开发一个财务管理系统，员工可以通过系统查询个人薪资等级和具体的工资，并能够实现按月、季度、年份进行工资的统计，以及通过提交财务报表，财务人员可以通过系统对不同用户的工资等级进行设置，管理员能够实现对不同用户权限的管理
backend.py flask实现的后端
frontend.py tkinter实现的客户端
requirements.txt 依赖库
README.md 项目说明
/reports 财务报表存放处
/flask_session session存放处
/dist/FMS财务管理系统.exe 打包好的前端exe文件
- Python版本：3.11.9
- 数据库：PostgreSQL(最新版安装时请不要选择中文，会出现
The database cluster initialisation failed错误) - 关系表 | 表名 | 字段 | | --- | --- | | user | user_id, username, password, role | | salary | user_id, ts, salary_grade, modified_by | | salary_relation | salary_grade, salary_amount |
-- 创建数据库
CREATE DATABASE finance_management;
CREATE USER username WITH PASSWORD 'password';
GRANT ALL PRIVILEGES ON DATABASE finance_management TO postgres;# Database configuration(backend.py)
DATABASE_USER = os.getenv('DATABASE_USER', 'postgres')
DATABASE_PASSWORD = os.getenv('DATABASE_PASSWORD', 'zhenxun_bot')
# 本地/远程均可
DATABASE_HOST = os.getenv('DATABASE_HOST', 'localhost')
DATABASE_PORT = os.getenv('DATABASE_PORT', '5432')
# 数据库名
DATABASE_NAME = os.getenv('DATABASE_NAME', 'finance_management')
app.config['SQLALCHEMY_DATABASE_URI'] = f'postgresql://{DATABASE_USER}:{DATABASE_PASSWORD}@{DATABASE_HOST}:{DATABASE_PORT}/{DATABASE_NAME}'# conda(anoconda/miniconda)安装完成后，将scripts文件夹添加到环境变量PATH中，以便使用conda命令
# cmd进入项目目录，进行conda初始化，运行后重启终端
conda init
# 创建虚拟环境
conda create -n FMS python=3.11.9
# 激活虚拟环境
conda activate FMS
# 安装依赖（不安装conda的话从此处开始即可，记得pip换源）
pip install -r requirements.txt
# pip临时换源安装所需参数
-i https://pypi.tuna.tsinghua.edu.cn/simple
# 运行backend.py，完成数据库初始化，启动后端
python backend.py同服务器端或直接运行打包好的exe文件
- 检查前后端端口是否有问题
- 后端部署在远程服务器，需要在防火墙开放端口，如5000端口
class User(db.Model):
__tablename__ = 'user'
user_id = db.Column(db.Integer, primary_key=True)
username = db.Column(db.String(80), unique=True, nullable=False)
password = db.Column(db.String(120), nullable=False)
role = db.Column(db.String(10), nullable=False) # 'admin', 'finance', 'employee'
class Salary(db.Model):
__tablename__ = 'salary'
user_id = db.Column(db.Integer, db.ForeignKey('user.user_id'), nullable=False, primary_key=True)
ts = db.Column(db.DateTime, nullable=False)
salary_grade = db.Column(db.String(50), nullable=False)
modified_by = db.Column(db.Integer, db.ForeignKey('user.user_id'), nullable=False)
# Establish a relationship with the User table for the modifier
modifier = db.relationship('User', foreign_keys=[modified_by])
# Optional: Establish a relationship with the User table for the user_id
user = db.relationship('User', foreign_keys=[user_id])
class SalaryRelation(db.Model):
__tablename__ = 'salary_relation'
salary_grade = db.Column(db.String(50), primary_key=True)
salary_amount = db.Column(db.Float, nullable=False)
# Create all tables
with app.app_context():
db.create_all()@app.route('/login', methods=['POST'])
def login():
data = request.get_json()
user = User.query.filter_by(username=data['username'], password=data['password']).first()
# if user and check_password_hash(user.password, data['password']):
if user and user.password == data['password']:
session['user_id'] = user.user_id
session['role'] = user.role
print('log session', dict(session))
return jsonify({'message': 'Logged in successfully!', 'role': user.role, 'user_id': user.user_id})
return jsonify({'message': 'Invalid credentials!'})@app.route('/salary/<int:user_id>', methods=['GET'])
def get_salary(user_id):
user = User.query.filter_by(user_id=user_id).first()
if user is None:
