docs: 补齐客户权限脚本与说明
This commit is contained in:
@@ -10,6 +10,7 @@
|
|||||||
- `seed_tenant_new_customer_permissions.sql`：补齐租户端新客有礼权限码、菜单权限与角色授权映射（可重复执行）。
|
- `seed_tenant_new_customer_permissions.sql`：补齐租户端新客有礼权限码、菜单权限与角色授权映射（可重复执行）。
|
||||||
- `seed_tenant_punch_card_permissions.sql`：补齐租户端次卡管理权限码、菜单权限与角色授权映射（可重复执行）。
|
- `seed_tenant_punch_card_permissions.sql`：补齐租户端次卡管理权限码、菜单权限与角色授权映射（可重复执行）。
|
||||||
- `seed_tenant_calendar_permissions.sql`：补齐租户端营销日历权限码、菜单权限与角色授权映射（可重复执行）。
|
- `seed_tenant_calendar_permissions.sql`：补齐租户端营销日历权限码、菜单权限与角色授权映射（可重复执行）。
|
||||||
|
- `seed_tenant_customer_permissions.sql`：补齐租户端客户管理权限码、菜单权限与角色授权映射（可重复执行）。
|
||||||
|
|
||||||
## 前置条件
|
## 前置条件
|
||||||
|
|
||||||
@@ -98,6 +99,20 @@ psql -h <host> -p <port> -U identity_user -d takeout_identity_db -f .\seed_tenan
|
|||||||
2. 更新营销日历菜单 (`/marketing/calendar/index`) 的 `RequiredPermissions`、`MetaPermissions` 与 `AuthListJson`。
|
2. 更新营销日历菜单 (`/marketing/calendar/index`) 的 `RequiredPermissions`、`MetaPermissions` 与 `AuthListJson`。
|
||||||
3. 参考满减权限映射，补齐角色模板与租户角色的营销日历权限授权。
|
3. 参考满减权限映射，补齐角色模板与租户角色的营销日历权限授权。
|
||||||
|
|
||||||
|
## 客户管理权限补齐
|
||||||
|
|
||||||
|
在 `takeout_identity_db` 执行：
|
||||||
|
|
||||||
|
```powershell
|
||||||
|
psql -h <host> -p <port> -U identity_user -d takeout_identity_db -f .\seed_tenant_customer_permissions.sql
|
||||||
|
```
|
||||||
|
|
||||||
|
脚本会完成：
|
||||||
|
|
||||||
|
1. 新增/修正 `tenant:customer:*` 权限码（list/profile/analysis）。
|
||||||
|
2. 更新客户菜单 (`/customer/list|profile|analysis`) 的 `RequiredPermissions`、`MetaPermissions` 与 `AuthListJson`。
|
||||||
|
3. 按订单列表权限映射补齐客户列表（view/manage）与客户画像（profile/view）角色模板和租户角色授权；`analysis` 不做角色映射。
|
||||||
|
|
||||||
## 常见问题
|
## 常见问题
|
||||||
|
|
||||||
| 问题 | 处理方式 |
|
| 问题 | 处理方式 |
|
||||||
|
|||||||
301
deploy/postgres/seed_tenant_customer_permissions.sql
Normal file
301
deploy/postgres/seed_tenant_customer_permissions.sql
Normal file
@@ -0,0 +1,301 @@
|
|||||||
|
-- 文件职责：补齐 Tenant 端客户管理权限与菜单权限绑定（可重复执行）。
|
||||||
|
-- 执行范围：takeout_identity 数据库（Portal=1，Tenant 端）。
|
||||||
|
|
||||||
|
BEGIN;
|
||||||
|
|
||||||
|
-- 1) 新增/修正客户管理权限码
|
||||||
|
WITH customer_permissions(code, name, sort_order) AS (
|
||||||
|
VALUES
|
||||||
|
('tenant:customer:list:view', '查看客户列表', 40),
|
||||||
|
('tenant:customer:list:manage', '管理客户列表', 41),
|
||||||
|
('tenant:customer:profile:view', '查看客户画像', 42),
|
||||||
|
('tenant:customer:analysis:view', '查看客户分析', 43)
|
||||||
|
),
|
||||||
|
missing AS (
|
||||||
|
SELECT
|
||||||
|
source.code,
|
||||||
|
source.name,
|
||||||
|
source.sort_order,
|
||||||
|
ROW_NUMBER() OVER (ORDER BY source.sort_order, source.code) AS rn
|
||||||
|
FROM customer_permissions source
|
||||||
|
LEFT JOIN public.permissions existing
|
||||||
|
ON existing."Code" = source.code
|
||||||
|
WHERE existing."Id" IS NULL
|
||||||
|
),
|
||||||
|
base AS (
|
||||||
|
SELECT COALESCE(MAX("Id"), 820000000000000000) AS max_id
|
||||||
|
FROM public.permissions
|
||||||
|
),
|
||||||
|
parent AS (
|
||||||
|
SELECT COALESCE(
|
||||||
|
(
|
||||||
|
SELECT "ParentId"
|
||||||
|
FROM public.permissions
|
||||||
|
WHERE "Code" = 'tenant:order:list:view'
|
||||||
|
LIMIT 1
|
||||||
|
),
|
||||||
|
820000000000000004
|
||||||
|
) AS parent_id
|
||||||
|
)
|
||||||
