create-lumal-admin 0.0.4-beta → 0.0.6-beta

package/templates/features/system/src/modules/system/role/components/RoleAuthorizationDialog.vue

@@ -0,0 +1,110 @@
+<script setup lang="ts">
+import type { PermissionNode } from '../../../../app/module';
+import type { Role } from '../types';
+import { ElAlert, ElButton, ElDialog, ElTree } from 'element-plus';
+import { nextTick, shallowRef, useTemplateRef, watch } from 'vue';
+import { collectPermissions } from '../../../../app/module';
+import { application, service } from '../../../../app/services/session';
+import { createRoleService } from '../api';
+
+/***********************授权树加载与回显*********************/
+const props = defineProps<{ role: Role }>();
+const visible = defineModel<boolean>({ required: true });
+const api = createRoleService(service);
+const tree = useTemplateRef<InstanceType<typeof ElTree>>('tree');
+const nodes = shallowRef<PermissionNode[]>([]);
+const loading = shallowRef(false);
+const saving = shallowRef(false);
+const saved = shallowRef(false);
+const failure = shallowRef('');
+let generation = 0;
+function flatten(items: PermissionNode[]): PermissionNode[] {
+  return items.flatMap((item) => [item, ...flatten(item.children ?? [])]);
+}
+async function load(): Promise<void> {
+  const version = ++generation;
+  loading.value = true;
+  failure.value = '';
+  saved.value = false;
+  try {
+    const [next, granted] = await Promise.all([api.tree(), api.permissions(props.role.code)]);
+    if (version !== generation || !visible.value) return;
+    nodes.value = next;
+    await nextTick();
+    tree.value?.setCheckedKeys(
+      flatten(next)
+        .filter((node) => node.permission && granted.includes(node.permission))
+        .map((node) => node.id),
+    );
+  } catch (reason) {
+    if (version === generation) failure.value = reason instanceof Error ? reason.message : '授权加载失败';
+  } finally {
+    if (version === generation) loading.value = false;
+  }
+}
+watch(
+  visible,
+  (open) => {
+    if (open) void load();
+    else generation += 1;
+  },
+  { immediate: true },
+);
+
+/***********************保存与部分成功恢复*********************/
+async function save(): Promise<void> {
+  if (saving.value || loading.value || !tree.value) return;
+  saving.value = true;
+  failure.value = '';
+  try {
+    if (!saved.value) {
+      const keys = new Set([...tree.value.getCheckedKeys(false), ...tree.value.getHalfCheckedKeys()].map(String));
+      const known = new Set(collectPermissions(nodes.value));
+      const permissions = flatten(nodes.value)
+        .filter((node) => keys.has(node.id) && node.permission && known.has(node.permission))
+        .map((node) => node.permission!);
+      await api.authorize(props.role.code, permissions);
+      saved.value = true;
+    }
+    // 授权写入和当前账号权限重读不是事务，失败时只重试重读。
+    await application.refreshAccess();
+    visible.value = false;
+  } catch (reason) {
+    failure.value = `${saved.value ? '授权已保存，但会话刷新失败。可重试刷新：' : ''}${reason instanceof Error ? reason.message : '授权保存失败'}`;
+  } finally {
+    saving.value = false;
+  }
+}
+</script>
+
+<template>
+  <ElDialog
+    v-model="visible"
+    :title="`角色授权：${role.name}`"
+    width="min(600px, 94vw)"
+    append-to-body
+    :close-on-click-modal="!saving"
+    :close-on-press-escape="!saving"
+  >
+    <ElAlert v-if="failure" :title="failure" type="error" :closable="false" role="alert" />
+    <ElButton :disabled="loading || saving" @click="load"> 重新读取 </ElButton>
+    <ElTree
+      ref="tree"
+      :data="nodes"
+      node-key="id"
+      show-checkbox
+      default-expand-all
+      :props="{
+        label: 'label',
+        children: 'children',
+        disabled: () => loading || saving || saved || role.code === 'admin',
+      }"
+    />
+    <template #footer>
+      <ElButton :disabled="saving" @click="visible = false"> 关闭 </ElButton>
+      <ElButton type="primary" :loading="saving" :disabled="loading || !nodes.length" @click="save">
+        {{ saved ? '重试刷新' : '保存授权' }}
+      </ElButton>
+    </template>
+  </ElDialog>
+</template>

