mint/app/Http/Controllers/CourseMemberController.php

<?php

namespace App\Http\Controllers;

use App\Models\CourseMember;
use Illuminate\Http\Request;
use App\Http\Resources\CourseMemberResource;
use App\Http\Api\AuthApi;

class CourseMemberController extends Controller
{
    /**
     * Display a listing of the resource.
     *
     * @return \Illuminate\Http\Response
     */
    public function index(Request $request)
    {
        //
        $result=false;
		$indexCol = ['id','user_id','course_id','role','status','updated_at','created_at'];
		switch ($request->get('view')) {
            case 'course':
	            # 获取 course 内所有 成员
                $user = AuthApi::current($request);
                if($user){
                    return $this->error(__('auth.failed'));
                }
                //TODO 判断当前用户是否有指定的 course 的权限
                $table = CourseMember::where('course_id', $request->get('id'));
				break;
        }
        if(isset($_GET["search"])){
            $table = $table->where('title', 'like', $_GET["search"]."%");
        }
        $count = $table->count();
        if(isset($_GET["order"]) && isset($_GET["dir"])){
            $table = $table->orderBy($_GET["order"],$_GET["dir"]);
        }else{
            $table = $table->orderBy('updated_at','desc');
        }

        if(isset($_GET["limit"])){
            $offset = 0;
            if(isset($_GET["offset"])){
                $offset = $_GET["offset"];
            }
            $table = $table->skip($offset)->take($_GET["limit"]);
        }
        $result = $table->get();

		if($result){
			return $this->ok(["rows"=>GroupMemberResource::collection($result),"count"=>$count]);
		}else{
			return $this->error("没有查询到数据");
		}
    }

    /**
     * Store a newly created resource in storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\Response
     */
    public function store(Request $request)
    {
        //
        $validated = $request->validate([
            'user_id' => 'required',
            'course_id' => 'required',
            'role' => 'required',
        ]);
        //查找重复的项目
        if(CourseMember::where('course_id', $validated['course_id'])
                      ->where('user_id',$validated['user_id'])
                      ->exists()){
            return $this->error('member exists');
        }
        $newMember = new CourseMember();
        $newMember->user_id = $validated['user_id'];
        $newMember->course_id = $validated['course_id'];
        $newMember->role = $validated['role'];
        $newMember->save();
        return $this->ok(new CourseMemberResource($newMember));

    }

    /**
     * Display the specified resource.
     *
     * @param  \App\Models\CourseMember  $courseMember
     * @return \Illuminate\Http\Response
     */
    public function show(CourseMember $courseMember)
    {
        //
    }

    /**
     * Update the specified resource in storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \App\Models\CourseMember  $courseMember
     * @return \Illuminate\Http\Response
     */
    public function update(Request $request, CourseMember $courseMember)
    {
        //
    }

    /**
     * Remove the specified resource from storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \App\Models\CourseMember  $courseMember
     * @return \Illuminate\Http\Response
     */
    public function destroy(Request $request,CourseMember $courseMember)
    {
        //查看删除者有没有删除权限
        //查询删除者的权限
        $currUser = AuthApi::current($request);
        if(!$currUser){
            return $this->error(__('auth.failed'));
        }

        $currUser = CourseMember::where('course_id',$courseMember->course_id)
                        ->where('user_id',$currUser["user_uid"])
                        ->select('role')->first();
        if(!$currUser || $currUser->role ==="member"){
            //普通成员没有删除权限
            return $this->error(__('auth.failed'));
        }

        $delete = $courseMember->delete();
        return $this->ok($delete);
    }
}