feat: per-user panel permissions system
Replace hardcoded role-based access with granular per-panel permissions. Each user can now be assigned any combination of 6 panels (Corporate, BI Executive, Clientes, Providers, Usuarios, Meu Dashboard) regardless of their role. Existing users are auto-migrated with defaults based on role. - Add src/panels.js with panel registry and default permissions - Add permissions column to SQLite + migration for existing users - Add requirePermission() middleware, replace requireRole on all routes - Dynamic nav in buildHeader based on user permissions - Permissions checkbox UI in admin panel with role presets - Anti-lockout: users cannot remove 'usuarios' from themselves Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
root
@@ -824,7 +824,7 @@ ${buildHead('BI Executive', pageCSS, pageScripts)}
|
||||
</head>
|
||||
<body class="trading-console">
|
||||
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'bi' })}
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'bi', permissions: user.permissions || [] })}
|
||||
|
||||
<div class="trading-terminal">
|
||||
<div class="live-rate-bar">
|
||||
|
||||
@@ -389,7 +389,7 @@ ${buildHead('Clientes 360', pageCSS, pageScripts)}
|
||||
</head>
|
||||
<body class="trading-console">
|
||||
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'cliente' })}
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'cliente', permissions: user.permissions || [] })}
|
||||
|
||||
<div class="app-container">
|
||||
|
||||
|
||||
@@ -459,7 +459,7 @@ ${buildHead('Dashboard Corporate', pageCSS, pageScripts)}
|
||||
</head>
|
||||
<body>
|
||||
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'dashboard' })}
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'dashboard', permissions: user.permissions || [] })}
|
||||
|
||||
<div class="trading-terminal">
|
||||
<div class="live-rate-bar">
|
||||
|
||||
@@ -242,7 +242,7 @@ ${buildHead('Home', pageCSS, pageScripts)}
|
||||
</head>
|
||||
<body>
|
||||
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'home' })}
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'home', permissions: user.permissions || [] })}
|
||||
|
||||
<div class="trading-terminal">
|
||||
<div class="live-rate-bar">
|
||||
|
||||
@@ -2,10 +2,18 @@
|
||||
* Admin Panel - HTML builder for user management
|
||||
*/
|
||||
const { buildHeader, buildFooter, buildHead } = require('./ui-template');
|
||||
const { PANELS, DEFAULT_PERMISSIONS } = require('./panels');
|
||||
|
||||
function buildAdminHTML(agentes, admin) {
|
||||
const now = new Date().toLocaleString('pt-BR');
|
||||
|
||||
// Precompute permissions JSON for each agent row
|
||||
const agentesWithPerms = agentes.map(a => {
|
||||
let perms = [];
|
||||
try { perms = JSON.parse(a.permissions || '[]'); } catch(e) {}
|
||||
return { ...a, _perms: perms };
|
||||
});
|
||||
|
||||
const pageCSS = `
|
||||
<style>
|
||||
.toolbar {
|
||||
@@ -51,6 +59,12 @@ function buildAdminHTML(agentes, admin) {
|
||||
.status-badge.corporate { background: var(--corporate-bg); color: var(--corporate-accent); }
|
||||
.status-badge.agent { background: var(--blue-bg); color: var(--blue); }
|
||||
|
||||
.perm-badge {
|
||||
display: inline-block; padding: 2px 7px; border-radius: 8px;
|
||||
font-size: 10px; font-weight: 600; margin: 1px 2px;
|
||||
background: var(--blue-bg); color: var(--blue);
|
||||
}
|
||||
|
||||
.actions { display: flex; gap: 6px; }
|
||||
.btn-action {
|
||||
