54 lines
3.7 KiB
SQL
54 lines
3.7 KiB
SQL
SET NAMES utf8mb4;
|
|
-- 角色管理闭环权限迁移，可重复执行。
|
|
USE baiyue_iam;
|
|
|
|
INSERT INTO iam_permission
|
|
(id, tenant_id, app_code, permission_type, parent_id, permission_code,
|
|
permission_name, sort_no, status, deleted)
|
|
VALUES
|
|
(5100011, 0, 'PLATFORM', 'BUTTON', 5100010, 'platform:customer:create', '新增企业客户', 10, 'ACTIVE', 0),
|
|
(5100016, 0, 'PLATFORM', 'BUTTON', 5100010, 'platform:customer:reset-password', '重置客户管理员密码', 50, 'ACTIVE', 0),
|
|
(5100017, 0, 'PLATFORM', 'BUTTON', 5100010, 'platform:customer:delete', '归档企业客户', 60, 'ACTIVE', 0),
|
|
(5100018, 0, 'PLATFORM', 'BUTTON', 5100010, 'platform:customer:impersonate', '跳转客户登录', 70, 'ACTIVE', 0),
|
|
(5101023, 0, 'PLATFORM', 'BUTTON', 5101020, 'platform:role:edit', '编辑角色', 30, 'ACTIVE', 0),
|
|
(5101024, 0, 'PLATFORM', 'BUTTON', 5101020, 'platform:role:status', '启停角色', 40, 'ACTIVE', 0),
|
|
(5101025, 0, 'PLATFORM', 'BUTTON', 5101020, 'platform:role:delete', '删除角色', 50, 'ACTIVE', 0),
|
|
(5101040, 0, 'PLATFORM', 'MENU', 5101000, 'platform:member:list', '平台成员', 40, 'ACTIVE', 0),
|
|
(5101041, 0, 'PLATFORM', 'BUTTON', 5101040, 'platform:member:grant-role', '分配成员角色', 10, 'ACTIVE', 0),
|
|
(5101012, 0, 'PLATFORM', 'BUTTON', 5101010, 'platform:user:edit', '编辑用户', 20, 'ACTIVE', 0),
|
|
(5101013, 0, 'PLATFORM', 'BUTTON', 5101010, 'platform:user:status', '启停用户', 30, 'ACTIVE', 0),
|
|
(5101014, 0, 'PLATFORM', 'BUTTON', 5101010, 'platform:user:reset-password', '重置密码', 40, 'ACTIVE', 0),
|
|
(5101015, 0, 'PLATFORM', 'BUTTON', 5101010, 'platform:user:grant-role', '分配内部用户角色', 50, 'ACTIVE', 0),
|
|
(5200033, 10001, 'MERCHANT', 'BUTTON', 5200030, 'merchant:role:edit', '编辑角色', 30, 'ACTIVE', 0),
|
|
(5200034, 10001, 'MERCHANT', 'BUTTON', 5200030, 'merchant:role:status', '启停角色', 40, 'ACTIVE', 0),
|
|
(5200035, 10001, 'MERCHANT', 'BUTTON', 5200030, 'merchant:role:delete', '删除角色', 50, 'ACTIVE', 0),
|
|
(5300033, 0, 'MERCHANT', 'BUTTON', 5300030, 'merchant:role:edit', '编辑角色', 30, 'ACTIVE', 0),
|
|
(5300034, 0, 'MERCHANT', 'BUTTON', 5300030, 'merchant:role:status', '启停角色', 40, 'ACTIVE', 0),
|
|
(5300035, 0, 'MERCHANT', 'BUTTON', 5300030, 'merchant:role:delete', '删除角色', 50, 'ACTIVE', 0)
|
|
ON DUPLICATE KEY UPDATE
|
|
permission_type = VALUES(permission_type), parent_id = VALUES(parent_id),
|
|
permission_name = VALUES(permission_name), sort_no = VALUES(sort_no),
|
|
status = 'ACTIVE', deleted = 0;
|
|
|
|
-- 示例管理员获得新增权限；其他角色仍由管理员按需授权。
|
|
INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
|
|
SELECT 4000001, id, 0 FROM iam_permission
|
|
WHERE tenant_id = 0 AND app_code = 'PLATFORM'
|
|
AND permission_code IN ('platform:role:edit', 'platform:role:status', 'platform:role:delete',
|
|
'platform:member:list', 'platform:member:grant-role', 'platform:customer:create',
|
|
'platform:user:edit', 'platform:user:status', 'platform:user:reset-password',
|
|
'platform:user:grant-role')
|
|
ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
|
|
|
|
INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
|
|
SELECT 4000101, id, 10001 FROM iam_permission
|
|
WHERE tenant_id = 10001 AND app_code = 'MERCHANT'
|
|
AND permission_code IN ('merchant:role:edit', 'merchant:role:status', 'merchant:role:delete')
|
|
ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
|
|
|
|
INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
|
|
SELECT 4000100, id, 0 FROM iam_permission
|
|
WHERE tenant_id = 0 AND app_code = 'MERCHANT'
|
|
AND permission_code IN ('merchant:role:edit', 'merchant:role:status', 'merchant:role:delete')
|
|
ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
|