package/templates/features/system/src/modules/system/role/permission-tree.ts

@@ -0,0 +1,31 @@
+import type { PermissionNode } from '../../../app/module';
+import { object, text } from '../../../shared/api';
+
+/** 将非叶节点的访问权限拆成独立叶子，避免回显父权限时误授予全部按钮权限。 */
+export function parsePermissionTree(value: unknown): PermissionNode[] {
+  const ids = new Set<string>();
+  const seen = new WeakSet<object>();
+  let count = 0;
+  function visit(value: unknown, depth: number): PermissionNode[] {
+    if (!Array.isArray(value) || depth > 30) throw new Error('权限树必须是有限层级的数组');
+    return value.map((item) => {
+      const raw = object(item);
+      const id = text(raw.id, '权限节点 ID', true);
+      if (++count > 1000 || seen.has(raw) || ids.has(id)) throw new Error('权限树存在循环、重复节点或超过数量限制');
+      ids.add(id);
+      seen.add(raw);
+      const label = text(raw.label, '权限标题', true);
+      const permission = raw.permission === undefined ? undefined : text(raw.permission, '权限码', true);
+      const children = raw.children === undefined ? [] : visit(raw.children, depth + 1);
+      if (!children.length) return { id: `permission:${id}`, label, permission };
+      return {
+        id: `group:${id}`,
+        label,
+        children: permission
+          ? [{ id: `permission:${id}`, label: `${label}（访问）`, permission }, ...children]
+          : children,
+      };
+    });
+  }
+  return visit(value, 0);
+}

package/templates/features/system/src/modules/system/role/routes.ts

@@ -0,0 +1,24 @@
+import type { AppModule } from '../../../app/module';
+
+export const menus: AppModule['menus'] = [
+  {
+    path: '/system/roles',
+    name: 'SystemRoles',
+    component: 'system/roles',
+    meta: { title: '角色管理', authority: ['system:role:list'], keepAlive: true, order: 2 },
+  },
+];
+export const views: AppModule['views'] = { 'system/roles': () => import('./RoleView.vue') };
+export const permissions: AppModule['permissions'] = [
+  {
+    id: 'system-role',
+    label: '角色管理',
+    children: [
+      { id: 'system:role:list', label: '查询角色', permission: 'system:role:list' },
+      { id: 'system:role:create', label: '新增角色', permission: 'system:role:create' },
+      { id: 'system:role:update', label: '修改角色', permission: 'system:role:update' },
+      { id: 'system:role:delete', label: '删除角色', permission: 'system:role:delete' },
+      { id: 'system:role:authorize', label: '角色授权', permission: 'system:role:authorize' },
+    ],
+  },
+];

package/templates/features/system/src/modules/system/role/types.ts

@@ -0,0 +1,12 @@
+import type { Status } from '../../../shared/api';
+
+export interface RoleInput {
+  code: string;
+  name: string;
+  description: string;
+  status: Status;
+}
+export interface Role extends RoleInput {
+  id: string;
+  builtIn: boolean;
+}