|
INSERT INTO public.permissions
|
||||||
|
(
|
||||||
|
"Id", "Name", "Code", "Description", "CreatedAt", "UpdatedAt", "DeletedAt",
|
||||||
|
"CreatedBy", "UpdatedBy", "DeletedBy", "ParentId", "SortOrder", "Type", "Portal"
|
||||||
|
)
|
||||||
|
SELECT
|
||||||
|
base.max_id + missing.rn,
|
||||||
|
missing.name,
|
||||||
|
missing.code,
|
||||||
|
NULL,
|
||||||
|
NOW(),
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
parent.parent_id,
|
||||||
|
missing.sort_order,
|
||||||
|
'leaf',
|
||||||
|
1
|
||||||
|
FROM missing
|
||||||
|
CROSS JOIN base
|
||||||
|
CROSS JOIN parent;
|
||||||
|
|
||||||
|
WITH customer_permissions(code, name, sort_order) AS (
|
||||||
|
VALUES
|
||||||
|
('tenant:customer:list:view', '查看客户列表', 40),
|
||||||
|
('tenant:customer:list:manage', '管理客户列表', 41),
|
||||||
|
('tenant:customer:profile:view', '查看客户画像', 42),
|
||||||
|
('tenant:customer:analysis:view', '查看客户分析', 43)
|
||||||
|
),
|
||||||
|
parent AS (
|
||||||
|
SELECT COALESCE(
|
||||||
|
(
|
||||||
|
SELECT "ParentId"
|
||||||
|
FROM public.permissions
|
||||||
|
WHERE "Code" = 'tenant:order:list:view'
|
||||||
|
LIMIT 1
|
||||||
|
),
|
||||||
|
820000000000000004
|
||||||
|
) AS parent_id
|
||||||
|
)
|
||||||
|
UPDATE public.permissions target
|
||||||
|
SET
|
||||||
|
"Name" = source.name,
|
||||||
|
"ParentId" = parent.parent_id,
|
||||||
|
"SortOrder" = source.sort_order,
|
||||||
|
"Type" = 'leaf',
|
||||||
|
"Portal" = 1,
|
||||||
|
"DeletedAt" = NULL,
|
||||||
|
"DeletedBy" = NULL,
|
||||||
|
"UpdatedAt" = NOW()
|
||||||
|
FROM customer_permissions source
|
||||||
|
CROSS JOIN parent
|
||||||
|
WHERE target."Code" = source.code;
|
||||||
|
|
||||||
|
-- 2) 绑定客户管理菜单权限
|
||||||
|
UPDATE public.menu_definitions
|
||||||
|
SET
|
||||||
|
"RequiredPermissions" = 'tenant:customer:list:view',
|
||||||
|
"MetaPermissions" = 'tenant:customer:list:view,tenant:customer:list:manage',
|
||||||
|
"AuthListJson" = '[{"title":"导出","authMark":"tenant:customer:list:manage"}]',
|
||||||
|
"UpdatedAt" = NOW()
|
||||||
|
WHERE
|
||||||
|
"Portal" = 1
|
||||||
|
AND ("Name" = 'CustomerList' OR "Component" = '/customer/list/index');
|
||||||
|
|
||||||
|
UPDATE public.menu_definitions
|
||||||
|
SET
|
||||||
|
"RequiredPermissions" = 'tenant:customer:profile:view',
|
||||||
|
"MetaPermissions" = 'tenant:customer:profile:view',
|
||||||
|
"AuthListJson" = NULL,
|
||||||
|
"UpdatedAt" = NOW()
|
||||||
|
WHERE
|
||||||
|
"Portal" = 1
|
||||||
|
AND ("Name" = 'CustomerProfile' OR "Component" = '/customer/profile/index');
|
||||||
|
|
||||||
|
UPDATE public.menu_definitions
|
||||||
|
SET
|
||||||
|
"RequiredPermissions" = 'tenant:customer:analysis:view',
|
||||||
|
"MetaPermissions" = 'tenant:customer:analysis:view',
|
||||||
|
"AuthListJson" = NULL,
|
||||||
|
"UpdatedAt" = NOW()
|
||||||
|
WHERE
|
||||||
|
"Portal" = 1
|
||||||
|
AND ("Name" = 'CustomerAnalysis' OR "Component" = '/customer/analysis/index');
|
||||||
|
|
||||||
|
-- 3) 给角色模板补齐客户列表与画像权限（按订单列表权限映射）
|
||||||
|
-- 说明：本轮映射 list(view/manage)+profile(view)，analysis 不做角色映射。
|
||||||
|
WITH code_mapping(source_code, target_code) AS (
|
||||||
|
VALUES
|
||||||
|
('tenant:order:list:view', 'tenant:customer:list:view'),
|
||||||
|
('tenant:order:list:view', 'tenant:customer:profile:view'),
