update code

EduSystemServer/API/views.py

@@ -2,15 +2,12 @@ import json
 from datetime import datetime, timedelta
 
 import jwt
-from django.shortcuts import render
-from django.http import JsonResponse, HttpResponse
 
-# Create your views here.
 from django.views.decorators.csrf import csrf_exempt
 from Student.models import *
 from teacher.models import Teacher
-from EduSystemServer.utils import ResponseUtil
 from EduSystemServer.settings import TOKEN_KEY
+from EduSystemServer.utils import *
 
 # 用户登录成功后生成 JWT Token
 def generate_jwt_token(user, _type):

EduSystemServer/EduSystemServer/settings.py

@@ -62,6 +62,24 @@ MIDDLEWARE = [
     'API.middle.JWTMiddleware',
 ]
 
+LOGGING = {
+    'version': 1,
+    'disable_existing_loggers': False,
+    'handlers': {
+        'console': {
+            'level': 'DEBUG',  # 调整日志级别为 DEBUG 以记录 SQL 查询
+            'class': 'logging.StreamHandler',
+        },
+    },
+    'loggers': {
+        'django.db.backends': {
+            'handlers': ['console'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+    },
+}
+
 
 
 ROOT_URLCONF = 'EduSystemServer.urls'

EduSystemServer/EduSystemServer/utils.py

@@ -1,5 +1,43 @@
+from functools import wraps
+from django.http import HttpResponseForbidden, JsonResponse
 
 
+def student_required(view_func):
+    """
+    装饰器：用于权限控制
+    """
+    @wraps(view_func)
+    def _wrapped_view(request, *args, **kwargs):
+        if request.jwt_payload.get("type") == 'student':
+            return view_func(request, *args, **kwargs)
+        else:
+            return JsonResponse(ResponseUtil.error("你没有该权限进行操作！"))
+    return _wrapped_view
+
+def teacher_required(view_func):
+    """
+    装饰器：用于权限控制
+    """
+    @wraps(view_func)
+    def _wrapped_view(request, *args, **kwargs):
+        if request.jwt_payload.get("type") ==  'teacher':
+            return view_func(request, *args, **kwargs)
+        else:
+            return JsonResponse(ResponseUtil.error("你没有该权限进行操作！"))
+    return _wrapped_view
+
+def admin_required(view_func):
+    """
+    装饰器：用于权限控制
+    """
+    @wraps(view_func)
+    def _wrapped_view(request, *args, **kwargs):
+        if request.jwt_payload.get("type") == 'admin':
+            return view_func(request, *args, **kwargs)
+        else:
+            return JsonResponse(ResponseUtil.error("你没有该权限进行操作！"))
+    return _wrapped_view
+
 class ResponseUtil:
     @staticmethod
     def ok(data, message="success!"):

EduSystemServer/Student/views.py

@@ -9,7 +9,7 @@ from django.http import JsonResponse
 from course.models import SC, Course
 from .models import Student
 
-from EduSystemServer.utils import ResponseUtil
+from EduSystemServer.utils import *
 from Student.models import Student
 from .models import Student
 from django.views.decorators.csrf import csrf_exempt
@@ -120,6 +120,8 @@ def studnets(request):
 
 
 @csrf_exempt
+@teacher_required
+@admin_required
 def add_student(request):
     if not request.method == "POST":
         return JsonResponse(ResponseUtil.error("request method error!"))
@@ -140,10 +142,12 @@ def add_student(request):
     return JsonResponse(result)
 
 @csrf_exempt
+@teacher_required
+@admin_required
 def search_student(request):
     currentPage = request.GET.get("currentPage")
     pageSize = request.GET.get("pageSize")
-    request_data = json.loads(request.body)
+    request_data = request.POST
     search_students = Student.objects.all()
     if not request_data.get("sid") == "":
         search_students =search_students.filter(sid=request_data.get("sid"))
@@ -169,6 +173,8 @@ def search_student(request):
 
 
 @csrf_exempt
+@teacher_required
+@admin_required
 def del_student(request):
     if not request.method == "GET":
         return JsonResponse(ResponseUtil.error("request method error!"))
@@ -183,6 +189,7 @@ def del_student(request):
 
 
 @csrf_exempt
+@student_required
 def select_course(request):
     if not request.method == "POST":
         return JsonResponse(ResponseUtil.error("request method error!"))
@@ -205,7 +212,11 @@ def select_course(request):
         return JsonResponse(ResponseUtil.error(str(E)))
 