package/templates/features/system/src/modules/system/user/UserView.vue

@@ -0,0 +1,297 @@
+<script setup lang="ts">
+import type { CrudDataSource, SchemaFormItem, SchemaTableColumn, SchemaTableRow } from '@lumal/core/components';
+import type { Option } from '../../../shared/api';
+import type { User, UserQuery } from './types';
+import { LumalCrudTable, LumalPage } from '@lumal/core/components';
+import { ElAlert, ElButton, ElMessage, ElMessageBox } from 'element-plus';
+import { computed, shallowRef, useTemplateRef, watch } from 'vue';
+import { permissionStore, service } from '../../../app/services/session';
+import { options } from '../../../shared/api';
+import { useAsyncData } from '../../../shared/composables/use-async-data';
+import { statusOptions } from '../../../shared/status';
+import { createUserService, parseUser, userInput } from './api';
+import UserOrganizationFilter from './components/UserOrganizationFilter.vue';
+import UserRoleDialog from './components/UserRoleDialog.vue';
+
+/***********************用户列表与引用选项*********************/
+const api = createUserService(service);
+const table = useTemplateRef<InstanceType<typeof LumalCrudTable>>('table');
+const organizationId = shallowRef('');
+const selected = shallowRef<SchemaTableRow[]>([]);
+const actionError = shallowRef('');
+let listError: unknown;
+const acting = shallowRef(false);
+const roleDialog = shallowRef(false);
+const assigning = shallowRef<User[]>([]);
+const batchAssignment = shallowRef(false);
+const can = (action: string) => permissionStore.hasPermission(`system:user:${action}`);
+const references = useAsyncData(
+  async () => {
+    const [roles, organizations] = await Promise.all([
+      service.request('GET', '/system/roles/options'),
+      service.request('GET', '/system/organizations/options'),
+    ]);
+    return { roles: options(roles), organizations: options(organizations) };
+  },
+  { roles: [] as Option[], organizations: [] as Option[] },
+);
+function flatten(options: Option[]): Option[] {
+  return options.flatMap((item) => [item, ...flatten(item.children ?? [])]);
+}
+const orgLabels = computed(
+  () => new Map(flatten(references.data.value.organizations).map((item) => [item.value, item.label])),
+);
+watch(organizationId, () => {
+  void table.value?.reload();
+});
+const dataSource: CrudDataSource = {
+  async fetch(input) {
+    listError = undefined;
+    try {
+      return await api.list({ ...input, query: { ...input.query, organizationId: organizationId.value } as UserQuery });
+    } catch (reason) {
+      listError = reason;
+      throw reason;
+    }
+  },
+  create: (model) => api.create(userInput(model)),
+  update: (row, model) => api.update(parseUser(row).id, userInput(model)),
+  remove: (row) => api.remove(parseUser(row).id),
+};
+
+/***********************用户独立表单与查询契约*********************/
+const columns = computed<SchemaTableColumn[]>(() => [
+  { field: 'username', label: '用户名', minWidth: 130 },
+  { field: 'nickname', label: '昵称', minWidth: 120 },
+  {
+    field: 'organizationId',
+    label: '机构',
+    minWidth: 140,
+    formatter: (value) => orgLabels.value.get(String(value)) ?? '-',
+  },
+  {
+    field: 'roles',
+    label: '角色',
+    minWidth: 150,
+    formatter: (value) =>
+      Array.isArray(value)
+        ? value
+            .map((code) => references.data.value.roles.find((option) => option.value === code)?.label ?? code)
+            .join('、')
+        : '',
+  },
+  { field: 'status', label: '状态', options: statusOptions, width: 90 },
+  { field: 'phone', label: '手机号', minWidth: 130 },
+]);
+const schemas = computed<SchemaFormItem[]>(() => [
+  { field: 'username', label: '用户名', component: 'input', required: true, editDisabled: true },
+  {
+    field: 'nickname',
+    label: '昵称',
+    component: 'input',
+    required: true,
+    rules: [{ max: 32, message: '昵称最多 32 个字符' }],
+  },
+  {
+    field: 'organizationId',
+    label: '所属机构',
+    component: 'tree-select',
+    options: references.data.value.organizations,
+    componentProps: {
+      data: references.data.value.organizations,
+      checkStrictly: true,
+      defaultExpandAll: true,
+      props: { children: 'children', label: 'label', value: 'value', disabled: 'disabled' },
+    },
+    defaultValue: references.data.value.organizations[0]?.value ?? '',
+  },
+  {
+    field: 'roles',
+    label: '角色',
+    component: 'select',
+    required: true,
+    options: references.data.value.roles,
+    defaultValue: ['guest'],
+    componentProps: { multiple: true },
+    disabled: ({ mode }) => mode === 'edit' && !can('assign-roles'),
+  },
+  {
+    field: 'status',
+    label: '状态',
+    component: 'select',
+    options: statusOptions,
+    defaultValue: 'enabled',
+    disabled: ({ mode, model }) => model.username === 'admin' || (mode === 'edit' && !can('status')),
+  },
+  {
+    field: 'phone',
+    label: '手机号',
+    component: 'input',
+    rules: [{ pattern: /^1\d{10}$/, message: '请输入 11 位手机号' }],
+  },
+]);
+const querySchemas = computed<SchemaFormItem[]>(() => [
+  { field: 'keyword', label: '关键词', component: 'input' },
+  { field: 'roles', label: '角色', component: 'select', options: references.data.value.roles },
+  { field: 'status', label: '状态', component: 'select', options: statusOptions },
+]);
+
+/***********************状态、批量操作与密码重置*********************/
