46 lines
2.5 KiB
SQL
46 lines
2.5 KiB
SQL
USE baiyue_iam;
|
|
|
|
-- Reject identity collisions before any permission or grant is changed.
|
|
DROP PROCEDURE IF EXISTS check_appointment_work_permission_identity;
|
|
DELIMITER $$
|
|
CREATE PROCEDURE check_appointment_work_permission_identity()
|
|
BEGIN
|
|
IF EXISTS(SELECT 1 FROM iam_permission WHERE
|
|
(id=5107283 AND permission_code<>'platform:appointment:manage-work')
|
|
OR (id=5102213 AND permission_code<>'platform:firstleg:terminal-drayage:direct-unload:confirm')
|
|
OR (permission_code='platform:appointment:manage-work' AND id<>5107283)
|
|
OR (permission_code='platform:firstleg:terminal-drayage:direct-unload:confirm' AND id<>5102213)) THEN
|
|
SIGNAL SQLSTATE '45000' SET MESSAGE_TEXT='Appointment work permission identity conflict';
|
|
END IF;
|
|
END$$
|
|
DELIMITER ;
|
|
CALL check_appointment_work_permission_identity();
|
|
DROP PROCEDURE check_appointment_work_permission_identity;
|
|
|
|
-- Two independent write capabilities; appointment/list remains read-only.
|
|
INSERT INTO iam_permission
|
|
(id,tenant_id,app_code,permission_type,parent_id,permission_code,permission_name,route_path,http_method,sort_no,status,built_in,deleted)
|
|
VALUES
|
|
(5107283,0,'PLATFORM','BUTTON',5107280,'platform:appointment:manage-work','维护预约工作安排',NULL,'POST',743,'ACTIVE',1,0),
|
|
(5102213,0,'PLATFORM','BUTTON',5102200,'platform:firstleg:terminal-drayage:direct-unload:confirm','登记直送目的仓实际卸货',NULL,'POST',60,'ACTIVE',1,0)
|
|
ON DUPLICATE KEY UPDATE permission_name=VALUES(permission_name),parent_id=VALUES(parent_id),status='ACTIVE',deleted=0;
|
|
|
|
INSERT IGNORE INTO iam_role_permission(tenant_id,role_id,permission_id,created_at)
|
|
SELECT 0,r.id,p.id,CURRENT_TIMESTAMP(3)
|
|
FROM iam_role r JOIN iam_permission p ON p.tenant_id=0 AND p.id IN (5107283,5102213)
|
|
WHERE r.tenant_id=0 AND r.app_code='PLATFORM' AND r.role_code='PLATFORM_ADMIN' AND r.status='ACTIVE' AND r.deleted=0;
|
|
|
|
DROP PROCEDURE IF EXISTS assert_appointment_work_permissions;
|
|
DELIMITER $$
|
|
CREATE PROCEDURE assert_appointment_work_permissions()
|
|
BEGIN
|
|
IF (SELECT COUNT(*) FROM iam_permission WHERE tenant_id=0 AND app_code='PLATFORM' AND status='ACTIVE' AND deleted=0
|
|
AND ((id=5107283 AND permission_code='platform:appointment:manage-work' AND parent_id=5107280)
|
|
OR (id=5102213 AND permission_code='platform:firstleg:terminal-drayage:direct-unload:confirm' AND parent_id=5102200))) <> 2 THEN
|
|
SIGNAL SQLSTATE '45000' SET MESSAGE_TEXT='Appointment work permission identity conflict';
|
|
END IF;
|
|
END$$
|
|
DELIMITER ;
|
|
CALL assert_appointment_work_permissions();
|
|
DROP PROCEDURE assert_appointment_work_permissions;
|