Files
baiyue-firstleg/iam/src/main/resources/db/phase2-inbound-query-permissions.sql
T
2026-08-04 10:07:45 +08:00

26 lines
1.2 KiB
SQL

-- 二期入库单列表和详情只读权限,可在一期 RBAC 脚本后重复执行。
USE baiyue_iam;
INSERT INTO iam_permission
(id, tenant_id, app_code, permission_type, parent_id, permission_code,
permission_name, route_path, http_method, sort_no, status, built_in, deleted)
VALUES
(5102030, 0, 'PLATFORM', 'MENU', 5102000, 'platform:firstleg:inbound:list',
'入库单', '/inbounds', 'GET', 30, 'ACTIVE', 1, 0),
(5102031, 0, 'PLATFORM', 'BUTTON', 5102030, 'platform:firstleg:inbound:view',
'查看入库单详情', NULL, 'GET', 10, 'ACTIVE', 1, 0)
ON DUPLICATE KEY UPDATE
permission_name = VALUES(permission_name), parent_id = VALUES(parent_id),
route_path = VALUES(route_path), http_method = VALUES(http_method),
status = 'ACTIVE', built_in = 1, deleted = 0;
INSERT IGNORE INTO iam_role_permission (role_id, permission_id, tenant_id)
SELECT role.id, permission.id, role.tenant_id
FROM iam_role role
JOIN iam_permission permission
ON permission.tenant_id = 0
AND permission.permission_code IN (
'platform:firstleg:inbound:list', 'platform:firstleg:inbound:view')
WHERE role.tenant_id = 0
AND role.role_code IN ('PLATFORM_ADMIN', 'ORDER_OPERATOR');