+async function run(action: () => Promise<unknown>): Promise<void> {
+  if (acting.value) return;
+  acting.value = true;
+  actionError.value = '';
+  let persisted = false;
+  try {
+    await action();
+    persisted = true;
+    await table.value?.reload();
+    if (listError) throw listError;
+    table.value?.clearSelection();
+    selected.value = [];
+    ElMessage.success('操作成功');
+  } catch (reason) {
+    actionError.value = `${persisted ? '操作已保存，但刷新失败：' : ''}${reason instanceof Error ? reason.message : '操作失败'}`;
+  } finally {
+    acting.value = false;
+  }
+}
+function assign(users: User[], batch = false): void {
+  assigning.value = users;
+  batchAssignment.value = batch;
+  roleDialog.value = true;
+}
+async function resetPassword(row: SchemaTableRow): Promise<void> {
+  try {
+    await ElMessageBox.confirm(`重置 ${parseUser(row).nickname} 的密码？`, '密码重置', {
+      confirmButtonText: '重置',
+      cancelButtonText: '取消',
+    });
+  } catch {
+    return;
+  }
+  await run(async () => {
+    const result = await api.resetPassword(parseUser(row).id);
+    await ElMessageBox.alert(`临时密码：${result.temporaryPassword}`, '密码已重置');
+  });
+}
+async function rolesSaved(): Promise<void> {
+  table.value?.clearSelection();
+  selected.value = [];
+  await table.value?.reload();
+  if (listError) actionError.value = '角色分配已保存，但列表读取失败，请重新加载';
+}
+</script>
+
+<template>
+  <LumalPage class="lumal-admin-page" title="用户管理" no-padding>
+    <ElAlert v-if="references.error.value" :title="references.error.value" type="error" :closable="false">
+      <ElButton link @click="references.reload"> 重试选项加载 </ElButton>
+    </ElAlert>
+    <ElAlert v-if="actionError" :title="actionError" type="error" role="alert" closable @close="actionError = ''" />
+    <div class="user-layout">
+      <UserOrganizationFilter v-model="organizationId" :options="references.data.value.organizations" />
+      <LumalCrudTable
+        ref="table"
+        :data-source="dataSource"
+        :form-schemas="schemas"
+        :table="{ columns, rowKey: 'id', selection: true, showColumnSettings: true, actionWidth: 430 }"
+        :query="{ schemas: querySchemas, columns: 3, collapsible: true, mobileDefaultVisible: false }"
+        :toolbar="{ create: can('create') && !references.error.value, batchDelete: false, refresh: true }"
+        :actions="{ view: false, edit: false, remove: false }"
+        :editor="{ columns: 2 }"
+        @selection-change="selected = $event"
+        @operation-error="actionError = $event instanceof Error ? $event.message : String($event)"
+      >
+        <template #toolbar-actions="{ selectedRows }">
+          <ElButton
+            v-if="can('status')"
+            :disabled="!selectedRows.length || acting"
+            @click="
+              run(() =>
+                api.batchStatus(
+                  selectedRows.map((row) => parseUser(row).id),
+                  'enabled',
+                ),
+              )
+            "
+          >
+            批量启用
+          </ElButton>
+          <ElButton
+            v-if="can('status')"
+            :disabled="!selectedRows.length || acting"
+            @click="
+              run(() =>
+                api.batchStatus(
+                  selectedRows.map((row) => parseUser(row).id),
+                  'disabled',
+                ),
+              )
+            "
+          >
+            批量停用
+          </ElButton>
+          <ElButton
+            v-if="can('assign-roles')"
+            :disabled="!selectedRows.length || !!references.error.value"
+            @click="assign(selectedRows.map(parseUser), true)"
+          >
+            批量分配角色
+          </ElButton>
+        </template>
+        <template #row-actions="{ row }">
+          <ElButton link @click="table?.openView(row)"> 查看 </ElButton>
+          <ElButton v-if="can('update')" link @click="table?.openEdit(row)"> 编辑 </ElButton>
+          <ElButton
+            v-if="can('status')"
+            link
+            :disabled="row.username === 'admin' || acting"
+            @click="run(() => api.setStatus(parseUser(row).id, row.status === 'enabled' ? 'disabled' : 'enabled'))"
+          >
+            {{ row.status === 'enabled' ? '停用' : '启用' }}
+          </ElButton>
+          <ElButton
+            v-if="can('assign-roles')"
+            link
+            :disabled="!!references.error.value"
+            @click="assign([parseUser(row)])"
+          >
+            分配角色
+          </ElButton>
+          <ElButton v-if="can('reset-password')" link @click="resetPassword(row)"> 重置密码 </ElButton>
+          <ElButton
+            v-if="can('delete')"
+            link
+            type="danger"
+            :disabled="row.username === 'admin'"
+            @click="table?.removeRow(row)"
+          >
+            删除
+          </ElButton>
+        </template>
+      </LumalCrudTable>
+    </div>
+    <UserRoleDialog
+      v-model="roleDialog"
+      :users="assigning"
+      :options="references.data.value.roles"
+      :batch="batchAssignment"
+      @saved="rolesSaved"
+    />
+  </LumalPage>
+</template>
+
+<style scoped>
+.user-layout {
+  display: grid;
+  grid-template-columns: 220px minmax(0, 1fr);
+  gap: 16px;
+  min-width: 0;
+}
+@media (max-width: 768px) {
+  .user-layout {
+    grid-template-columns: minmax(0, 1fr);
+  }
+}
+</style>

