fix(iam): grant domestic order export permission

order/src/main/resources/db/platform-order-export-permission.sql

@@ -15,3 +15,12 @@ INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
 SELECT role_id, 5102026, 0
 FROM (SELECT 4000001 AS role_id UNION ALL SELECT 4000003 AS role_id) roles
 ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
+
+-- 订单运营角色创建导出任务后必须能够进入下载中心获取结果文件。
+INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
+SELECT 4000003, id, 0
+FROM iam_permission
+WHERE tenant_id = 0 AND app_code = 'PLATFORM'
+  AND permission_code = 'platform:download:list'
+  AND status = 'ACTIVE' AND deleted = 0
+ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);

order/src/test/java/com/baiyue/order/controller/DomesticWarehouseOrderExportPermissionSqlContractTest.java

@@ -0,0 +1,41 @@
+package com.baiyue.order.controller;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.core.io.ClassPathResource;
+
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class DomesticWarehouseOrderExportPermissionSqlContractTest {
+
+    @Test
+    void keepsOrderExportPermissionAndDownloadGrantInAllInitializationEntrypoints() throws Exception {
+        String moduleSql = new ClassPathResource("db/platform-order-export-permission.sql")
+            .getContentAsString(StandardCharsets.UTF_8);
+        String iamSeed = Files.readString(resolve("iam/src/main/resources/db/phase1-admin-rbac.sql"),
+            StandardCharsets.UTF_8);
+        String unified = Files.readString(resolve("deploy/sql/头程数据库统一增量-MySQL8.sql"),
+            StandardCharsets.UTF_8);
+
+        for (String sql : new String[] {moduleSql, iamSeed, unified}) {
+            assertThat(sql)
+                .contains("5102026")
+                .contains("platform:order:export")
+                .contains("导出订单列表")
+                .contains("platform:download:list")
+                .contains("4000003");
+        }
+        assertThat(iamSeed).contains("WHERE id IN (5102019, 5102024, 5102025, 5102026)");
+        assertThat(unified)
+            .contains("WHERE id IN (5102019, 5102024, 5102025, 5102026)")
+            .contains("管理员或订单运营角色缺少订单导出与下载中心权限");
+    }
+
+    private static Path resolve(String relative) {
+        Path direct = Path.of(relative);
+        return Files.exists(direct) ? direct : Path.of("..").resolve(relative);
+    }
+}