padding: 6px 12px; border-radius: 6px; font-size: 11px; font-weight: 600;
|
||||
@@ -73,7 +87,7 @@ function buildAdminHTML(agentes, admin) {
|
||||
}
|
||||
.modal-overlay.active { display: flex; }
|
||||
.modal {
|
||||
background: var(--card); border-radius: 16px; width: 100%; max-width: 480px;
|
||||
background: var(--card); border-radius: 16px; width: 100%; max-width: 520px;
|
||||
max-height: 90vh; overflow-y: auto; box-shadow: 0 20px 60px rgba(0,0,0,0.2);
|
||||
}
|
||||
.modal-header {
|
||||
@@ -122,6 +136,20 @@ function buildAdminHTML(agentes, admin) {
|
||||
}
|
||||
.btn-submit:hover { background: #25732a; }
|
||||
|
||||
/* Permissions checkboxes */
|
||||
.perm-grid {
|
||||
display: grid; grid-template-columns: 1fr 1fr; gap: 8px;
|
||||
margin-top: 6px;
|
||||
}
|
||||
.perm-check {
|
||||
display: flex; align-items: center; gap: 8px;
|
||||
padding: 8px 10px; border-radius: 8px; border: 1.5px solid var(--border);
|
||||
cursor: pointer; transition: all 0.15s; font-size: 13px;
|
||||
}
|
||||
.perm-check:hover { border-color: var(--admin-accent); background: var(--green-bg); }
|
||||
.perm-check input[type="checkbox"] { width: 16px; height: 16px; cursor: pointer; accent-color: var(--admin-accent); }
|
||||
.perm-check.checked { border-color: var(--admin-accent); background: var(--green-bg); }
|
||||
|
||||
.alert {
|
||||
padding: 12px 16px; border-radius: 8px; font-size: 13px; font-weight: 500;
|
||||
margin-bottom: 20px; display: none;
|
||||
@@ -166,6 +194,7 @@ function buildAdminHTML(agentes, admin) {
|
||||
gap: 8px;
|
||||
}
|
||||
.modal-footer button { width: 100%; }
|
||||
.perm-grid { grid-template-columns: 1fr; }
|
||||
}
|
||||
|
||||
@media (max-width: 480px) {
|
||||
@@ -193,9 +222,16 @@ function buildAdminHTML(agentes, admin) {
|
||||
[data-theme="dark"] .btn-edit:hover { background: rgba(88,166,255,0.15); }
|
||||
[data-theme="dark"] .btn-toggle:hover { background: rgba(240,136,62,0.15); }
|
||||
[data-theme="dark"] .btn-password:hover { background: rgba(188,140,255,0.15); }
|
||||
[data-theme="dark"] .perm-check { border-color: var(--border); }
|
||||
[data-theme="dark"] .perm-check:hover { background: rgba(63,185,80,0.08); }
|
||||
[data-theme="dark"] .perm-check.checked { background: rgba(63,185,80,0.08); border-color: var(--green); }
|
||||
</style>
|
||||
`;
|
||||
|
||||
// Panel label map for badges
|
||||
const panelLabels = {};
|
||||
PANELS.forEach(p => { panelLabels[p.key] = p.label; });
|
||||
|
||||
return `<!DOCTYPE html>
|
||||
<html lang="pt-BR">
|
||||
<head>
|
||||
@@ -203,7 +239,7 @@ ${buildHead('Usuarios', pageCSS)}
|
||||
</head>
|
||||
<body>
|
||||
|
||||
${buildHeader({ role: 'admin', userName: admin.nome, activePage: 'users' })}
|
||||
${buildHeader({ role: admin.role || 'admin', userName: admin.nome, activePage: 'users', permissions: admin.permissions || [] })}
|
||||
|
||||
<div class="app-container">
|
||||
<div id="alertBox" class="alert"></div>
|
||||
@@ -222,6 +258,7 @@ ${buildHeader({ role: 'admin', userName: admin.nome, activePage: 'users' })}
|
||||
<th>Nome</th>
|
||||
<th>E-mail</th>
|
||||
<th>Role</th>
|
||||
<th>Permissoes</th>
|
||||
<th>Agente ID</th>
|
||||
<th>Status</th>
|
||||
<th>Criado em</th>
|
||||
@@ -229,17 +266,18 @@ ${buildHeader({ role: 'admin', userName: admin.nome, activePage: 'users' })}
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody id="agentesTable">
|
||||
${agentes.map(a => `
|
||||
<tr data-id="${a.id}">
|
||||
${agentesWithPerms.map(a => `
|
||||
