-- 二期入库审核与异常放行按钮权限，可重复部署。
USE baiyue_iam;
SET NAMES utf8mb4;

INSERT INTO iam_permission
  (id, tenant_id, app_code, permission_type, parent_id, permission_code,
   permission_name, route_path, http_method, sort_no, status, deleted)
VALUES
  (5102051, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:measurement-review',
   '测量审核', NULL, NULL, 10, 'ACTIVE', 0),
  (5102052, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:measurement-review-history',
   '查看测量审核历史', NULL, NULL, 20, 'ACTIVE', 0),
  (5102053, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:exception-release',
   '测量异常放行', NULL, NULL, 30, 'ACTIVE', 0),
  (5102054, 0, 'PLATFORM', 'BUTTON', 5102030, 'firstleg:inbound:send-fee',
   '发送费用并入库', NULL, NULL, 40, 'ACTIVE', 0)
ON DUPLICATE KEY UPDATE
  permission_name = VALUES(permission_name), parent_id = VALUES(parent_id),
  status = 'ACTIVE', deleted = 0;

-- 仅给平台超级管理员补齐默认权限；业务角色由 IAM 页面按职责授权。
INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
SELECT 4000001, p.id, 0
FROM iam_permission p
WHERE p.id BETWEEN 5102051 AND 5102054
ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);

-- 客服（订单运营）负责测量审核；费用发送由审核通过后的服务端编排自动执行。
INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
SELECT 4000003, p.id, 0
FROM iam_permission p
WHERE p.id IN (5102051, 5102052)
ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);