return jsonify({'message': 'User not found!'}), 404
# Check for employee role and access permissions
if user.role == 'employee' and user.user_id != user_id:
return jsonify({'message': 'Access denied!'}), 403
# Query for the latest salary entry
latest_salary = Salary.query.filter_by(user_id=user_id).order_by(Salary.ts.desc()).first()
if latest_salary is None:
return jsonify({'message': 'No salary data found for the user!'}), 404
return jsonify({'grade': latest_salary.salary_grade, 'ts': latest_salary.ts})@app.route('/salary/statistics', methods=['POST'])
def salary_statistics():
data = request.get_json()
user_id = session['user_id']
# if session['role'] == 'employee' and session['user_id'] != int(user_id):
# return jsonify({'message': 'Access denied!'}), 403
option = data['option'] # 'monthly', 'quarterly', 'yearly'
date = data['date']
year = date['year']
user = User.query.filter_by(user_id=user_id).first()
if user is None:
return jsonify({'message': 'User not found!'}), 404
print(data)
# 加载 Excel 文件
file_path = f'reports/salary-{year}.xlsx'
if option =='month':
month = date['month']
try:
df = pd.read_excel(file_path, sheet_name=f'{month}月')
except Exception as e:
return jsonify({'message': 'Failed to read Excel file', 'error': str(e)}), 400
# 搜索名字所在的行
name_to_search = user.username
searched_row = df[df.iloc[:, 0] == name_to_search]
if not searched_row.empty:
# 获取该名字所在行的某列值（例如，第三列）
col_index = 1 # 第三列的索引为2
cell_value = searched_row.iloc[0, col_index]
# 转换为基本数据类型
cell_value = cell_value.item() if hasattr(cell_value, 'item') else cell_value
return jsonify({'salary': cell_value})
else:
return jsonify({'message': 'Salary data not found for the user!'}), 404
elif option == 'quarter':
quarter = date['quarter']
try:
df = pd.read_excel(file_path, sheet_name='总表')
except Exception as e:
return jsonify({'message': 'Failed to read Excel file', 'error': str(e)}), 400
# 搜索名字所在的行
name_to_search = user.username
searched_row = df[df.iloc[:, 0] == name_to_search]
if not searched_row.empty:
# 获取该名字所在行的某列值（例如，第三列）
col_index = quarter # 第三列的索引为2
cell_value = searched_row.iloc[0, col_index]
# 转换为基本数据类型
cell_value = cell_value.item() if hasattr(cell_value, 'item') else cell_value
return jsonify({'salary': cell_value})
else:
return jsonify({'message': 'Salary data not found for the user!'}), 404
elif option == 'year':
try:
df = pd.read_excel(file_path, sheet_name='总表')
except Exception as e:
return jsonify({'message': 'Failed to read Excel file', 'error': str(e)}), 400
# 搜索名字所在的行
name_to_search = user.username
searched_row = df[df.iloc[:, 0] == name_to_search]
if not searched_row.empty:
# 获取该名字所在行的某列值（例如，第三列）
col_index = 5 # 第三列的索引为2
cell_value = searched_row.iloc[0, col_index]
# 转换为基本数据类型
cell_value = cell_value.item() if hasattr(cell_value, 'item') else cell_value
return jsonify({'salary': cell_value})
else:
return jsonify({'message': 'Salary data not found for the user!'}), 404
else:
return jsonify({'message': 'Invalid option!'}), 400@app.route('/salary', methods=['POST'])
@role_required('finance')
def set_salary():
data = request.get_json()
salary = Salary.query.filter_by(user_id=data['user_id']).first()
if not salary:
return jsonify({'message': 'People not found'}), 404
salary.salary_grade = data['salary_grade']
salary.modified_by = session['user_id']
salary.ts = datetime.now().replace(microsecond=0)
try:
db.session.commit()