<tr data-id="${a.id}" data-permissions='${JSON.stringify(a._perms)}'>
|
||||
<td>${a.id}</td>
|
||||
<td>${a.nome}</td>
|
||||
<td>${a.email}</td>
|
||||
<td><span class="status-badge ${a.role === 'admin' ? 'admin' : a.role === 'corporate' ? 'corporate' : 'agent'}">${a.role === 'admin' ? 'Admin' : a.role === 'corporate' ? 'Corporate' : 'Agente'}</span></td>
|
||||
<td>${(a.role === 'admin' || a.role === 'corporate') ? '-' : a.agente_id}</td>
|
||||
<td>${a._perms.map(k => '<span class="perm-badge">' + (panelLabels[k] || k) + '</span>').join(' ')}</td>
|
||||
<td>${a.agente_id || '-'}</td>
|
||||
<td><span class="status-badge ${a.ativo ? 'active' : 'inactive'}">${a.ativo ? 'Ativo' : 'Inativo'}</span></td>
|
||||
<td>${a.created_at ? new Date(a.created_at).toLocaleDateString('pt-BR') : '-'}</td>
|
||||
<td class="actions">
|
||||
${a.role === 'agente' ? `<a href="/corporate/emular/${a.agente_id}" class="btn-action btn-emular" title="Ver como este agente">Emular</a>` : ''}
|
||||
${a.agente_id ? `<a href="/corporate/emular/${a.agente_id}" class="btn-action btn-emular" title="Ver como este agente">Emular</a>` : ''}
|
||||
<button class="btn-action btn-edit" onclick="openEditModal(${a.id}, '${a.nome.replace(/'/g, "\\'")}', '${a.email.replace(/'/g, "\\'")}', ${a.agente_id}, '${a.role || 'agente'}', event)">Editar</button>
|
||||
<button class="btn-action btn-toggle" onclick="toggleAgente(${a.id}, ${a.ativo})">${a.ativo ? 'Desativar' : 'Ativar'}</button>
|
||||
<button class="btn-action btn-password" onclick="openPasswordModal(${a.id}, '${a.nome.replace(/'/g, "\\'")}')">Senha</button>
|
||||
@@ -273,13 +311,24 @@ ${buildFooter()}
|
||||
<input type="email" id="agentEmail" name="email" required placeholder="usuario@email.com">
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label>Tipo de Usuario</label>
|
||||
<select id="agentRole" name="role" onchange="toggleAgenteIdField()">
|
||||
<label>Tipo de Usuario (preset)</label>
|
||||
<select id="agentRole" name="role" onchange="onRoleChange()">
|
||||
<option value="agente">Agente</option>
|
||||
<option value="corporate">Corporate</option>
|
||||
<option value="admin">Administrador</option>
|
||||
</select>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label>Permissoes de Acesso</label>
|
||||
<div class="perm-grid" id="permGrid">
|
||||
${PANELS.map(p => `
|
||||
<label class="perm-check" id="permLabel_${p.key}">
|
||||
<input type="checkbox" name="perm_${p.key}" value="${p.key}" onchange="onPermChange(this)">
|
||||
${p.label}
|
||||
</label>
|
||||
`).join('')}
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group" id="agenteIdGroup">
|
||||
<label>Agente ID (Sistema)</label>
|
||||
<input type="number" id="agentAgenteId" name="agente_id" placeholder="ID numerico do agente">
|
||||
@@ -325,27 +374,66 @@ ${buildFooter()}
|
||||
</div>
|
||||
|
||||
<script>
|
||||
let isEditing = false;
|
||||
var isEditing = false;
|
||||
|
||||
var DEFAULT_PERMS = ${JSON.stringify(DEFAULT_PERMISSIONS)};
|
||||
|
||||
function showAlert(message, type) {
|
||||
const alert = document.getElementById('alertBox');
|
||||
var alert = document.getElementById('alertBox');
|
||||
alert.textContent = message;
|
||||
alert.className = 'alert ' + type + ' show';
|
||||
setTimeout(() => { alert.className = 'alert'; }, 4000);
|
||||
setTimeout(function() { alert.className = 'alert'; }, 4000);
|
||||
}
|
||||
|
||||
function getPermCheckboxes() {
|
||||
return document.querySelectorAll('#permGrid input[type="checkbox"]');
|
||||
}
|
||||
|
