sam-manage/app/Http/Controllers/Api/Admin/RolePermissionController.php

<?php

namespace App\Http\Controllers\Api\Admin;

use App\Http\Controllers\Controller;
use App\Services\RolePermissionService;
use Illuminate\Http\Request;

class RolePermissionController extends Controller
{
    protected RolePermissionService $rolePermissionService;

    public function __construct(RolePermissionService $rolePermissionService)
    {
        $this->rolePermissionService = $rolePermissionService;
    }

    /**
     * 권한 매트릭스 조회 (역할 변경 시 호출)
     */
    public function getMatrix(Request $request)
    {
        $roleId = $request->input('role_id');
        $guardName = $request->input('guard_name', 'web');
        $tenantId = session('selected_tenant_id');

        if (! $roleId) {
            return view('role-permissions.partials.empty-state');
        }

        // 메뉴 트리 조회
        $menus = $this->rolePermissionService->getMenuTree($tenantId);

        // 권한 매트릭스 조회
        $permissions = $this->rolePermissionService->getRolePermissionMatrix($roleId, $tenantId, $guardName);

        return view('role-permissions.partials.permission-matrix', [
            'menus' => $menus,
            'permissions' => $permissions,
            'roleId' => $roleId,
        ]);
    }

    /**
     * 권한 토글
     */
    public function toggle(Request $request)
    {
        $roleId = $request->input('role_id');
        $menuId = $request->input('menu_id');
        $permissionType = $request->input('permission_type');
        $guardName = $request->input('guard_name', 'web');
        $tenantId = session('selected_tenant_id');

        $newValue = $this->rolePermissionService->togglePermission(
            $roleId,
            $menuId,
            $permissionType,
            $tenantId,
            $guardName
        );

        // 전체 매트릭스 다시 로드
        $menus = $this->rolePermissionService->getMenuTree($tenantId);
        $permissions = $this->rolePermissionService->getRolePermissionMatrix($roleId, $tenantId, $guardName);

        return view('role-permissions.partials.permission-matrix', [
            'menus' => $menus,
            'permissions' => $permissions,
            'roleId' => $roleId,
        ]);
    }

    /**
     * 전체 허용
     */
    public function allowAll(Request $request)
    {
        $roleId = $request->input('role_id');
        $guardName = $request->input('guard_name', 'web');
        $tenantId = session('selected_tenant_id');

        $this->rolePermissionService->allowAllPermissions($roleId, $tenantId, $guardName);

        // 전체 매트릭스 다시 로드
        $menus = $this->rolePermissionService->getMenuTree($tenantId);
        $permissions = $this->rolePermissionService->getRolePermissionMatrix($roleId, $tenantId, $guardName);

        return view('role-permissions.partials.permission-matrix', [
            'menus' => $menus,
            'permissions' => $permissions,
            'roleId' => $roleId,
        ]);
    }

    /**
     * 전체 거부
     */
    public function denyAll(Request $request)
    {
        $roleId = $request->input('role_id');
        $guardName = $request->input('guard_name', 'web');
        $tenantId = session('selected_tenant_id');

        $this->rolePermissionService->denyAllPermissions($roleId, $tenantId, $guardName);

        // 전체 매트릭스 다시 로드
        $menus = $this->rolePermissionService->getMenuTree($tenantId);
        $permissions = $this->rolePermissionService->getRolePermissionMatrix($roleId, $tenantId, $guardName);

        return view('role-permissions.partials.permission-matrix', [
            'menus' => $menus,
            'permissions' => $permissions,
            'roleId' => $roleId,
        ]);
    }

    /**
     * 기본 권한으로 초기화 (view만 허용)
     */
    public function reset(Request $request)
    {
        $roleId = $request->input('role_id');
        $guardName = $request->input('guard_name', 'web');
        $tenantId = session('selected_tenant_id');

        $this->rolePermissionService->resetToDefaultPermissions($roleId, $tenantId, $guardName);

        // 전체 매트릭스 다시 로드
        $menus = $this->rolePermissionService->getMenuTree($tenantId);
        $permissions = $this->rolePermissionService->getRolePermissionMatrix($roleId, $tenantId, $guardName);

        return view('role-permissions.partials.permission-matrix', [
            'menus' => $menus,
            'permissions' => $permissions,
            'roleId' => $roleId,
        ]);
    }
}