-- 二期入库单列表和详情只读权限，可在一期 RBAC 脚本后重复执行。
USE baiyue_iam;

INSERT INTO iam_permission
  (id, tenant_id, app_code, permission_type, parent_id, permission_code,
   permission_name, route_path, http_method, sort_no, status, built_in, deleted)
VALUES
  (5102030, 0, 'PLATFORM', 'MENU', 5102000, 'platform:firstleg:inbound:list',
   '入库单', '/inbounds', 'GET', 30, 'ACTIVE', 1, 0),
  (5102031, 0, 'PLATFORM', 'BUTTON', 5102030, 'platform:firstleg:inbound:view',
   '查看入库单详情', NULL, 'GET', 10, 'ACTIVE', 1, 0)
ON DUPLICATE KEY UPDATE
  permission_name = VALUES(permission_name), parent_id = VALUES(parent_id),
  route_path = VALUES(route_path), http_method = VALUES(http_method),
  status = 'ACTIVE', built_in = 1, deleted = 0;

INSERT IGNORE INTO iam_role_permission (role_id, permission_id, tenant_id)
SELECT role.id, permission.id, role.tenant_id
FROM iam_role role
JOIN iam_permission permission
  ON permission.tenant_id = 0
 AND permission.permission_code IN (
   'platform:firstleg:inbound:list', 'platform:firstleg:inbound:view')
WHERE role.tenant_id = 0
  AND role.role_code IN ('PLATFORM_ADMIN', 'ORDER_OPERATOR');