150 lines
8.6 KiB
Python
150 lines
8.6 KiB
Python
"""Add normalized administrator RBAC tables and bootstrap the current admin."""
|
|
|
|
from datetime import datetime, timezone
|
|
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
|
|
|
|
revision = "0025_admin_rbac"
|
|
down_revision = "0024_vehicle_demand"
|
|
branch_labels = None
|
|
depends_on = None
|
|
|
|
RBAC_TABLES = (
|
|
"AdminRole",
|
|
"AdminMenu",
|
|
"AdminDepartment",
|
|
"AdminUserRole",
|
|
"AdminRoleMenu",
|
|
"AdminUserDepartment",
|
|
"AdminRoleDepartment",
|
|
)
|
|
|
|
DEFAULT_DEPT_ID = "00000000-0000-0000-0000-000000000001"
|
|
SUPER_ROLE_ID = "00000000-0000-0000-0000-000000000002"
|
|
|
|
MENU_ROWS = (
|
|
("00000000-0000-0000-0000-000000000101", "仪表盘", "page", "/dashboard", "Dashboard", "admin:dashboard", 10),
|
|
("00000000-0000-0000-0000-000000000102", "首页配置", "page", "/home", "HomePage", "admin:site-config", 20),
|
|
("00000000-0000-0000-0000-000000000103", "玩法与详情", "page", "/play", "WanfaPage", "admin:wanfa:read", 30),
|
|
("00000000-0000-0000-0000-000000000104", "管家管理", "page", "/concierge", "ConciergePage", "admin:concierge:read", 40),
|
|
("00000000-0000-0000-0000-000000000105", "需求线索", "page", "/leads", "LeadsPage", "admin:leads:read", 50),
|
|
("00000000-0000-0000-0000-000000000106", "用户管理", "page", "/system/users", "SystemUsers", "system:user:read", 60),
|
|
("00000000-0000-0000-0000-000000000107", "角色管理", "page", "/system/roles", "SystemRoles", "system:role:read", 70),
|
|
("00000000-0000-0000-0000-000000000108", "菜单管理", "page", "/system/menus", "SystemMenus", "system:menu:read", 80),
|
|
("00000000-0000-0000-0000-000000000109", "部门管理", "page", "/system/depts", "SystemDepts", "system:dept:read", 90),
|
|
)
|
|
|
|
|
|
def upgrade() -> None:
|
|
now = datetime.now(timezone.utc).replace(tzinfo=None)
|
|
|
|
op.create_table(
|
|
"AdminRole",
|
|
sa.Column("id", sa.String(), nullable=False),
|
|
sa.Column("name", sa.String(), nullable=False),
|
|
sa.Column("code", sa.String(), nullable=False),
|
|
sa.Column("dataScope", sa.String(), nullable=False, server_default="all"),
|
|
sa.Column("description", sa.Text(), nullable=True),
|
|
sa.Column("isActive", sa.Boolean(), nullable=False, server_default=sa.true()),
|
|
sa.Column("createdAt", sa.DateTime(), nullable=False),
|
|
sa.Column("updatedAt", sa.DateTime(), nullable=False),
|
|
sa.PrimaryKeyConstraint("id"),
|
|
sa.UniqueConstraint("code", name="uq_AdminRole_code"),
|
|
)
|
|
op.create_table(
|
|
"AdminDepartment",
|
|
sa.Column("id", sa.String(), nullable=False),
|
|
sa.Column("parentId", sa.String(), nullable=True),
|
|
sa.Column("name", sa.String(), nullable=False),
|
|
sa.Column("sortOrder", sa.Integer(), nullable=False, server_default="0"),
|
|
sa.Column("isActive", sa.Boolean(), nullable=False, server_default=sa.true()),
|
|
sa.Column("createdAt", sa.DateTime(), nullable=False),
|
|
sa.Column("updatedAt", sa.DateTime(), nullable=False),
|
|
sa.ForeignKeyConstraint(["parentId"], ["AdminDepartment.id"], ondelete="SET NULL"),
|
|
sa.PrimaryKeyConstraint("id"),
|
|
)
|
|
op.create_table(
|
|
"AdminMenu",
|
|
sa.Column("id", sa.String(), nullable=False),
|
|
sa.Column("parentId", sa.String(), nullable=True),
|
|
sa.Column("name", sa.String(), nullable=False),
|
|
sa.Column("type", sa.String(), nullable=False, server_default="page"),
|
|
sa.Column("path", sa.String(), nullable=True),
|
|
sa.Column("componentKey", sa.String(), nullable=True),
|
|
sa.Column("permissionCode", sa.String(), nullable=True),
|
|
sa.Column("icon", sa.String(), nullable=True),
|
|
sa.Column("sortOrder", sa.Integer(), nullable=False, server_default="0"),
|
|
sa.Column("isVisible", sa.Boolean(), nullable=False, server_default=sa.true()),
|
|
sa.Column("isActive", sa.Boolean(), nullable=False, server_default=sa.true()),
|
|
sa.Column("createdAt", sa.DateTime(), nullable=False),
|
|
sa.Column("updatedAt", sa.DateTime(), nullable=False),
|
|
sa.ForeignKeyConstraint(["parentId"], ["AdminMenu.id"], ondelete="CASCADE"),
