feat: 重构 RBAC1 角色权限模型

src/Infrastructure/TakeoutSaaS.Infrastructure/Identity/Persistence/EfRolePermissionRepository.cs

@@ -0,0 +1,38 @@
+using Microsoft.EntityFrameworkCore;
+using TakeoutSaaS.Domain.Identity.Entities;
+using TakeoutSaaS.Domain.Identity.Repositories;
+
+namespace TakeoutSaaS.Infrastructure.Identity.Persistence;
+
+/// <summary>
+/// EF 角色-权限仓储。
+/// </summary>
+public sealed class EfRolePermissionRepository(IdentityDbContext dbContext) : IRolePermissionRepository
+{
+    public Task<IReadOnlyList<RolePermission>> GetByRoleIdsAsync(long tenantId, IEnumerable<long> roleIds, CancellationToken cancellationToken = default)
+        => dbContext.RolePermissions.AsNoTracking()
+            .Where(x => x.TenantId == tenantId && roleIds.Contains(x.RoleId))
+            .ToListAsync(cancellationToken)
+            .ContinueWith(t => (IReadOnlyList<RolePermission>)t.Result, cancellationToken);
+
+    public async Task ReplaceRolePermissionsAsync(long tenantId, long roleId, IEnumerable<long> permissionIds, CancellationToken cancellationToken = default)
+    {
+        var existing = await dbContext.RolePermissions
+            .Where(x => x.TenantId == tenantId && x.RoleId == roleId)
+            .ToListAsync(cancellationToken);
+
+        dbContext.RolePermissions.RemoveRange(existing);
+
+        var toAdd = permissionIds.Distinct().Select(permissionId => new RolePermission
+        {
+            TenantId = tenantId,
+            RoleId = roleId,
+            PermissionId = permissionId
+        });
+
+        await dbContext.RolePermissions.AddRangeAsync(toAdd, cancellationToken);
+    }
+
+    public Task SaveChangesAsync(CancellationToken cancellationToken = default)
+        => dbContext.SaveChangesAsync(cancellationToken);
+}