二期内容提交

2026-08-04 10:07:45 +08:00
parent b2b4ff429d
commit 57b54a5236
184 changed files with 13195 additions and 5 deletions
@@ -0,0 +1,29 @@
+-- 二期 FBA 计费权限；在入库查询、测量和审核权限脚本后执行，可重复部署。
+USE baiyue_iam;
+SET NAMES utf8mb4;
+
+INSERT INTO iam_permission
+  (id, tenant_id, app_code, permission_type, parent_id, permission_code,
+   permission_name, route_path, http_method, sort_no, status, built_in, deleted)
+VALUES
+  (5102061, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:rule:view', '查看客户计费规则', NULL, NULL, 10, 'ACTIVE', 1, 0),
+  (5102062, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:rule:edit', '维护客户计费规则', NULL, NULL, 20, 'ACTIVE', 1, 0),
+  (5102063, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:rate:view', '查看承运商价格', NULL, NULL, 30, 'ACTIVE', 1, 0),
+  (5102064, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:rate:edit', '维护承运商价格', NULL, NULL, 40, 'ACTIVE', 1, 0),
+  (5102065, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:calculate', '计算入库费用', NULL, NULL, 50, 'ACTIVE', 1, 0),
+  (5102066, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:confirm', '内部确认入库费用', NULL, NULL, 60, 'ACTIVE', 1, 0),
+  (5102067, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:view', '查看入库费用', NULL, NULL, 70, 'ACTIVE', 1, 0),
+  (5102068, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:fba-pricing:adjust', '调整已发布费用', NULL, NULL, 80, 'ACTIVE', 1, 0)
+ON DUPLICATE KEY UPDATE
+  permission_name = VALUES(permission_name), parent_id = VALUES(parent_id),
+  status = 'ACTIVE', built_in = 1, deleted = 0;
+
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000001, id, 0 FROM iam_permission
+WHERE id BETWEEN 5102061 AND 5102068
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
+
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000003, id, 0 FROM iam_permission
+WHERE id IN (5102061, 5102063, 5102065, 5102066, 5102067, 5102068)
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
@@ -0,0 +1,32 @@
+-- 二期入库测量平台菜单和按钮权限，可重复执行。
+SET NAMES utf8mb4;
+USE baiyue_iam;
+
+INSERT INTO iam_permission
+  (id, tenant_id, app_code, permission_type, parent_id, permission_code, permission_name,
+   route_path, http_method, sort_no, status, deleted)
+VALUES
+  (5102041, 0, 'PLATFORM', 'BUTTON', 5102030,
+   'platform:firstleg:inbound:measure:view', '查看入库测量', NULL, NULL, 10, 'ACTIVE', 0),
+  (5102042, 0, 'PLATFORM', 'BUTTON', 5102030,
+   'platform:firstleg:inbound:measure:edit', '保存测量草稿', NULL, NULL, 10, 'ACTIVE', 0),
+  (5102043, 0, 'PLATFORM', 'BUTTON', 5102030,
+   'platform:firstleg:inbound:measure:submit', '确认并提交测量', NULL, NULL, 20, 'ACTIVE', 0),
+  (5102044, 0, 'PLATFORM', 'BUTTON', 5102030,
+   'platform:firstleg:inbound:weight:edit', '维护OCR重量', NULL, NULL, 30, 'ACTIVE', 0),
+  (5102045, 0, 'PLATFORM', 'BUTTON', 5102030,
+   'platform:firstleg:inbound:weight:confirm', '确认OCR重量', NULL, NULL, 40, 'ACTIVE', 0)
+ON DUPLICATE KEY UPDATE
+  permission_type = VALUES(permission_type), parent_id = VALUES(parent_id),
+  permission_name = VALUES(permission_name), route_path = VALUES(route_path),
+  http_method = NULL, sort_no = VALUES(sort_no), status = 'ACTIVE', deleted = 0;
+