||||
function setPermissions(keys) {
|
||||
getPermCheckboxes().forEach(function(cb) {
|
||||
cb.checked = keys.includes(cb.value);
|
||||
updatePermLabel(cb);
|
||||
});
|
||||
toggleAgenteIdField();
|
||||
}
|
||||
|
||||
function onPermChange(cb) {
|
||||
updatePermLabel(cb);
|
||||
toggleAgenteIdField();
|
||||
}
|
||||
|
||||
function updatePermLabel(cb) {
|
||||
var label = document.getElementById('permLabel_' + cb.value);
|
||||
if (label) {
|
||||
if (cb.checked) label.classList.add('checked');
|
||||
else label.classList.remove('checked');
|
||||
}
|
||||
}
|
||||
|
||||
function getSelectedPermissions() {
|
||||
var perms = [];
|
||||
getPermCheckboxes().forEach(function(cb) {
|
||||
if (cb.checked) perms.push(cb.value);
|
||||
});
|
||||
return perms;
|
||||
}
|
||||
|
||||
function onRoleChange() {
|
||||
var role = document.getElementById('agentRole').value;
|
||||
var defaults = DEFAULT_PERMS[role] || [];
|
||||
setPermissions(defaults);
|
||||
}
|
||||
|
||||
function toggleAgenteIdField() {
|
||||
const role = document.getElementById('agentRole').value;
|
||||
const agenteIdGroup = document.getElementById('agenteIdGroup');
|
||||
const agenteIdInput = document.getElementById('agentAgenteId');
|
||||
// Admin and Corporate don't need agente_id
|
||||
if (role === 'admin' || role === 'corporate') {
|
||||
agenteIdGroup.style.display = 'none';
|
||||
agenteIdInput.required = false;
|
||||
agenteIdInput.value = '';
|
||||
} else {
|
||||
var perms = getSelectedPermissions();
|
||||
var agenteIdGroup = document.getElementById('agenteIdGroup');
|
||||
var agenteIdInput = document.getElementById('agentAgenteId');
|
||||
if (perms.includes('dashboard')) {
|
||||
agenteIdGroup.style.display = 'block';
|
||||
agenteIdInput.required = !isEditing;
|
||||
} else {
|
||||
agenteIdGroup.style.display = 'none';
|
||||
agenteIdInput.required = false;
|
||||
}
|
||||
}
|
||||
|
||||
@@ -359,8 +447,8 @@ function openCreateModal(event) {
|
||||
document.getElementById('agentRole').value = 'agente';
|
||||
document.getElementById('senhaGroup').style.display = 'block';
|
||||
document.getElementById('agentSenha').required = true;
|
||||
toggleAgenteIdField();
|
||||
setTimeout(() => {
|
||||
onRoleChange();
|
||||
setTimeout(function() {
|
||||
document.getElementById('agentModal').classList.add('active');
|
||||
document.getElementById('agentNome').focus();
|
||||
}, 10);
|
||||
@@ -378,8 +466,16 @@ function openEditModal(id, nome, email, agenteId, role, event) {
|
||||
document.getElementById('agentRole').value = role || 'agente';
|
||||
document.getElementById('senhaGroup').style.display = 'none';
|
||||
document.getElementById('agentSenha').required = false;
|
||||
toggleAgenteIdField();
|
||||
setTimeout(() => {
|
||||
|
||||
// Load permissions from data attribute
|
||||
var row = document.querySelector('tr[data-id="' + id + '"]');
|
||||
var perms = [];
|
||||
if (row) {
|
||||
try { perms = JSON.parse(row.getAttribute('data-permissions') || '[]'); } catch(e) {}
|
||||
}
|
||||
setPermissions(perms);
|
||||
|
||||
setTimeout(function() {
|
||||
document.getElementById('agentModal').classList.add('active');
|
||||
document.getElementById('agentNome').focus();
|
||||
}, 10);
|
||||
@@ -399,25 +495,26 @@ function closeModal(id) {
|
||||
|
||||
async function submitAgentForm(e) {
|
||||
e.preventDefault();
|
||||
const id = document.getElementById('agentId').value;
|
||||
const role = document.getElementById('agentRole').value;
|
||||
const data = {
