59 lines
3.5 KiB
SQL
59 lines
3.5 KiB
SQL
-- RBAC seed: 默认角色和权限
|
|
SET NAMES utf8mb4;
|
|
|
|
-- 插入权限
|
|
INSERT INTO permissions (code, name, resource, action) VALUES
|
|
('dashboard:view', '查看仪表盘', 'dashboard', 'view'),
|
|
('user:view', '查看用户', 'user', 'view'),
|
|
('user:freeze', '冻结用户', 'user', 'freeze'),
|
|
('user:unfreeze', '解冻用户', 'user', 'unfreeze'),
|
|
('order:view', '查看订单', 'order', 'view'),
|
|
('order:close', '关闭订单', 'order', 'close'),
|
|
('order:mark_abnormal', '标记异常订单', 'order', 'mark_abnormal'),
|
|
('listing:view', '查看商品', 'listing', 'view'),
|
|
('listing:approve', '审核通过商品', 'listing', 'approve'),
|
|
('listing:reject', '审核拒绝商品', 'listing', 'reject'),
|
|
('listing:offline', '下架商品', 'listing', 'offline'),
|
|
('dispute:view', '查看纠纷', 'dispute', 'view'),
|
|
('dispute:arbitrate', '仲裁纠纷', 'dispute', 'arbitrate'),
|
|
('chat:view', '查看客服群聊', 'chat', 'view'),
|
|
('chat:send', '发送客服消息', 'chat', 'send'),
|
|
('wallet:view', '查看资金流水', 'wallet', 'view'),
|
|
('admin_user:manage', '管理员管理', 'admin_user', 'manage'),
|
|
('role:manage', '角色管理', 'role', 'manage'),
|
|
('system_config:view', '查看系统配置', 'system_config', 'view'),
|
|
('system_config:update', '修改系统配置', 'system_config', 'update'),
|
|
('audit_log:view', '查看审计日志', 'audit_log', 'view')
|
|
ON DUPLICATE KEY UPDATE name = VALUES(name);
|
|
|
|
-- 插入角色
|
|
INSERT INTO roles (code, name, description) VALUES
|
|
('super_admin', '超级管理员', '拥有所有权限，不可被删除'),
|
|
('cs', '客服', '处理用户咨询、群聊、纠纷仲裁'),
|
|
('ops', '运营', '管理商品审核、订单管理、用户管理'),
|
|
('finance', '财务', '查看资金流水、订单信息')
|
|
ON DUPLICATE KEY UPDATE name = VALUES(name), description = VALUES(description);
|
|
|
|
-- super_admin 拥有所有权限
|
|
INSERT IGNORE INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id FROM roles r CROSS JOIN permissions p WHERE r.code = 'super_admin';
|
|
|
|
-- cs 角色权限
|
|
INSERT IGNORE INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id FROM roles r, permissions p
|
|
WHERE r.code = 'cs' AND p.code IN ('dashboard:view', 'user:view', 'dispute:view', 'dispute:arbitrate', 'chat:view', 'chat:send', 'order:view');
|
|
|
|
-- ops 角色权限
|
|
INSERT IGNORE INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id FROM roles r, permissions p
|
|
WHERE r.code = 'ops' AND p.code IN ('dashboard:view', 'user:view', 'user:freeze', 'user:unfreeze', 'order:view', 'order:close', 'order:mark_abnormal', 'listing:view', 'listing:approve', 'listing:reject', 'listing:offline', 'dispute:view', 'audit_log:view');
|
|
|
|
-- finance 角色权限
|
|
INSERT IGNORE INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id FROM roles r, permissions p
|
|
WHERE r.code = 'finance' AND p.code IN ('dashboard:view', 'wallet:view', 'order:view');
|
|
|
|
-- 默认 admin 用户自动绑定 super_admin 角色
|
|
INSERT IGNORE INTO admin_user_roles (admin_user_id, role_id)
|
|
SELECT au.id, r.id FROM admin_users au, roles r WHERE au.username = 'admin' AND r.code = 'super_admin';
|