|
||||||
|
('tenant:order:list:update', 'tenant:customer:list:manage')
|
||||||
|
),
|
||||||
|
candidates AS (
|
||||||
|
SELECT DISTINCT
|
||||||
|
source."RoleTemplateId",
|
||||||
|
mapping.target_code
|
||||||
|
FROM public.role_template_permissions source
|
||||||
|
INNER JOIN code_mapping mapping
|
||||||
|
ON mapping.source_code = source."PermissionCode"
|
||||||
|
WHERE source."DeletedAt" IS NULL
|
||||||
|
),
|
||||||
|
missing AS (
|
||||||
|
SELECT
|
||||||
|
candidate."RoleTemplateId",
|
||||||
|
candidate.target_code,
|
||||||
|
ROW_NUMBER() OVER (
|
||||||
|
ORDER BY candidate."RoleTemplateId", candidate.target_code
|
||||||
|
) AS rn
|
||||||
|
FROM candidates candidate
|
||||||
|
LEFT JOIN public.role_template_permissions existing
|
||||||
|
ON existing."RoleTemplateId" = candidate."RoleTemplateId"
|
||||||
|
AND existing."PermissionCode" = candidate.target_code
|
||||||
|
WHERE existing."Id" IS NULL
|
||||||
|
),
|
||||||
|
base AS (
|
||||||
|
SELECT COALESCE(MAX("Id"), 820000000000000000) AS max_id
|
||||||
|
FROM public.role_template_permissions
|
||||||
|
)
|
||||||
|
INSERT INTO public.role_template_permissions
|
||||||
|
(
|
||||||
|
"Id", "RoleTemplateId", "PermissionCode", "CreatedAt", "UpdatedAt", "DeletedAt",
|
||||||
|
"CreatedBy", "UpdatedBy", "DeletedBy"
|
||||||
|
)
|
||||||
|
SELECT
|
||||||
|
base.max_id + missing.rn,
|
||||||
|
missing."RoleTemplateId",
|
||||||
|
missing.target_code,
|
||||||
|
NOW(),
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL
|
||||||
|
FROM missing
|
||||||
|
CROSS JOIN base;
|
||||||
|
|
||||||
|
WITH code_mapping(source_code, target_code) AS (
|
||||||
|
VALUES
|
||||||
|
('tenant:order:list:view', 'tenant:customer:list:view'),
|
||||||
|
('tenant:order:list:view', 'tenant:customer:profile:view'),
|
||||||
|
('tenant:order:list:update', 'tenant:customer:list:manage')
|
||||||
|
)
|
||||||
|
UPDATE public.role_template_permissions target
|
||||||
|
SET
|
||||||
|
"DeletedAt" = NULL,
|
||||||
|
"DeletedBy" = NULL,
|
||||||
|
"UpdatedAt" = NOW()
|
||||||
|
FROM public.role_template_permissions source
|
||||||
|
INNER JOIN code_mapping mapping
|
||||||
|
ON mapping.source_code = source."PermissionCode"
|
||||||
|
WHERE
|
||||||
|
source."RoleTemplateId" = target."RoleTemplateId"
|
||||||
|
AND target."PermissionCode" = mapping.target_code;
|
||||||
|
|
||||||
|
-- 4) 给租户角色补齐客户列表与画像权限（按订单列表权限映射）
|
||||||
|
-- 说明：本轮映射 list(view/manage)+profile(view)，analysis 不做角色映射。
|
||||||
|
WITH code_mapping(source_code, target_code) AS (
|
||||||
|
VALUES
|
||||||
|
('tenant:order:list:view', 'tenant:customer:list:view'),
|
||||||
|
('tenant:order:list:view', 'tenant:customer:profile:view'),
|
||||||
|
('tenant:order:list:update', 'tenant:customer:list:manage')
|
||||||
|
),
|
||||||
|
source_rows AS (
|
||||||
|
SELECT DISTINCT
|
||||||
|
source."RoleId",
|
||||||
|
source."TenantId",
|
||||||
|
source."Portal",
|
||||||
|
mapping.target_code
|
||||||
|
FROM public.role_permissions source
|
||||||
|
INNER JOIN public.permissions source_permission
|
||||||
|
ON source_permission."Id" = source."PermissionId"
|
||||||
|
INNER JOIN code_mapping mapping
|
||||||
|
ON mapping.source_code = source_permission."Code"
|
||||||