 
+@student_required
 def get_grade(request):
+    """
+    获取学生成绩
+    """
     if not request.method == "GET":
         return ResponseUtil.error("request method error!")
     try:

EduSystemServer/course/urls.py

@@ -6,5 +6,7 @@ urlpatterns = [
     path("", courses),
     path("getCourseById", get_course_by_student_id),
     path("deleteSelectCourse", delete_select_course),
-    path("seacherCourse", search_course)
+    path("seacherCourse", search_course),
+    path("getStudentCourse", get_student_select_course),
+    path("editGrade", edit_grade)
 ]

EduSystemServer/course/views.py

@@ -1,12 +1,13 @@
 import json
 
 from django.core.paginator import Paginator, PageNotAnInteger, EmptyPage
+from django.db.models import F, Subquery, Max
 from django.shortcuts import render
 
 # Create your views here.
 from django.http import JsonResponse
 
-from EduSystemServer.utils import ResponseUtil
+from EduSystemServer.utils import *
 from course.models import *
 from django.views.decorators.csrf import csrf_exempt
 from io import BytesIO
@@ -73,6 +74,9 @@ def courses(request):
 
 
 def search_course(request):
+    """
+    通过条件查询课程，并且分页显示
+    """
     if not request.method == "GET":
         return JsonResponse(ResponseUtil.error("request method error!"))
     teacher_name = request.GET.get("tName")
@@ -105,6 +109,9 @@ def search_course(request):
 
 
 def get_course_by_student_id(request):
+    """
+    通过学生ID获取学生的选课
+    """
     if not request.method == "GET":
         return JsonResponse(ResponseUtil.error("request method error!"))
     s_username = request.jwt_payload.get("username")
@@ -119,6 +126,9 @@ def get_course_by_student_id(request):
 
 
 def delete_select_course(request):
+    """
+    删除选课
+    """
     if not request.method == "GET":
         return JsonResponse(ResponseUtil.error("request method error!"))
     try:
@@ -130,4 +140,68 @@ def delete_select_course(request):
     except Exception as E:
         return JsonResponse(ResponseUtil.error(E))
 
+@csrf_exempt
+@teacher_required
+@admin_required
+def get_student_select_course(request):
+    """
+    获取所有学生的所有选课
+    """
+    if not request.method == "POST":
+        return JsonResponse(ResponseUtil.error("request method error!"))
+    current_page = request.GET.get("currentPage")
+    sname = request.POST.get("sname")
+    className = request.POST.get("className")
+    courseName = request.POST.get("courseName")
+    courseType = request.POST.get("courseType")
+    sc_list = SC.objects.all().filter(
+        sid__name__contains=sname,
+        sid__class_name__contains=className,
+        cid__name__contains=courseName,
+        cid__type__contains=courseType
+    ).annotate(
+        sname=F("sid__name"),
+        className=F("sid__class_name"),
+        cname=F("cid__name"), ctype=F("cid__type"),
+        endGrade=F("end_grade"),
+        middleGrade=F("middle_grade")
+    ).values(
+        "sname", "className", "cname",
+        "ctype", "endGrade", "middleGrade",
+        "sid", "cid"
+        ).distinct()
+    paginator = Paginator(sc_list, 10)
+    try:
+        sc_list = paginator.page(current_page).object_list
+    except PageNotAnInteger:
+        sc_list = paginator.page(1)
+    except EmptyPage:
+        sc_list = paginator.page(paginator.num_pages).object_list
+    data = []
+    for student in sc_list:
+        data.append(student)
+    result = ResponseUtil.ok(data, "success!")
+    result["pageTotal"] = paginator.count
+    result["pageNum"] = paginator.num_pages
+    return JsonResponse(result)
+
+@teacher_required
+@admin_required
+@csrf_exempt
+def edit_grade(request):
+    """
+    成绩录入
+    """
+    if not request.method == "POST":
+        return JsonResponse(ResponseUtil.error("request method error!"))
+    try:
+        sid = request.POST.get("sid")
+        cid = request.POST.get("cid")
+        sc = SC.objects.filter(sid=sid, cid=cid).first()
+        sc.middle_grade = request.POST.get("middleGrade")
+        sc.end_grade = request.POST.get("endGrade")
+        sc.save()
+        return JsonResponse(ResponseUtil.ok(None, "成绩修改成功！"))
+    except Exception as E:
+        return JsonResponse(ResponseUtil.error(str(E)))