36 lines
2.3 KiB
PL/PgSQL
36 lines
2.3 KiB
PL/PgSQL
|
-- =============================================================================
|
||
|
|
-- 脚本名称: 010_dms_access_management_permissions.sql
|
||
|
|
-- 业务模块: DMS门禁与外部资源映射管理端权限扩展 (R.3B Wave 3B)
|
||
|
|
-- 适用数据库: KingbaseES, schema public
|
||
|
|
-- 范围: 仅限 sys_menu 按钮级权限增量插入，不改动已有角色分配 (sys_role_menu Δ = 0)
|
||
|
|
-- 幂等性设计: 支持重复执行，WHERE NOT EXISTS 防重，无破坏性语句
|
||
|
|
-- 安全红线: 严禁引入远程应急开门权限，严禁普通学员/教师授权
|
||
|
|
-- =============================================================================
|
||
|
|
|
||
|
|
BEGIN;
|
||
|
|
|
||
|
|
-- 1. 门禁与映射查看权限 (train:access:query)
|
||
|
|
INSERT INTO public.sys_menu
|
||
|
|
(menu_id, menu_name, parent_id, order_num, path, component, query, is_frame, is_cache,
|
||
|
|
menu_type, visible, status, perms, icon, create_by, create_time, update_by, update_time, remark)
|
||
|
|
SELECT 2191, '门禁与资源映射查看', 2060, 1, '#', '', '', 1, 0,
|
||
|
|
'F', '0', '0', 'train:access:query', '#', 'admin', CURRENT_TIMESTAMP, '', NULL, '门禁授权与外部资源映射查看权限'
|
||
|
|
WHERE NOT EXISTS (SELECT 1 FROM public.sys_menu WHERE perms = 'train:access:query');
|
||
|
|
|
||
|
|
-- 2. 门禁资源映射管理权限 (train:access:manage)
|
||
|
|
INSERT INTO public.sys_menu
|
||
|
|
(menu_id, menu_name, parent_id, order_num, path, component, query, is_frame, is_cache,
|
||
|
|
menu_type, visible, status, perms, icon, create_by, create_time, update_by, update_time, remark)
|
||
|
|
SELECT 2192, '门禁资源映射维护', 2060, 2, '#', '', '', 1, 0,
|
||
|
|
'F', '0', '0', 'train:access:manage', '#', 'admin', CURRENT_TIMESTAMP, '', NULL, '门禁房间与门锁资源绑定解绑维护权限'
|
||
|
|
WHERE NOT EXISTS (SELECT 1 FROM public.sys_menu WHERE perms = 'train:access:manage');
|
||
|
|
|
||
|
|
-- 3. 门禁手动对账权限 (train:access:reconcile)
|
||
|
|
INSERT INTO public.sys_menu
|
||
|
|
(menu_id, menu_name, parent_id, order_num, path, component, query, is_frame, is_cache,
|
||
|
|
menu_type, visible, status, perms, icon, create_by, create_time, update_by, update_time, remark)
|
||
|
|
SELECT 2193, '门禁手动对账触发', 2060, 3, '#', '', '', 1, 0,
|
||
|
|
'F', '0', '0', 'train:access:reconcile', '#', 'admin', CURRENT_TIMESTAMP, '', NULL, '门禁权限手动对账触发执行权限'
|
||
|
|
WHERE NOT EXISTS (SELECT 1 FROM public.sys_menu WHERE perms = 'train:access:reconcile');
|
||
|
|
|
||
|
|
COMMIT;
|