|
WHERE source."DeletedAt" IS NULL
|
||||||
|
AND source."Portal" = 1
|
||||||
|
),
|
||||||
|
candidates AS (
|
||||||
|
SELECT DISTINCT
|
||||||
|
source_row."RoleId",
|
||||||
|
source_row."TenantId",
|
||||||
|
source_row."Portal",
|
||||||
|
target_permission."Id" AS target_permission_id
|
||||||
|
FROM source_rows source_row
|
||||||
|
INNER JOIN public.permissions target_permission
|
||||||
|
ON target_permission."Code" = source_row.target_code
|
||||||
|
),
|
||||||
|
missing AS (
|
||||||
|
SELECT
|
||||||
|
candidate."RoleId",
|
||||||
|
candidate."TenantId",
|
||||||
|
candidate."Portal",
|
||||||
|
candidate.target_permission_id,
|
||||||
|
ROW_NUMBER() OVER (
|
||||||
|
ORDER BY candidate."TenantId", candidate."RoleId", candidate.target_permission_id
|
||||||
|
) AS rn
|
||||||
|
FROM candidates candidate
|
||||||
|
LEFT JOIN public.role_permissions existing
|
||||||
|
ON existing."RoleId" = candidate."RoleId"
|
||||||
|
AND existing."PermissionId" = candidate.target_permission_id
|
||||||
|
AND existing."Portal" = candidate."Portal"
|
||||||
|
AND (
|
||||||
|
(existing."TenantId" IS NULL AND candidate."TenantId" IS NULL)
|
||||||
|
OR existing."TenantId" = candidate."TenantId"
|
||||||
|
)
|
||||||
|
WHERE existing."Id" IS NULL
|
||||||
|
),
|
||||||
|
base AS (
|
||||||
|
SELECT COALESCE(MAX("Id"), 830000000000000000) AS max_id
|
||||||
|
FROM public.role_permissions
|
||||||
|
)
|
||||||
|
INSERT INTO public.role_permissions
|
||||||
|
(
|
||||||
|
"Id", "RoleId", "PermissionId", "CreatedAt", "UpdatedAt", "DeletedAt",
|
||||||
|
"CreatedBy", "UpdatedBy", "DeletedBy", "TenantId", "Portal"
|
||||||
|
)
|
||||||
|
SELECT
|
||||||
|
base.max_id + missing.rn,
|
||||||
|
missing."RoleId",
|
||||||
|
missing.target_permission_id,
|
||||||
|
NOW(),
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
NULL,
|
||||||
|
missing."TenantId",
|
||||||
|
missing."Portal"
|
||||||
|
FROM missing
|
||||||
|
CROSS JOIN base;
|
||||||
|
|
||||||
|
WITH code_mapping(source_code, target_code) AS (
|
||||||
|
VALUES
|
||||||
|
('tenant:order:list:view', 'tenant:customer:list:view'),
|
||||||
|
('tenant:order:list:view', 'tenant:customer:profile:view'),
|
||||||
|
('tenant:order:list:update', 'tenant:customer:list:manage')
|
||||||
|
)
|
||||||
|
UPDATE public.role_permissions target
|
||||||
|
SET
|
||||||
|
"DeletedAt" = NULL,
|
||||||
|
"DeletedBy" = NULL,
|
||||||
|
"UpdatedAt" = NOW()
|
||||||
|
FROM public.role_permissions source
|
||||||
|
INNER JOIN public.permissions source_permission
|
||||||
|
ON source_permission."Id" = source."PermissionId"
|
||||||
|
INNER JOIN code_mapping mapping
|
||||||
|
ON mapping.source_code = source_permission."Code"
|
||||||
|
INNER JOIN public.permissions target_permission
|
||||||
|
ON target_permission."Code" = mapping.target_code
|
||||||
|
WHERE
|
||||||
|
source."Portal" = 1
|
||||||
|
AND target."Portal" = source."Portal"
|
||||||
|
AND target."RoleId" = source."RoleId"
|
||||||
|
AND target."PermissionId" = target_permission."Id"
|
||||||
|
AND (
|
||||||
|
(target."TenantId" IS NULL AND source."TenantId" IS NULL)
|
||||||
|
OR target."TenantId" = source."TenantId"
|
||||||
|
);
|
||||||
|
|
||||||
|
COMMIT;
|
||||||
Reference in New Issue
Block a user