|
||||
var id = document.getElementById('agentId').value;
|
||||
var role = document.getElementById('agentRole').value;
|
||||
var permissions = getSelectedPermissions();
|
||||
var data = {
|
||||
nome: document.getElementById('agentNome').value,
|
||||
email: document.getElementById('agentEmail').value,
|
||||
role: role,
|
||||
permissions: permissions,
|
||||
};
|
||||
|
||||
// Only agents need agente_id
|
||||
if (role === 'agente') {
|
||||
const agenteId = document.getElementById('agentAgenteId').value;
|
||||
if (!isEditing && !agenteId) {
|
||||
showAlert('Agente ID e obrigatorio para agentes', 'error');
|
||||
// Agente ID
|
||||
var agenteIdVal = document.getElementById('agentAgenteId').value;
|
||||
if (permissions.includes('dashboard')) {
|
||||
if (!isEditing && !agenteIdVal) {
|
||||
showAlert('Agente ID e obrigatorio para acesso ao Meu Dashboard', 'error');
|
||||
return;
|
||||
}
|
||||
data.agente_id = parseInt(agenteId) || 0;
|
||||
data.agente_id = parseInt(agenteIdVal) || 0;
|
||||
} else {
|
||||
// Admin and Corporate don't have agente_id
|
||||
data.agente_id = 0;
|
||||
data.agente_id = parseInt(agenteIdVal) || 0;
|
||||
}
|
||||
|
||||
if (!isEditing) {
|
||||
@@ -425,18 +522,18 @@ async function submitAgentForm(e) {
|
||||
}
|
||||
|
||||
try {
|
||||
const url = isEditing ? '/admin/agentes/' + id : '/admin/agentes';
|
||||
const method = isEditing ? 'PUT' : 'POST';
|
||||
const res = await fetch(url, {
|
||||
method,
|
||||
var url = isEditing ? '/admin/agentes/' + id : '/admin/agentes';
|
||||
var method = isEditing ? 'PUT' : 'POST';
|
||||
var res = await fetch(url, {
|
||||
method: method,
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
body: JSON.stringify(data)
|
||||
});
|
||||
const result = await res.json();
|
||||
var result = await res.json();
|
||||
if (res.ok) {
|
||||
showAlert(isEditing ? 'Usuario atualizado com sucesso!' : 'Usuario criado com sucesso!', 'success');
|
||||
closeModal('agentModal');
|
||||
setTimeout(() => location.reload(), 1000);
|
||||
setTimeout(function() { location.reload(); }, 1000);
|
||||
} else {
|
||||
showAlert(result.error || 'Erro ao salvar usuario', 'error');
|
||||
}
|
||||
@@ -447,9 +544,9 @@ async function submitAgentForm(e) {
|
||||
|
||||
async function submitPasswordForm(e) {
|
||||
e.preventDefault();
|
||||
const id = document.getElementById('passwordAgentId').value;
|
||||
const newPassword = document.getElementById('newPassword').value;
|
||||
const confirmPassword = document.getElementById('confirmPassword').value;
|
||||
var id = document.getElementById('passwordAgentId').value;
|
||||
var newPassword = document.getElementById('newPassword').value;
|
||||
var confirmPassword = document.getElementById('confirmPassword').value;
|
||||
|
||||
if (newPassword !== confirmPassword) {
|
||||
showAlert('As senhas nao coincidem', 'error');
|
||||
@@ -457,12 +554,12 @@ async function submitPasswordForm(e) {
|
||||
}
|
||||
|
||||
try {
|
||||
const res = await fetch('/admin/agentes/' + id, {
|
||||
var res = await fetch('/admin/agentes/' + id, {
|
||||
method: 'PUT',
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
body: JSON.stringify({ senha: newPassword })
|
||||
});
|
||||
const result = await res.json();
|
||||
var result = await res.json();
|
||||
if (res.ok) {
|
||||
showAlert('Senha redefinida com sucesso!', 'success');
|
||||
closeModal('passwordModal');
|
||||
@@ -475,19 +572,19 @@ async function submitPasswordForm(e) {
|
||||
}
|
||||
|
||||
