $controller;
+        $id = $this->request->post('id', $this->request->get('id', ''));
+        if ($action === 'actual') {
+            $id = Db::name('grain_forecast_point')->where('id', $this->request->post('point_id/d', 0))->value('forecast_id');
+            if (!$id) $this->error('预测周期不存在');
+        }
+        if ($id !== '' && $id !== null && $id !== 0 && $id !== '0') {
+            if (!is_scalar($id) || !preg_match('/^\d+(,\d+)*$/D', (string)$id)) $this->error('记录编号不正确');
+            foreach (explode(',', (string)$id) as $recordId) {
+                $gid = $controller === 'granary' ? $recordId : Db::name($table)->where('id', $recordId)->value('gid');
+                if (!GranarySite::permits($gid, $this->granarySites)) $this->error('记录不存在或无权访问所属库区');
+            }
+        }
+        $gid = $this->request->post('gid', $this->request->get('gid', 0));
+        if ($gid && !GranarySite::permits($gid, $this->granarySites)) $this->error('无权访问此仓库');
+        if ($controller !== 'granary' && $action === 'add' && $this->request->isPost() && !$gid) $this->error('请选择所属仓库');
+        if ($controller === 'content' && $action === 'index') {
+            $rid = $this->request->get('rid/d', 0);
+            if ($rid && !GranarySite::permits($rid, $this->granarySites)) $this->error('无权访问此仓库');
+        }
+        if ($controller === 'forecast' && $action === 'add' && $this->request->isPost()) {
+            $existingGid = Db::name('grain_forecast')->where('request_key', $this->request->post('request_key', ''))->value('gid');
+            if ($existingGid && !GranarySite::permits($existingGid, $this->granarySites)) $this->error('无权访问原预测记录');
+        }
+    }
+
+    protected function scopeRecords($query)
+    {
+        $ids = array_column(GranarySite::granaries($this->filterSites), 'id');
+        return $query->where('gid', 'in', $ids ?: [0]);
+    }
+}