暂存提交

iam/src/main/resources/db/iam.sql

@@ -1,5 +1,6 @@
 SET NAMES utf8mb4;
 -- IAM 服务独占数据库：负责租户、成员、双端角色、菜单/页面/按钮/API权限和数据范围。
+
 CREATE DATABASE IF NOT EXISTS baiyue_iam
   DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci;
 USE baiyue_iam;

iam/src/main/resources/db/phase1-onboarding.sql

@@ -61,11 +61,5 @@ FROM iam_permission
 WHERE app_code='MERCHANT' AND tenant_id=0
   AND permission_type IN ('MENU','BUTTON') AND status='ACTIVE' AND deleted=0;
 
--- Keep the phase-one demo merchant eligible for existing order acceptance tests.
-INSERT INTO iam_tenant_qualification (
-  id, tenant_id, qualification_type, certificate_no, document_url, status, deleted
-) VALUES (
-  7000101, 10001, 'BUSINESS_LICENSE', '91310000PHASE10001',
-  '/phase1-seed/demo-business-license.jpg', 'APPROVED', 0
-)
-ON DUPLICATE KEY UPDATE status='APPROVED', deleted=0;
+-- 不再写入伪造的资质 URL。资质必须先由 File 服务保存真实图片，再由 IAM 记录文件地址和审核结果。
+-- 已部署环境中的 /phase1-seed/ 历史记录按 docs/企业资质文件迁移说明.md 处理，本脚本不得将其改成不存在的 UUID。

iam/src/main/resources/db/rbac-role-management-v2.sql

@@ -12,6 +12,9 @@ VALUES
   (5101025, 0, 'PLATFORM', 'BUTTON', 5101020, 'platform:role:delete', '删除角色', 50, 'ACTIVE', 0),
   (5101040, 0, 'PLATFORM', 'MENU', 5101000, 'platform:member:list', '平台成员', 40, 'ACTIVE', 0),
   (5101041, 0, 'PLATFORM', 'BUTTON', 5101040, 'platform:member:grant-role', '分配成员角色', 10, 'ACTIVE', 0),
+  (5101012, 0, 'PLATFORM', 'BUTTON', 5101010, 'platform:user:edit', '编辑用户', 20, 'ACTIVE', 0),
+  (5101013, 0, 'PLATFORM', 'BUTTON', 5101010, 'platform:user:status', '启停用户', 30, 'ACTIVE', 0),
+  (5101014, 0, 'PLATFORM', 'BUTTON', 5101010, 'platform:user:reset-password', '重置密码', 40, 'ACTIVE', 0),
   (5200033, 10001, 'MERCHANT', 'BUTTON', 5200030, 'merchant:role:edit', '编辑角色', 30, 'ACTIVE', 0),
   (5200034, 10001, 'MERCHANT', 'BUTTON', 5200030, 'merchant:role:status', '启停角色', 40, 'ACTIVE', 0),
   (5200035, 10001, 'MERCHANT', 'BUTTON', 5200030, 'merchant:role:delete', '删除角色', 50, 'ACTIVE', 0),
@@ -28,7 +31,8 @@ INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)
 SELECT 4000001, id, 0 FROM iam_permission
 WHERE tenant_id = 0 AND app_code = 'PLATFORM'
   AND permission_code IN ('platform:role:edit', 'platform:role:status', 'platform:role:delete',
-                          'platform:member:list', 'platform:member:grant-role', 'platform:customer:create')
+                          'platform:member:list', 'platform:member:grant-role', 'platform:customer:create',
+                          'platform:user:edit', 'platform:user:status', 'platform:user:reset-password')
 ON DUPLICATE KEY UPDATE tenant_id = VALUES(tenant_id);
 
 INSERT INTO iam_role_permission (role_id, permission_id, tenant_id)