async function toggleAgente(id, currentStatus) {
|
||||
const action = currentStatus ? 'desativar' : 'ativar';
|
||||
var action = currentStatus ? 'desativar' : 'ativar';
|
||||
if (!confirm('Deseja ' + action + ' este usuario?')) return;
|
||||
|
||||
try {
|
||||
const res = await fetch('/admin/agentes/' + id, {
|
||||
var res = await fetch('/admin/agentes/' + id, {
|
||||
method: 'PUT',
|
||||
headers: { 'Content-Type': 'application/json' },
|
||||
body: JSON.stringify({ ativo: currentStatus ? 0 : 1 })
|
||||
});
|
||||
const result = await res.json();
|
||||
var result = await res.json();
|
||||
if (res.ok) {
|
||||
showAlert('Usuario ' + (currentStatus ? 'desativado' : 'ativado') + ' com sucesso!', 'success');
|
||||
setTimeout(() => location.reload(), 1000);
|
||||
setTimeout(function() { location.reload(); }, 1000);
|
||||
} else {
|
||||
showAlert(result.error || 'Erro ao alterar status', 'error');
|
||||
}
|
||||
@@ -497,25 +594,25 @@ async function toggleAgente(id, currentStatus) {
|
||||
}
|
||||
|
||||
// Close modal on overlay click
|
||||
document.querySelectorAll('.modal-overlay').forEach(overlay => {
|
||||
overlay.addEventListener('click', (e) => {
|
||||
document.querySelectorAll('.modal-overlay').forEach(function(overlay) {
|
||||
overlay.addEventListener('click', function(e) {
|
||||
if (e.target === overlay) overlay.classList.remove('active');
|
||||
});
|
||||
});
|
||||
|
||||
// Prevent clicks inside modal from closing it
|
||||
document.querySelectorAll('.modal').forEach(modal => {
|
||||
modal.addEventListener('click', (e) => e.stopPropagation());
|
||||
document.querySelectorAll('.modal').forEach(function(modal) {
|
||||
modal.addEventListener('click', function(e) { e.stopPropagation(); });
|
||||
});
|
||||
|
||||
// Close modal on Escape key
|
||||
document.addEventListener('keydown', (e) => {
|
||||
document.addEventListener('keydown', function(e) {
|
||||
if (e.key === 'Escape') {
|
||||
document.querySelectorAll('.modal-overlay.active').forEach(m => m.classList.remove('active'));
|
||||
document.querySelectorAll('.modal-overlay.active').forEach(function(m) { m.classList.remove('active'); });
|
||||
}
|
||||
});
|
||||
|
||||
</script>
|
||||
<\/script>
|
||||
</body>
|
||||
</html>`;
|
||||
}
|
||||
|
||||
@@ -405,7 +405,7 @@ ${buildHead('Provider Performance', pageCSS, pageScripts)}
|
||||
</head>
|
||||
<body class="trading-console">
|
||||
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'providers' })}
|
||||
${buildHeader({ role: role, userName: user.nome, activePage: 'providers', permissions: user.permissions || [] })}
|
||||
|
||||
<div class="app-container">
|
||||
|
||||
|
||||
22
src/auth.js
22
src/auth.js
@@ -10,11 +10,13 @@ const SALT_ROUNDS = 10;
|
||||
/**
|
||||
* Cria um novo usuario (agente, corporate ou admin)
|
||||
*/
|
||||
async function createUser(email, senha, nome, role = 'agente', agenteId = 0) {
|
||||
async function createUser(email, senha, nome, role = 'agente', agenteId = 0, permissions = null) {
|
||||
const { DEFAULT_PERMISSIONS } = require('./panels');
|
||||
const hash = await bcrypt.hash(senha, SALT_ROUNDS);
|
||||
const perms = permissions || DEFAULT_PERMISSIONS[role] || DEFAULT_PERMISSIONS.agente;
|
||||
return db.prepare(
|
||||
'INSERT INTO agentes (email, senha_hash, agente_id, nome, role) VALUES (?, ?, ?, ?, ?)'
|
||||
).run(email, hash, agenteId, nome, role);
|
||||
'INSERT INTO agentes (email, senha_hash, agente_id, nome, role, permissions) VALUES (?, ?, ?, ?, ?, ?)'
