63 lines
2.6 KiB
SQL
63 lines
2.6 KiB
SQL
SET NAMES utf8mb4 COLLATE utf8mb4_unicode_ci;
|
|
|
|
-- 使用 utf8mb4 连接字符集，保证中文注释、中文名称和 emoji 在导入时不被降级。
|
|
|
|
-- 区域拦截是 user-service 登录风控策略，后台在用户管理下维护。
|
|
-- 该迁移写入菜单和 RBAC 事实，覆盖不运行 bootstrap 的环境。
|
|
SET @now_ms = CAST(UNIX_TIMESTAMP(UTC_TIMESTAMP(3)) * 1000 AS UNSIGNED);
|
|
|
|
INSERT INTO admin_permissions (name, code, kind, description, created_at_ms, updated_at_ms) VALUES
|
|
('地区屏蔽查看', 'region-block:view', 'menu', '', @now_ms, @now_ms),
|
|
('地区屏蔽更新', 'region-block:update', 'button', '', @now_ms, @now_ms)
|
|
ON DUPLICATE KEY UPDATE
|
|
name = VALUES(name),
|
|
kind = VALUES(kind),
|
|
description = VALUES(description),
|
|
updated_at_ms = @now_ms;
|
|
|
|
INSERT INTO admin_menus (parent_id, title, code, path, icon, permission_code, sort, visible, created_at_ms, updated_at_ms) VALUES
|
|
(NULL, '用户管理', 'app-users', '', 'users', '', 60, TRUE, @now_ms, @now_ms)
|
|
ON DUPLICATE KEY UPDATE
|
|
title = VALUES(title),
|
|
path = VALUES(path),
|
|
icon = VALUES(icon),
|
|
permission_code = VALUES(permission_code),
|
|
sort = VALUES(sort),
|
|
visible = VALUES(visible),
|
|
updated_at_ms = @now_ms;
|
|
|
|
INSERT INTO admin_menus (parent_id, title, code, path, icon, permission_code, sort, visible, created_at_ms, updated_at_ms)
|
|
SELECT parent.id, '地区屏蔽', 'app-user-region-blocks', '/app/users/region-blocks', 'public', 'region-block:view', 64, TRUE, @now_ms, @now_ms
|
|
FROM admin_menus parent
|
|
WHERE parent.code = 'app-users'
|
|
ON DUPLICATE KEY UPDATE
|
|
parent_id = VALUES(parent_id),
|
|
title = VALUES(title),
|
|
path = VALUES(path),
|
|
icon = VALUES(icon),
|
|
permission_code = VALUES(permission_code),
|
|
sort = VALUES(sort),
|
|
visible = VALUES(visible),
|
|
updated_at_ms = @now_ms;
|
|
|
|
INSERT IGNORE INTO admin_role_permissions (role_id, permission_id)
|
|
SELECT admin_role.id, admin_permission.id
|
|
FROM admin_roles admin_role
|
|
JOIN admin_permissions admin_permission
|
|
WHERE admin_role.code = 'platform-admin'
|
|
AND admin_permission.code IN ('region-block:view', 'region-block:update');
|
|
|
|
INSERT IGNORE INTO admin_role_permissions (role_id, permission_id)
|
|
SELECT admin_role.id, admin_permission.id
|
|
FROM admin_roles admin_role
|
|
JOIN admin_permissions admin_permission
|
|
WHERE admin_role.code = 'ops-admin'
|
|
AND admin_permission.code IN ('region-block:view', 'region-block:update');
|
|
|
|
INSERT IGNORE INTO admin_role_permissions (role_id, permission_id)
|
|
SELECT admin_role.id, admin_permission.id
|
|
FROM admin_roles admin_role
|
|
JOIN admin_permissions admin_permission
|
|
WHERE admin_role.code IN ('auditor', 'readonly')
|
|
AND admin_permission.code = 'region-block:view';
|