return jsonify({'message': 'Salary updated successfully!'}), 200
except Exception as e:
db.session.rollback()
return jsonify({'message': 'Failed to update salary', 'error': str(e)}), 500@app.route('/report', methods=['POST'])
@role_required('finance')
def submit_report():
if 'file' not in request.files:
return jsonify({'message': 'No file part'}), 400
file = request.files['file']
if file.filename == '':
return jsonify({'message': 'No selected file'}), 400
# 确保 file.filename 是一个有效的字符串
if not isinstance(file.filename, str):
return jsonify({'message': 'Invalid file type'}), 400
if file and allowed_file(file.filename):
filename = secure_filename(file.filename)
filepath = os.path.join(app.config['UPLOAD_FOLDER'], filename)
file.save(filepath)
print('File saved to:', filepath)
# 检查文件是否存在
if not os.path.exists(filepath):
return jsonify({'message': 'Failed to save file'}), 400
try:
# 尝试使用 pandas 读取文件
df = pd.read_excel(filepath)
return jsonify({'message': 'File is uploaded successfully'}), 200
except Exception as e:
print('Error reading Excel file:', str(e))
return jsonify({'message': 'Invalid Excel file', 'error': str(e)}), 400
else:
return jsonify({'message': 'Invalid file type'}), 400@app.route('/permission', methods=['POST'])
@role_required('admin')
def set_permission():
data = request.get_json()
user_id = data.get('user_id')
new_role = data.get('role')
if not user_id or not new_role:
return jsonify({'message': 'User ID and role are required'}), 400
user = User.query.filter_by(user_id=user_id).first()
if not user:
return jsonify({'message': 'User not found'}), 404
user.role = new_role
try:
db.session.commit()
return jsonify({'message': 'Role updated successfully'}), 200
except Exception as e:
db.session.rollback()
return jsonify({'message': 'Failed to update role', 'error': str(e)}), 500def role_required(role):
def decorator(f):
@wraps(f)
def decorated_function(*args, **kwargs):
print("Session in decorator:", dict(session)) # 打印调试信息
if 'user_id' not in session or 'role' not in session:
return jsonify({'message': 'Unauthorized'}), 401
if session['role'] != role:
return jsonify({'message': 'Permission denied'}), 403
return f(*args, **kwargs)
return decorated_function
return decorator- 函数定义:
role_required函数接收一个参数role，这个参数指定了被装饰函数需要的用户角色。
- 装饰器工厂:
role_required函数内部定义并返回了一个装饰器decorator。这种模式被称为“装饰器工厂”，因为它返回的是一个装饰器，而不是直接装饰一个函数。
- 装饰器:
decorator函数接收一个参数f，这个参数是被装饰的函数。- 在
decorator函数内部，定义了一个名为decorated_function的包装函数，它接收任意数量的位置参数和关键字参数，并将它们传递给被装饰的函数f。
- 访问控制:
- 在
decorated_function函数内部，首先打印了session的内容（用于调试）。 - 然后，检查
session中是否包含user_id和role键。如果任何一个键不存在，则返回 401 状态码和一条未授权消息。 - 如果
session中的role不等于装饰器要求的role，则返回 403 状态码和一条权限拒绝消息。 - 如果上述检查都通过，那么调用被装饰的函数
f并返回其结果。
- 在
- 使用
@wraps:decorated_function使用了wraps装饰器，这是 Flask 提供的一个辅助装饰器，用于保留被装饰函数的名称和文档字符串。
- 返回值:
role_required函数返回了decorator函数，这意味着当你使用@role_required('admin')装饰一个函数时，你实际上是在应用decorator函数。
def view_salary(self):
response = requests.get(f"{SALARY_URL}/{self.user_id}")
# print(response.text)
print(self.session.params,self.session.headers,self.session.cookies)
data = response.json()
try:
salary_info = f"最新薪资等级: {data['grade']}, 更新时间: {data['ts']}"
messagebox.showinfo("查看薪资等级", salary_info)
except:
messagebox.showerror("Error", data['message'])def view_salary_statistics(self):
# 创建新的窗口
stat_window = tk.Toplevel(self.root)
stat_window.title("薪资统计信息")
# 时间类型选择框
time_type_label = ttk.Label(stat_window, text="选择查询类型:")