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000001, id, 0 FROM iam_permission
+WHERE id IN (5102041, 5102042, 5102043, 5102044, 5102045)
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
+
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000003, id, 0 FROM iam_permission
+WHERE id IN (5102041, 5102042, 5102043, 5102044, 5102045)
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
@@ -0,0 +1,33 @@
+-- 二期入库审核与异常放行按钮权限，可重复部署。
+USE baiyue_iam;
+SET NAMES utf8mb4;
+
+INSERT INTO iam_permission
+  (id, tenant_id, app_code, permission_type, parent_id, permission_code,
+   permission_name, route_path, http_method, sort_no, status, deleted)
+VALUES
+  (5102051, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:measurement-review',
+   '测量审核', NULL, NULL, 10, 'ACTIVE', 0),
+  (5102052, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:measurement-review-history',
+   '查看测量审核历史', NULL, NULL, 20, 'ACTIVE', 0),
+  (5102053, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:exception-release',
+   '测量异常放行', NULL, NULL, 30, 'ACTIVE', 0),
+  (5102054, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:send-fee',
+   '发送费用并入库', NULL, NULL, 40, 'ACTIVE', 0)
+ON DUPLICATE KEY UPDATE
+  permission_name = VALUES(permission_name), parent_id = VALUES(parent_id),
+  status = 'ACTIVE', deleted = 0;
+
+-- 仅给平台超级管理员补齐默认权限；业务角色由 IAM 页面按职责授权。
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000001, p.id, 0
+FROM iam_permission p
+WHERE p.id BETWEEN 5102051 AND 5102054
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
+
+-- 客服（订单运营）负责测量审核；费用发送由审核通过后的服务端编排自动执行。
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000003, p.id, 0
+FROM iam_permission p
+WHERE p.id IN (5102051, 5102052)
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
@@ -0,0 +1,25 @@
+-- 二期入库单列表和详情只读权限，可在一期 RBAC 脚本后重复执行。
+USE baiyue_iam;
+
+INSERT INTO iam_permission
+  (id, tenant_id, app_code, permission_type, parent_id, permission_code,
+   permission_name, route_path, http_method, sort_no, status, built_in, deleted)
+VALUES
+  (5102030, 0, 'PLATFORM', 'MENU', 5102000, 'platform:firstleg:inbound:list',
+   '入库单', '/inbounds', 'GET', 30, 'ACTIVE', 1, 0),
+  (5102031, 0, 'PLATFORM', 'BUTTON', 5102030, 'platform:firstleg:inbound:view',
+   '查看入库单详情', NULL, 'GET', 10, 'ACTIVE', 1, 0)
+ON DUPLICATE KEY UPDATE
+  permission_name = VALUES(permission_name), parent_id = VALUES(parent_id),
+  route_path = VALUES(route_path), http_method = VALUES(http_method),
+  status = 'ACTIVE', built_in = 1, deleted = 0;
+
+INSERT IGNORE INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT role.id, permission.id, role.tenant_id
+FROM iam_role role
+JOIN iam_permission permission
+  ON permission.tenant_id = 0
+ AND permission.permission_code IN (
+   'platform:firstleg:inbound:list', 'platform:firstleg:inbound:view')
+WHERE role.tenant_id = 0
+  AND role.role_code IN ('PLATFORM_ADMIN', 'ORDER_OPERATOR');
@@ -0,0 +1,34 @@
+-- 二期库位管理菜单和按钮权限。
+-- 在 phase1-admin-rbac.sql、phase1-platform-master-data-and-permission-management.sql 之后执行，可重复执行。
+USE baiyue_iam;
+SET NAMES utf8mb4;
+
+INSERT INTO iam_permission
+  (id, tenant_id, app_code, permission_type, parent_id, permission_code, permission_name,
