货柜pda 添加操作人

iam/src/main/resources/db/iam.sql

@@ -149,6 +149,7 @@ CREATE TABLE IF NOT EXISTS iam_membership (
   member_type VARCHAR(20) NOT NULL DEFAULT 'EMPLOYEE' COMMENT '成员类型：EMPLOYEE企业员工等',
   member_no VARCHAR(64) NULL COMMENT '客户企业内部成员编号',
   overseas_warehouse_id BIGINT NULL COMMENT '海外仓PDA操作员绑定的唯一实际海外仓ID',
+  domestic_warehouse_id BIGINT NULL COMMENT '国内头程PDA操作员绑定的唯一国内作业仓ID',
   status VARCHAR(20) NOT NULL DEFAULT 'ACTIVE' COMMENT '成员状态：ACTIVE在职、DISABLED停用、LEFT已离开',
   joined_at DATETIME(3) NULL COMMENT '加入客户企业时间',
   left_at DATETIME(3) NULL COMMENT '离开客户企业时间',

iam/src/main/resources/db/phase3-warehouse-roles.sql

@@ -3,6 +3,26 @@
 USE baiyue_iam;
 SET NAMES utf8mb4;
 
+DROP PROCEDURE IF EXISTS ensure_domestic_pda_operator_warehouse_column;
+DELIMITER $$
+CREATE PROCEDURE ensure_domestic_pda_operator_warehouse_column()
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM information_schema.columns
+     WHERE table_schema = DATABASE() AND table_name = 'iam_membership'
+       AND column_name = 'domestic_warehouse_id'
+  ) THEN
+    ALTER TABLE iam_membership
+      ADD COLUMN domestic_warehouse_id BIGINT NULL
+      COMMENT '国内头程PDA操作员绑定的唯一国内作业仓ID'
+      AFTER overseas_warehouse_id,
+      ADD KEY idx_membership_domestic_warehouse (tenant_id, domestic_warehouse_id, status);
+  END IF;
+END$$
+DELIMITER ;
+CALL ensure_domestic_pda_operator_warehouse_column();
+DROP PROCEDURE ensure_domestic_pda_operator_warehouse_column;
+
 UPDATE iam_role
    SET role_code = 'OVERSEAS_WAREHOUSE_PDA_OPERATOR',
        role_name = '海外仓 PDA 作业员',
@@ -72,13 +92,16 @@ CREATE TEMPORARY TABLE tmp_phase3_warehouse_role_permission (
   PRIMARY KEY (role_code, permission_code)
 ) ENGINE=MEMORY;
 
--- 操作员：查看入仓业务并维护后台装柜证据，不授予完成装柜、任务分派或出仓动作。
+-- 仓管：可查看并确认预装、指定国内 PDA 作业员，不授予 PDA 执行或出仓动作。
 INSERT INTO tmp_phase3_warehouse_role_permission (role_code, permission_code) VALUES
   ('WAREHOUSE_OPERATOR', 'platform:order'),
   ('WAREHOUSE_OPERATOR', 'platform:firstleg:inbound:list'),
   ('WAREHOUSE_OPERATOR', 'platform:firstleg:inbound:view'),
   ('WAREHOUSE_OPERATOR', 'platform:firstleg:inbound:loading:view'),
-  ('WAREHOUSE_OPERATOR', 'platform:firstleg:inbound:loading:edit');
+  ('WAREHOUSE_OPERATOR', 'platform:firstleg:inbound:loading:edit'),
+  ('WAREHOUSE_OPERATOR', 'platform:firstleg:preload:list'),
+  ('WAREHOUSE_OPERATOR', 'platform:firstleg:preload:edit'),
+  ('WAREHOUSE_OPERATOR', 'platform:firstleg:pda:assign');
 
 -- 国内头程 PDA 作业员：只允许国内任务查询、作业和现场照片，不授予后台、海外、分派或复核权限。
 INSERT INTO tmp_phase3_warehouse_role_permission (role_code, permission_code) VALUES
@@ -112,7 +135,7 @@ BEGIN
          COALESCE(SUM(role_code = 'WAREHOUSE_TALLY'), 0)
     INTO operator_permission_count, domestic_pda_permission_count, tally_permission_count
     FROM tmp_phase3_warehouse_role_permission;
-  IF operator_permission_count <> 5
+  IF operator_permission_count <> 8
      OR domestic_pda_permission_count <> 2
      OR tally_permission_count <> 12 THEN
     SIGNAL SQLSTATE '45000'
@@ -208,7 +231,7 @@ BEGIN
         JOIN iam_role_permission grant_row
           ON grant_row.role_id = role.id
          AND grant_row.permission_id = permission.id
-         AND grant_row.tenant_id = 0) <> 19 THEN
+         AND grant_row.tenant_id = 0) <> 22 THEN
     SIGNAL SQLSTATE '45000'
       SET MESSAGE_TEXT = '仓库角色初始化失败：最小权限授权未完整写入';
   END IF;

