暂存提交

2026-08-13 19:01:16 +08:00
parent 8ba04fc87d
commit 073cb6a577
50 changed files with 981 additions and 136 deletions
@@ -0,0 +1,25 @@
+USE baiyue_iam;
+
+-- 尾程订单权限属于平台端；列表权限使用 MENU，其余操作使用 BUTTON。
+INSERT INTO iam_permission
+  (id, tenant_id, app_code, permission_type, parent_id, permission_code,
+   permission_name, route_path, http_method, sort_no, status, built_in, deleted)
+VALUES
+  (5106000, 0, 'PLATFORM', 'MENU', 0, 'platform:lastleg:order:list', '尾程订单', '/lastleg/orders', 'GET', 60, 'ACTIVE', 1, 0),
+  (5106001, 0, 'PLATFORM', 'BUTTON', 5106000, 'platform:lastleg:order:detail', '查看尾程订单详情', NULL, 'GET', 10, 'ACTIVE', 1, 0),
+  (5106002, 0, 'PLATFORM', 'BUTTON', 5106000, 'platform:lastleg:order:assign', '分配尾程订单', NULL, 'POST', 20, 'ACTIVE', 1, 0),
+  (5106003, 0, 'PLATFORM', 'BUTTON', 5106000, 'platform:lastleg:order:transfer', '转派尾程订单', NULL, 'POST', 30, 'ACTIVE', 1, 0),
+  (5106004, 0, 'PLATFORM', 'BUTTON', 5106000, 'platform:lastleg:order:merge-pallet', '合并尾程托盘', NULL, 'POST', 40, 'ACTIVE', 1, 0)
+ON DUPLICATE KEY UPDATE permission_name=VALUES(permission_name), route_path=VALUES(route_path),
+  http_method=VALUES(http_method), sort_no=VALUES(sort_no), status='ACTIVE', built_in=1, deleted=0;
+
+INSERT IGNORE INTO iam_role_permission (tenant_id, role_id, permission_id, created_at)
+SELECT 0, role.id, permission.id, NOW(3)
+FROM iam_role role
+JOIN iam_permission permission ON permission.tenant_id=0 AND permission.app_code='PLATFORM'
+WHERE role.tenant_id=0 AND role.app_code='PLATFORM' AND role.role_code='PLATFORM_ADMIN'
+  AND role.status='ACTIVE' AND role.deleted=0
+  AND permission.permission_code IN (
+    'platform:lastleg:order:list', 'platform:lastleg:order:detail',
+    'platform:lastleg:order:assign', 'platform:lastleg:order:transfer',
+    'platform:lastleg:order:merge-pallet');
@@ -2,20 +2,34 @@ USE baiyue_iam;

 CREATE TABLE IF NOT EXISTS iam_security_subject_version (
  auth_user_id BIGINT NOT NULL COMMENT '认证账号ID',
-  permission_version BIGINT NOT NULL DEFAULT 0 COMMENT '权限版本，角色或权限变化时单调递增',
+  permission_version BIGINT NOT NULL DEFAULT 0 COMMENT '权限版本，身份或授权变化时单调递增',
  updated_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP(3),
  PRIMARY KEY (auth_user_id)
 ) ENGINE=InnoDB COMMENT='安全主体权限版本';

-CREATE TABLE IF NOT EXISTS iam_security_event_outbox (
-  event_id VARCHAR(64) NOT NULL COMMENT '全局事件ID，消费者幂等键', event_type VARCHAR(64) NOT NULL,
-  aggregate_type VARCHAR(32) NOT NULL COMMENT 'USER、ACCOUNT、AUTHORIZATION', aggregate_id VARCHAR(64) NOT NULL,
-  payload_json JSON NOT NULL COMMENT '不含密码、令牌和权限全集的安全事件',
-  status VARCHAR(16) NOT NULL DEFAULT 'PENDING' COMMENT 'PENDING、SENDING、SENT、DEAD',
-  attempt_count INT NOT NULL DEFAULT 0, next_retry_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3),
-  lease_owner VARCHAR(128) NULL, lease_until DATETIME(3) NULL, last_error VARCHAR(1000) NULL,
-  sent_at DATETIME(3) NULL, created_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3),
+CREATE TABLE IF NOT EXISTS iam_security_tenant_version (
+  tenant_id BIGINT NOT NULL COMMENT '客户ID',
+  status_version BIGINT NOT NULL DEFAULT 0 COMMENT '客户状态单调版本',
  updated_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP(3),
-  PRIMARY KEY (event_id), KEY idx_security_outbox_publish (status, next_retry_at, lease_until, created_at),
-  KEY idx_security_outbox_aggregate (aggregate_type, aggregate_id, created_at)
+  PRIMARY KEY (tenant_id)
+) ENGINE=InnoDB COMMENT='客户状态事件版本';
+
+CREATE TABLE IF NOT EXISTS iam_security_event_outbox (
+  event_id VARCHAR(64) NOT NULL COMMENT '全局事件ID，消费者幂等键',
+  event_type VARCHAR(64) NOT NULL COMMENT '安全事件类型',
+  aggregate_type VARCHAR(32) NOT NULL COMMENT 'USER、TENANT或AUTHORIZATION',
+  aggregate_id VARCHAR(64) NOT NULL COMMENT '聚合标识',
+  payload_json JSON NOT NULL COMMENT '标准跨区事件信封，不含密码、令牌和权限全集',
+  status VARCHAR(16) NOT NULL DEFAULT 'PENDING' COMMENT 'PENDING、SENDING、SENT、DEAD',
+  attempt_count INT NOT NULL DEFAULT 0,
+  next_retry_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3),
+  lease_owner VARCHAR(128) NULL,
+  lease_until DATETIME(3) NULL,
+  last_error VARCHAR(1000) NULL,
+  sent_at DATETIME(3) NULL,
+  created_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3),
+  updated_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP(3),
+  PRIMARY KEY (event_id),
+  KEY idx_security_outbox_publish (status,next_retry_at,lease_until,created_at),
+  KEY idx_security_outbox_aggregate (aggregate_type,aggregate_id,created_at)
 ) ENGINE=InnoDB COMMENT='IAM可靠安全事件本地发送箱';