time_type_label.pack(pady=3)
time_type = tk.StringVar()
time_type_combo = ttk.Combobox(stat_window, textvariable=time_type)
time_type_combo['values'] = ('月', '季度', '年')
time_type_combo.current(0) # 设置默认值
time_type_combo.pack(pady=5)
# 年份输入框
year_label = ttk.Label(stat_window, text="年份:")
year_label.pack(pady=5)
year_entry = ttk.Entry(stat_window)
year_entry.pack(pady=5)
# 月份输入框（仅在选择月份/季度时可见）
month_label = ttk.Label(stat_window, text="月份:")
month_label.pack(pady=5)
month_entry = ttk.Entry(stat_window)
month_entry.pack(pady=5)
# 触发选择类型更新
time_type.trace_add('write', lambda *args: self.update_inputs(time_type, month_label, month_entry))
# 创建获取统计数据按钮
fetch_button = ttk.Button(stat_window, text="统计数据", command=lambda: self.fetch_statistics(time_type, year_entry, month_entry))
fetch_button.pack(pady=20)def update_inputs(self, time_type, month_label, month_entry):
selected_type = time_type.get()
if selected_type == '月' or selected_type == '季度':
month_label.pack(pady=5)
month_entry.pack(pady=5)
else:
month_label.pack_forget()
month_entry.pack_forget()def fetch_statistics(self, time_type, year_entry, month_entry):
year = int(year_entry.get())
selected_type = time_type.get()
date_range = {"year": year}
if selected_type == '月' or selected_type == '季度':
month = int(month_entry.get())
if selected_type == '月':
option = "month"
date_range["month"] = month
else:
option = "quarter"
quarter = (month - 1) // 3 + 1
date_range["quarter"] = quarter
else:
option = "year"
response = self.session.post(f"{STATISTICS_URL}", json={"option": option, "date": date_range})
try:
data = response.json()
if selected_type == '月':
statistics_info = f"{year}年{month}月薪资：{data['salary']}元"
elif selected_type == '季度':
statistics_info = f"{year}年第{quarter}季度薪资：{data['salary']}元"
else:
statistics_info = f"{year}年总薪资：{data['salary']}元"
messagebox.showinfo("薪资统计", statistics_info)
except:
messagebox.showerror("Error", data['message'])def set_salary(self):
user_id = self.get_user_id()
salary_grade = self.get_salary_grade()
response = self.session.post(SALARY_URL, json={
"user_id": user_id, "salary_grade": salary_grade
})
try:
data = response.json()
except requests.exceptions.JSONDecodeError as e:
messagebox.showerror("Error", f"Failed to parse JSON: {e}")
return
if response.status_code == 200:
messagebox.showinfo("Success", data['message'])
else:
messagebox.showerror("Error", data['message'])def submit_report(self):
file_path = filedialog.askopenfilename(filetypes=[("Excel files", "*.xls *.xlsx")])
if file_path:
with open(file_path, 'rb') as f:
files = {'file': f}
response = self.session.post(REPORT_URL, files=files)
if response.status_code == 200:
messagebox.showinfo("Success", "File is uploaded successfully.")
else:
error_message = response.json().get('message', 'Unknown error')
messagebox.showerror("Error", f"Failed to upload file: {error_message}")def set_permission(self):
user_id = self.get_user_id()
if user_id is None:
return
permission_level = self.get_permission_level()
if permission_level is None:
return
response = self.session.post(PERMISSION_URL, json={"user_id": user_id, "role": permission_level})
try:
data = response.json()
except requests.exceptions.JSONDecodeError as e:
messagebox.showerror("Error", f"Failed to parse JSON: {e}")
return
if response.status_code == 200:
messagebox.showinfo("Success", data['message'])
else:
messagebox.showerror("Error", data['message'])