package/templates/features/system/src/modules/system/user/api.ts

@@ -0,0 +1,45 @@
+import type { SchemaFormModel } from '@lumal/core/components';
+import type { ApplicationService } from '../../../app/services/contracts';
+import type { PageInput } from '../../../shared/api';
+import type { User, UserBatchResult, UserInput, UserQuery } from './types';
+import { formStatus, object, stringArray, text } from '../../../shared/api';
+
+export function userInput(model: SchemaFormModel): UserInput {
+  return {
+    username: text(model.username, '用户名', true),
+    nickname: text(model.nickname, '昵称', true),
+    organizationId: text(model.organizationId, '所属机构'),
+    roles: stringArray(model.roles),
+    phone: text(model.phone, '手机号'),
+    status: formStatus(model),
+  };
+}
+export function parseUser(value: unknown): User {
+  const raw = object(value);
+  return { ...userInput(raw), id: text(raw.id, '用户 ID', true), createdAt: text(raw.createdAt, '创建时间') };
+}
+export function createUserService(transport: Pick<ApplicationService, 'list' | 'request'>) {
+  const path = (id: string) => `/system/users/${encodeURIComponent(id)}`;
+  return {
+    async list(input: PageInput<UserQuery>) {
+      const result = await transport.list('users', { ...input, query: { ...input.query } });
+      return { items: result.items.map(parseUser), total: result.total };
+    },
+    create: async (input: UserInput) => parseUser(await transport.request('POST', '/system/users', { body: input })),
+    update: async (id: string, input: UserInput) =>
+      parseUser(await transport.request('PUT', path(id), { body: input })),
+    remove: (id: string) => transport.request<void>('DELETE', path(id)),
+    setStatus: (id: string, status: User['status']) =>
+      transport.request<User>('PATCH', `${path(id)}/status`, { body: { status } }),
+    assignRoles: (id: string, roles: string[]) =>
+      transport.request<User>('PUT', `${path(id)}/roles`, { body: { roles } }),
+    batchStatus: (ids: string[], status: User['status']) =>
+      transport.request<UserBatchResult>('PATCH', '/system/users/batch/status', { body: { ids, status } }),
+    batchRoles: (ids: string[], roles: string[], mode: 'append' | 'replace') =>
+      transport.request<UserBatchResult>('PUT', '/system/users/batch/roles', { body: { ids, roles, mode } }),
+    async resetPassword(id: string) {
+      const result = object(await transport.request('POST', `${path(id)}/reset-password`));
+      return { temporaryPassword: text(result.temporaryPassword, '临时密码', true) };
+    },
+  };
+}

package/templates/features/system/src/modules/system/user/components/UserOrganizationFilter.vue

