优化

iam/src/test/java/com/baiyue/iam/repository/PermissionInitializationSqlContractTest.java

@@ -0,0 +1,44 @@
+package com.baiyue.iam.repository;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.core.io.ClassPathResource;
+
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class PermissionInitializationSqlContractTest {
+
+    @Test
+    void keepsSharedPermissionEntryFocusedAndAlignedWithFullBaseline() throws Exception {
+        String module = new ClassPathResource("db/order-declaration-planning-permission.sql")
+            .getContentAsString(StandardCharsets.UTF_8);
+        String permissionOnly = Files.readString(resolve("deploy/sql/权限点初始化-MySQL8.sql"),
+            StandardCharsets.UTF_8);
+        String unified = Files.readString(resolve("deploy/sql/头程数据库统一增量-MySQL8.sql"),
+            StandardCharsets.UTF_8);
+
+        for (String source : new String[] {module, permissionOnly, unified}) {
+            assertThat(source)
+                .contains("5102027")
+                .contains("platform:order:declaration:edit")
+                .contains("4000001")
+                .contains("4000003");
+        }
+        assertThat(permissionOnly)
+            .contains("START TRANSACTION")
+            .contains("permission_initialization_status")
+            .contains("SIGNAL SQLSTATE '45000'")
+            .contains("apply_permission_points")
+            .doesNotContain("apply_domestic_permission_points", "CREATE TABLE", "ALTER TABLE",
+                "INSERT INTO iam_tenant", "INSERT INTO iam_user", "INSERT INTO iam_membership",
+                "INSERT INTO auth_account");
+    }
+
+    private static Path resolve(String relative) {
+        Path direct = Path.of(relative);
+        return Files.exists(direct) ? direct : Path.of("..").resolve(relative);
+    }
+}

iam/src/test/resources/db/verify-phase1-admin-rbac.sql

@@ -38,6 +38,15 @@ SELECT 'platform_admin_not_fully_granted'
 WHERE (SELECT COUNT(*) FROM baiyue_iam.iam_role_permission WHERE role_id = 4000001)
    <> (SELECT COUNT(*) FROM baiyue_iam.iam_permission WHERE tenant_id = 0 AND app_code = 'PLATFORM' AND permission_type IN ('MENU', 'BUTTON'))
 UNION ALL
+SELECT 'missing_order_declaration_edit_permission'
+WHERE NOT EXISTS (
+  SELECT 1 FROM baiyue_iam.iam_permission
+  WHERE id = 5102027 AND tenant_id = 0 AND app_code = 'PLATFORM'
+    AND permission_code = 'platform:order:declaration:edit' AND status = 'ACTIVE' AND deleted = 0
+)
+   OR (SELECT COUNT(*) FROM baiyue_iam.iam_role_permission
+       WHERE tenant_id = 0 AND permission_id = 5102027 AND role_id IN (4000001, 4000003)) <> 2
+UNION ALL
 SELECT 'missing_global_merchant_owner_template'
 WHERE NOT EXISTS (
   SELECT 1 FROM baiyue_iam.iam_role