iam/src/main/resources/openapi/iam-v1.yaml

@@ -435,6 +435,18 @@ paths:
       responses:
         '200': {$ref: '#/components/responses/Success'}
         '403': {$ref: '#/components/responses/Forbidden'}
+  /api/platform/v1/iam/users/domestic-pda-operators:
+    get:
+      tags: [IAM Resources / IAM 资源]
+      summary: 查询启用的国内头程 PDA 作业员候选
+      description: 仅返回具有 CN_FIRSTLEG_PDA_OPERATOR 角色且账号、成员、角色均启用的平台人员。
+      x-permission: platform:firstleg:pda:assign
+      parameters:
+        - {name: warehouseId, in: query, required: true, schema: {type: integer, format: int64, minimum: 1, description: 仅返回绑定到该国内仓的国内头程 PDA 作业员}}
+        - {name: keyword, in: query, required: false, schema: {type: string}}
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '403': {$ref: '#/components/responses/Forbidden'}
   /api/platform/v1/iam/users/{membershipId}:
     parameters:
       - {$ref: '#/components/parameters/MembershipId'}
@@ -993,6 +1005,19 @@ paths:
                           total: {type: integer, format: int64}
                           pages: {type: integer}
         '403': {$ref: '#/components/responses/Forbidden'}
+  /internal/iam/domestic-pda-operators/{authUserId}:
+    get:
+      tags: [IAM Resources / IAM 资源]
+      summary: 校验并返回启用的国内头程 PDA 作业员
+      security: []
+      parameters:
+        - {$ref: '#/components/parameters/InternalServiceToken'}
+        - {name: authUserId, in: path, required: true, schema: {type: integer, format: int64, minimum: 1}}
+        - {name: warehouseId, in: query, required: true, schema: {type: integer, format: int64, minimum: 1}}
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '404': {$ref: '#/components/responses/NotFound'}
   /internal/exports/v1/CUSTOMER_LIST/batches:
     post:
       tags: [Internal Export Provider]
@@ -1550,6 +1575,7 @@ components:
         tenantId: {type: integer, format: int64, enum: [0], description: 保留的兼容字段，只允许平台技术作用域 0}
         roleIds: {type: array, minItems: 1, items: {type: integer, format: int64}}
         overseasWarehouseId: {type: integer, format: int64, nullable: true, description: 选择 OVERSEAS_WAREHOUSE_PDA_OPERATOR 时必填且只能绑定一个实际海外仓；CN_FIRSTLEG_PDA_OPERATOR 与其他角色必须为空；两个 PDA 角色不能同时分配}
+        domesticWarehouseId: {type: integer, format: int64, nullable: true, description: 选择 CN_FIRSTLEG_PDA_OPERATOR 时必填且只能绑定一个有效国内作业仓；非国内头程 PDA 角色时必须为空；两个 PDA 角色不能同时分配}
         password: {type: string, format: password, minLength: 8, maxLength: 64, writeOnly: true}
         status: {type: string, enum: [ACTIVE, DISABLED]}
     UpdatePlatformManagedUserRequest:
@@ -1562,6 +1588,7 @@ components:
         tenantId: {type: integer, format: int64, enum: [0], description: 保留的兼容字段，只允许平台技术作用域 0}
         roleIds: {type: array, minItems: 1, items: {type: integer, format: int64}}
         overseasWarehouseId: {type: integer, format: int64, nullable: true, description: 选择 OVERSEAS_WAREHOUSE_PDA_OPERATOR 时必填且只能绑定一个实际海外仓；CN_FIRSTLEG_PDA_OPERATOR 与其他角色必须为空；两个 PDA 角色不能同时分配}
+        domesticWarehouseId: {type: integer, format: int64, nullable: true, description: 选择 CN_FIRSTLEG_PDA_OPERATOR 时必填且只能绑定一个有效国内作业仓；非国内头程 PDA 角色时必须为空；两个 PDA 角色不能同时分配}
     CreateInternalUserRequest:
       type: object
       required: [displayName]
@@ -1635,6 +1662,7 @@ components:
         lastLoginAt: {type: string, format: date-time, nullable: true}
         protectedAccount: {type: boolean}
         overseasWarehouseId: {type: string, pattern: '^\d+$', nullable: true, description: 海外仓PDA操作员绑定的唯一实际海外仓ID}
+        domesticWarehouseId: {type: string, pattern: '^\d+$', nullable: true, description: 国内头程PDA操作员绑定的唯一国内作业仓ID}
     CreateMemberRequest:
       type: object
       required: [username, password, displayName, memberType]