@@ -0,0 +1,61 @@
+<script setup lang="ts">
+import type { Option } from '../../../../shared/api';
+import { ElInput, ElTree } from 'element-plus';
+import { shallowRef, useTemplateRef, watch } from 'vue';
+
+/***********************机构筛选契约*********************/
+defineProps<{ options: Option[] }>();
+const value = defineModel<string>({ required: true });
+const keyword = shallowRef('');
+const tree = useTemplateRef<InstanceType<typeof ElTree>>('tree');
+watch(keyword, (text) => tree.value?.filter(text));
+function filter(text: string, data: Record<string, unknown>): boolean {
+  return !text || String(data.label).includes(text);
+}
+</script>
+
+<template>
+  <details class="user-organizations" open>
+    <summary>机构筛选</summary>
+    <ElInput v-model="keyword" aria-label="搜索机构" placeholder="搜索机构" clearable />
+    <ElTree
+      ref="tree"
+      :data="[{ label: '全部机构', value: '', children: options }]"
+      node-key="value"
+      default-expand-all
+      highlight-current
+      :current-node-key="value"
+      :expand-on-click-node="false"
+      :filter-node-method="filter"
+      :props="{ label: 'label' }"
+      @node-click="(node: Option) => (value = node.value)"
+    />
+  </details>
+</template>
+
+<style scoped>
+.user-organizations {
+  min-width: 0;
+  border-right: 1px solid var(--el-border-color-light);
+  padding-right: 16px;
+}
+.user-organizations summary {
+  font-weight: 600;
+  margin-bottom: 12px;
+  cursor: pointer;
+}
+.user-organizations :deep(.el-tree) {
+  margin-top: 12px;
+  max-height: 60dvh;
+  overflow: auto;
+}
+@media (max-width: 768px) {
+  .user-organizations {
+    border: 0;
+    padding: 0;
+  }
+  .user-organizations :deep(.el-tree) {
+    max-height: 160px;
+  }
+}
+</style>

package/templates/features/system/src/modules/system/user/components/UserRoleDialog.vue

@@ -0,0 +1,93 @@
+<script setup lang="ts">
+import type { SchemaFormItem, SchemaFormModel } from '@lumal/core/components';
+import type { Option } from '../../../../shared/api';
+import type { User } from '../types';
+import { LumalSchemaForm } from '@lumal/core/components';
+import { ElAlert, ElDialog, ElMessage } from 'element-plus';
+import { computed, shallowRef, watch } from 'vue';
+import { service } from '../../../../app/services/session';
+import { stringArray } from '../../../../shared/api';
+import { createUserService } from '../api';
+
+/***********************角色分配契约*********************/
+const props = defineProps<{ users: User[]; options: Option[]; batch: boolean }>();
+const emit = defineEmits<{ saved: [] }>();
+const visible = defineModel<boolean>({ required: true });
+const api = createUserService(service);
+const model = shallowRef<SchemaFormModel>({});
+const saving = shallowRef(false);
+const error = shallowRef('');
+watch(visible, (open) => {
+  if (open) {
+    model.value = { roles: props.batch ? [] : (props.users[0]?.roles ?? []), mode: 'append' };
+    error.value = '';
+  }
+});
+const schemas = computed<SchemaFormItem[]>(() => [
+  ...(props.batch
+    ? [
+        {
+          field: 'mode',
+          label: '分配方式',
+          component: 'radio' as const,
+          options: [
+            { label: '追加', value: 'append' },
+            { label: '替换', value: 'replace' },
+          ],
+        },
+      ]
+    : []),
+  {
+    field: 'roles',
+    label: '角色',
+    component: 'select',
+    componentProps: { multiple: true },
+    options: props.options,
+    required: true,
+  },
+]);
+
+/***********************授权请求与失败恢复*********************/
+async function save(values: SchemaFormModel): Promise<void> {
+  if (saving.value || !props.users.length) return;
+  saving.value = true;
+  error.value = '';
+  try {
+    const roles = stringArray(values.roles);
+    if (props.batch)
+      await api.batchRoles(
+        props.users.map((user) => user.id),
+        roles,
+        values.mode === 'replace' ? 'replace' : 'append',
+      );
+    else await api.assignRoles(props.users[0]!.id, roles);
+    visible.value = false;
+    emit('saved');
+    ElMessage.success('角色分配已保存');
+  } catch (reason) {
+    error.value = reason instanceof Error ? reason.message : '角色分配失败';
+  } finally {
+    saving.value = false;
+  }
+}
+</script>
+
+<template>
+  <ElDialog
+    v-model="visible"
+    :title="batch ? '批量分配角色' : '分配角色'"
+    width="min(520px, 94vw)"
+    append-to-body
+    :close-on-click-modal="!saving"
+  >
+    <ElAlert v-if="error" :title="error" type="error" :closable="false" role="alert" />
+    <LumalSchemaForm
+      v-model="model"
+      :schemas="schemas"
+      :submit-loading="saving"
+      show-actions
+      submit-text="保存角色"
+      @submit="save"
+    />
+  </ElDialog>
+</template>