|
||||
).run(email, hash, agenteId, nome, role, JSON.stringify(perms));
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -56,6 +58,19 @@ function requireRole(...roles) {
|
||||
};
|
||||
}
|
||||
|
||||
/**
|
||||
* Middleware que verifica permissao por painel
|
||||
* Uso: requirePermission('bi') - usuario deve ter painel 'bi' nas permissions
|
||||
*/
|
||||
function requirePermission(panelKey) {
|
||||
return (req, res, next) => {
|
||||
if (!req.session?.user) return res.redirect('/login');
|
||||
const perms = req.session.user.permissions || [];
|
||||
if (perms.includes(panelKey)) return next();
|
||||
return res.status(403).send('Acesso negado');
|
||||
};
|
||||
}
|
||||
|
||||
/**
|
||||
* Middleware simples - apenas verifica se esta logado
|
||||
* Retrocompatibilidade com requireAuth
|
||||
@@ -81,5 +96,6 @@ module.exports = {
|
||||
authenticate,
|
||||
requireAuth,
|
||||
requireRole,
|
||||
requirePermission,
|
||||
updatePassword
|
||||
};
|
||||
|
||||
@@ -417,7 +417,7 @@ ${isEmulating ? `
|
||||
<a href="${backUrl}">Voltar ao BI - CCC</a>
|
||||
</div>
|
||||
` : ''}
|
||||
${buildHeader({ role, userName: agente.nome, activePage: 'dashboard', showNav: !isEmulating })}
|
||||
${buildHeader({ role, userName: agente.nome, activePage: 'dashboard', showNav: !isEmulating, permissions: agente.permissions || [] })}
|
||||
|
||||
<div class="filters">
|
||||
<div class="filters-inner">
|
||||
|
||||
@@ -32,6 +32,21 @@ try {
|
||||
// Column already exists, ignore
|
||||
}
|
||||
|
||||
// Add permissions column (migration)
|
||||
try {
|
||||
db.exec(`ALTER TABLE agentes ADD COLUMN permissions TEXT DEFAULT '[]'`);
|
||||
} catch (e) {
|
||||
// Column already exists, ignore
|
||||
}
|
||||
|
||||
// Migrate existing users with empty permissions — set defaults based on role
|
||||
const { DEFAULT_PERMISSIONS } = require('./panels');
|
||||
const usersNeedingPerms = db.prepare("SELECT id, role FROM agentes WHERE permissions = '[]' OR permissions IS NULL").all();
|
||||
for (const u of usersNeedingPerms) {
|
||||
const defaults = DEFAULT_PERMISSIONS[u.role] || DEFAULT_PERMISSIONS.agente;
|
||||
db.prepare('UPDATE agentes SET permissions = ? WHERE id = ?').run(JSON.stringify(defaults), u.id);
|
||||
}
|
||||
|
||||
// Legacy table - keep for reference but no longer used
|
||||
db.exec(`
|
||||
CREATE TABLE IF NOT EXISTS admins (
|
||||
|
||||
22
src/panels.js
Normal file
22
src/panels.js
Normal file
@@ -0,0 +1,22 @@
|
||||
/**
|
||||
* Panel Registry — constantes de paineis e permissoes default
|
||||
*/
|
||||
const PANELS = [
|
||||
{ key: 'corporate', label: 'Corporate', route: '/corporate' },
|
||||
{ key: 'bi', label: 'BI Executive', route: '/admin/bi' },
|
||||
{ key: 'cliente', label: 'Clientes', route: '/admin/cliente' },
|
||||
{ key: 'providers', label: 'Providers', route: '/admin/providers' },
|
||||
{ key: 'usuarios', label: 'Usuarios', route: '/admin' },
|
||||
{ key: 'dashboard', label: 'Meu Dashboard', route: '/dashboard' },
|
||||
];
|
||||
|
||||
const DEFAULT_PERMISSIONS = {
|
||||
admin: ['corporate', 'bi', 'cliente', 'providers', 'usuarios', 'dashboard'],
|
||||
corporate: ['corporate'],
|
||||
agente: ['dashboard'],
|
||||
};
|
||||
|
||||
const PANEL_ROUTE = {};
|
||||
PANELS.forEach(p => { PANEL_ROUTE[p.key] = p.route; });
|
||||
|
||||
module.exports = { PANELS, DEFAULT_PERMISSIONS, PANEL_ROUTE };
|
||||
@@ -383,16 +383,18 @@ const headerCSS = `
|
||||
* @param {string} options.userName - Nome do usuário
|
||||
* @param {string} options.activePage - Página ativa para nav
|
||||
* @param {boolean} options.showNav - Mostrar navegação
|
||||
* @param {string[]} options.permissions - Paineis permitidos para o usuario
|
||||
*/
|
||||
function buildHeader(options = {}) {
|
||||
const { role = 'agente', userName = '', activePage = '', showNav = true } = options;
|
||||
const isAdmin = role === 'admin';
|
||||
const isCorporate = role === 'corporate';
|
||||
const { role = 'agente', userName = '', activePage = '', showNav = true, permissions = [] } = options;
