提交管理员操作一切

Modules/Store.Users.Contracts/Dtos/UserManagementRequests.cs

@@ -10,7 +10,7 @@ public class UserEditRequest
     public string? Notes { get; set; }
     public string? CardId { get; set; }
     public byte? GroupId { get; set; }
-    /// <summary>仅管理员可设置；子账号不能成为管理员。</summary>
+    /// <summary>仅管理员可设置；普通账号不能通过资料修改提升管理员级别。</summary>
     public short? SaLevel { get; set; }
     public string? Authority { get; set; }
     public string? ForbiddenPage { get; set; }
@@ -31,17 +31,26 @@ public sealed class UserUpdateRequest : UserEditRequest
 /// <summary>创建主账号或当前主账号的直属子账号。</summary>
 public sealed class UserCreateRequest : UserEditRequest
 {
+    /// <summary>创建子账号时的父账号；管理员可指定任意主账号，普通主账号只能指定自己。</summary>
+    public string? ParentUserName { get; set; }
     [Required(ErrorMessage = "用户名不能为空")] public string UserName { get; set; } = "";
     [Required(ErrorMessage = "密码不能为空")] public string Password { get; set; } = "";
 }
 
-/// <summary>修改本人密码，必须校验旧密码。</summary>
+/// <summary>本人改密需原密码；管理员及主账号可为管理范围内的其他账户重置密码。</summary>
 public sealed class ChangePasswordRequest
 {
-    [Required(ErrorMessage = "原密码不能为空")] public string OldPassword { get; set; } = "";
+    public string? UserName { get; set; }
+    public string? OldPassword { get; set; }
     [Required(ErrorMessage = "新密码不能为空")] public string NewPassword { get; set; } = "";
 }
 
+/// <summary>本人修改密码时验证原密码非空。</summary>
+public sealed class UserPasswordProofRequest
+{
+    [Required(ErrorMessage = "原密码不能为空")] public string OldPassword { get; set; } = "";
+}
+
 /// <summary>分页参数；页码、分页大小和过滤值由服务检查。</summary>
 public class UserSearchRequest
 {
@@ -49,6 +58,8 @@ public class UserSearchRequest
     public int PageSize { get; set; } = 50;
     public string? Keyword { get; set; }
     public byte? GroupId { get; set; }
+    /// <summary>查询子账号时可按父账号筛选；管理员可指定任意账号，普通主账号只能指定自己。</summary>
+    public string? ParentUserName { get; set; }
 }
 
 public sealed record UserPage<T>(long Total, IReadOnlyList<T> Items);