+   route_path, http_method, sort_no, status, built_in, deleted)
+VALUES
+  (5103040, 0, 'PLATFORM', 'MENU', 5103000, 'platform:location:list', '库位管理',
+   '/master-data/locations', NULL, 40, 'ACTIVE', 1, 0),
+  (5103041, 0, 'PLATFORM', 'BUTTON', 5103040, 'platform:location:create', '新增库位',
+   NULL, NULL, 10, 'ACTIVE', 1, 0),
+  (5103042, 0, 'PLATFORM', 'BUTTON', 5103040, 'platform:location:edit', '编辑库位',
+   NULL, NULL, 20, 'ACTIVE', 1, 0),
+  (5103043, 0, 'PLATFORM', 'BUTTON', 5103040, 'platform:location:status', '启停库位',
+   NULL, NULL, 30, 'ACTIVE', 1, 0),
+  (5103044, 0, 'PLATFORM', 'BUTTON', 5103040, 'platform:location:delete', '删除库位',
+   NULL, NULL, 40, 'ACTIVE', 1, 0)
+ON DUPLICATE KEY UPDATE
+  permission_type = VALUES(permission_type), parent_id = VALUES(parent_id),
+  permission_name = VALUES(permission_name), route_path = VALUES(route_path),
+  sort_no = VALUES(sort_no), status = 'ACTIVE', built_in = 1, deleted = 0;
+
+-- 二期新增库位权限默认只授予平台系统管理员。
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000001, id, 0
+FROM iam_permission
+WHERE tenant_id = 0 AND app_code = 'PLATFORM'
+  AND permission_code IN (
+    'platform:location:list', 'platform:location:create', 'platform:location:edit',
+    'platform:location:status', 'platform:location:delete'
+  )
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
@@ -0,0 +1,39 @@
+-- 二期托盘管理菜单和按钮权限。
+-- 在 phase1-admin-rbac.sql、phase1-platform-master-data-and-permission-management.sql 之后执行，可重复执行。
+USE baiyue_iam;
+SET NAMES utf8mb4;
+
+INSERT INTO iam_permission
+  (id, tenant_id, app_code, permission_type, parent_id, permission_code, permission_name,
+   route_path, http_method, sort_no, status, built_in, deleted)
+VALUES
+  (5103050, 0, 'PLATFORM', 'MENU', 5103000, 'platform:pallet:list', '托盘管理',
+   '/master-data/pallets', NULL, 50, 'ACTIVE', 1, 0),
+  (5103051, 0, 'PLATFORM', 'BUTTON', 5103050, 'platform:pallet:create', '新增托盘',
+   NULL, NULL, 10, 'ACTIVE', 1, 0),
+  (5103052, 0, 'PLATFORM', 'BUTTON', 5103050, 'platform:pallet:edit', '编辑托盘',
+   NULL, NULL, 20, 'ACTIVE', 1, 0),
+  (5103054, 0, 'PLATFORM', 'BUTTON', 5103050, 'platform:pallet:delete', '删除托盘',
+   NULL, NULL, 30, 'ACTIVE', 1, 0)
+ON DUPLICATE KEY UPDATE
+  permission_type = VALUES(permission_type), parent_id = VALUES(parent_id),
+  permission_name = VALUES(permission_name), route_path = VALUES(route_path),
+  sort_no = VALUES(sort_no), status = 'ACTIVE', built_in = 1, deleted = 0;
+
+-- 二期新增托盘权限默认只授予平台系统管理员。
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000001, id, 0
+FROM iam_permission
+WHERE tenant_id = 0 AND app_code = 'PLATFORM'
+  AND permission_code IN (
+    'platform:pallet:list', 'platform:pallet:create', 'platform:pallet:edit', 'platform:pallet:delete'
+  )
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
+
+-- 兼容已经试运行过旧脚本的环境：移除人工启停权限。
+DELETE rp FROM iam_role_permission rp
+JOIN iam_permission p ON p.id = rp.permission_id
+WHERE p.tenant_id = 0 AND p.app_code = 'PLATFORM' AND p.permission_code = 'platform:pallet:status';
+UPDATE iam_permission
+SET status = 'INACTIVE', deleted = 1
+WHERE tenant_id = 0 AND app_code = 'PLATFORM' AND permission_code = 'platform:pallet:status';