|
||||
const { PANELS } = require('./panels');
|
||||
|
||||
// Determine header class: admin (green), corporate (purple), agent (purple)
|
||||
// Determine header class based on permissions
|
||||
const adminPanels = ['bi', 'cliente', 'providers', 'usuarios'];
|
||||
const hasAdminPanels = adminPanels.some(k => permissions.includes(k));
|
||||
let headerClass = 'agent';
|
||||
if (isAdmin) headerClass = 'admin';
|
||||
else if (isCorporate) headerClass = 'corporate';
|
||||
if (hasAdminPanels) headerClass = 'admin';
|
||||
else if (permissions.includes('corporate')) headerClass = 'corporate';
|
||||
|
||||
const initials = userName
|
||||
.split(' ')
|
||||
@@ -401,45 +403,29 @@ function buildHeader(options = {}) {
|
||||
.join('')
|
||||
.toUpperCase();
|
||||
|
||||
// Admin navigation: Corporate Dashboard + BI + Clients + Providers + Users
|
||||
const adminNav = `
|
||||
<nav class="header-nav">
|
||||
<a href="/corporate" class="${activePage === 'dashboard' ? 'active' : ''}">Corporate</a>
|
||||
<a href="/admin/bi" class="${activePage === 'bi' ? 'active' : ''}">BI Executive</a>
|
||||
<a href="/admin/cliente" class="${activePage === 'cliente' ? 'active' : ''}">Clientes</a>
|
||||
<a href="/admin/providers" class="${activePage === 'providers' ? 'active' : ''}">Providers</a>
|
||||
<a href="/admin" class="${activePage === 'users' ? 'active' : ''}">Usuarios</a>
|
||||
</nav>
|
||||
`;
|
||||
// Build nav dynamically from permissions
|
||||
const activeMap = { 'dashboard': 'dashboard', 'corporate': 'dashboard', 'usuarios': 'users' };
|
||||
const navLinks = PANELS
|
||||
.filter(p => permissions.includes(p.key))
|
||||
.map(p => {
|
||||
const pageKey = activeMap[p.key] || p.key;
|
||||
const isActive = activePage === pageKey || activePage === p.key;
|
||||
return `<a href="${p.route}" class="${isActive ? 'active' : ''}">${p.label}</a>`;
|
||||
})
|
||||
.join('\n ');
|
||||
const nav = `<nav class="header-nav">${navLinks}</nav>`;
|
||||
|
||||
// Corporate navigation: Dashboard only
|
||||
const corporateNav = `
|
||||
<nav class="header-nav">
|
||||
<a href="/corporate" class="${activePage === 'dashboard' ? 'active' : ''}">Dashboard</a>
|
||||
</nav>
|
||||
`;
|
||||
// Home URL: first permitted panel
|
||||
const firstPanel = PANELS.find(p => permissions.includes(p.key));
|
||||
const homeUrl = firstPanel ? firstPanel.route : '/login';
|
||||
|
||||
// Agent navigation: Just their dashboard
|
||||
const agentNav = `
|
||||
<nav class="header-nav">
|
||||
<a href="/dashboard" class="active">Meu Dashboard</a>
|
||||
</nav>
|
||||
`;
|
||||
|
||||
// Select navigation based on role
|
||||
let nav = agentNav;
|
||||
if (isAdmin) nav = adminNav;
|
||||
else if (isCorporate) nav = corporateNav;
|
||||
|
||||
// Home URL based on role
|
||||
let homeUrl = '/dashboard';
|
||||
if (isAdmin) homeUrl = '/corporate'; // Admin home is Corporate Dashboard
|
||||
else if (isCorporate) homeUrl = '/corporate';
|
||||
// Show alert bell if user has BI permission
|
||||
const showAlerts = permissions.includes('bi');
|
||||
|
||||
// Role label for display
|
||||
let roleLabel = 'Agente';
|
||||
if (isAdmin) roleLabel = 'Admin';
|
||||
else if (isCorporate) roleLabel = 'Corporate';
|
||||
if (role === 'admin') roleLabel = 'Admin';
|
||||
else if (role === 'corporate') roleLabel = 'Corporate';
|
||||
|
||||
return `
|
||||
<header class="app-header ${headerClass}">
|
||||
@@ -453,7 +439,7 @@ function buildHeader(options = {}) {
|
||||
</a>
|
||||
${showNav ? nav : ''}
|
||||
<div class="header-user">
|
||||
${isAdmin ? `
|
||||
${showAlerts ? `
|
||||
<div class="alert-bell" id="alertBell" onclick="toggleAlertDropdown()" title="Alerts">
|
||||
<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M18 8A6 6 0 0 0 6 8c0 7-3 9-3 9h18s-3-2-3-9"></path><path d="M13.73 21a2 2 0 0 1-3.46 0"></path></svg>
|
||||
<span class="alert-badge" id="alertBadge" style="display:none">0</span>
|
||||
|
||||
Reference in New Issue
Block a user