|
|
sa.PrimaryKeyConstraint("id"),
|
|
sa.UniqueConstraint("permissionCode", name="uq_AdminMenu_permissionCode"),
|
|
)
|
|
op.create_table(
|
|
"AdminUserRole",
|
|
sa.Column("userId", sa.String(), nullable=False),
|
|
sa.Column("roleId", sa.String(), nullable=False),
|
|
sa.Column("createdAt", sa.DateTime(), nullable=False),
|
|
sa.ForeignKeyConstraint(["roleId"], ["AdminRole.id"], ondelete="CASCADE"),
|
|
sa.ForeignKeyConstraint(["userId"], ["AdminUser.id"], ondelete="CASCADE"),
|
|
sa.PrimaryKeyConstraint("userId", "roleId"),
|
|
)
|
|
op.create_table(
|
|
"AdminRoleMenu",
|
|
sa.Column("roleId", sa.String(), nullable=False),
|
|
sa.Column("menuId", sa.String(), nullable=False),
|
|
sa.Column("createdAt", sa.DateTime(), nullable=False),
|
|
sa.ForeignKeyConstraint(["menuId"], ["AdminMenu.id"], ondelete="CASCADE"),
|
|
sa.ForeignKeyConstraint(["roleId"], ["AdminRole.id"], ondelete="CASCADE"),
|
|
sa.PrimaryKeyConstraint("roleId", "menuId"),
|
|
)
|
|
op.create_table(
|
|
"AdminUserDepartment",
|
|
sa.Column("userId", sa.String(), nullable=False),
|
|
sa.Column("deptId", sa.String(), nullable=False),
|
|
sa.Column("createdAt", sa.DateTime(), nullable=False),
|
|
sa.ForeignKeyConstraint(["deptId"], ["AdminDepartment.id"], ondelete="CASCADE"),
|
|
sa.ForeignKeyConstraint(["userId"], ["AdminUser.id"], ondelete="CASCADE"),
|
|
sa.PrimaryKeyConstraint("userId", "deptId"),
|
|
)
|
|
op.create_table(
|
|
"AdminRoleDepartment",
|
|
sa.Column("roleId", sa.String(), nullable=False),
|
|
sa.Column("deptId", sa.String(), nullable=False),
|
|
sa.Column("createdAt", sa.DateTime(), nullable=False),
|
|
sa.ForeignKeyConstraint(["deptId"], ["AdminDepartment.id"], ondelete="CASCADE"),
|
|
sa.ForeignKeyConstraint(["roleId"], ["AdminRole.id"], ondelete="CASCADE"),
|
|
sa.PrimaryKeyConstraint("roleId", "deptId"),
|
|
)
|
|
|
|
role_table = sa.table("AdminRole", sa.column("id", sa.String), sa.column("name", sa.String), sa.column("code", sa.String), sa.column("dataScope", sa.String), sa.column("isActive", sa.Boolean), sa.column("createdAt", sa.DateTime), sa.column("updatedAt", sa.DateTime))
|
|
dept_table = sa.table("AdminDepartment", sa.column("id", sa.String), sa.column("name", sa.String), sa.column("sortOrder", sa.Integer), sa.column("isActive", sa.Boolean), sa.column("createdAt", sa.DateTime), sa.column("updatedAt", sa.DateTime))
|
|
menu_table = sa.table("AdminMenu", sa.column("id", sa.String), sa.column("name", sa.String), sa.column("type", sa.String), sa.column("path", sa.String), sa.column("componentKey", sa.String), sa.column("permissionCode", sa.String), sa.column("sortOrder", sa.Integer), sa.column("isVisible", sa.Boolean), sa.column("isActive", sa.Boolean), sa.column("createdAt", sa.DateTime), sa.column("updatedAt", sa.DateTime))
|
|
op.bulk_insert(role_table, [{"id": SUPER_ROLE_ID, "name": "超级管理员", "code": "super_admin", "dataScope": "all", "isActive": True, "createdAt": now, "updatedAt": now}])
|
|
op.bulk_insert(dept_table, [{"id": DEFAULT_DEPT_ID, "name": "默认部门", "sortOrder": 0, "isActive": True, "createdAt": now, "updatedAt": now}])
|
|
op.bulk_insert(
|
|
menu_table,
|
|
[
|
|
{"id": menu_id, "name": name, "type": menu_type, "path": path, "componentKey": component, "permissionCode": permission, "sortOrder": sort_order, "isVisible": True, "isActive": True, "createdAt": now, "updatedAt": now}
|
|
for menu_id, name, menu_type, path, component, permission, sort_order in MENU_ROWS
|
|
],
|
|
)
|
|
op.execute(sa.text('INSERT INTO "AdminRoleMenu" ("roleId", "menuId", "createdAt") SELECT :role_id, "id", :created_at FROM "AdminMenu" ON CONFLICT DO NOTHING').bindparams(role_id=SUPER_ROLE_ID, created_at=now))
|
|
op.execute(sa.text('INSERT INTO "AdminRoleDepartment" ("roleId", "deptId", "createdAt") VALUES (:role_id, :dept_id, :created_at) ON CONFLICT DO NOTHING').bindparams(role_id=SUPER_ROLE_ID, dept_id=DEFAULT_DEPT_ID, created_at=now))
|
|
op.execute(sa.text('INSERT INTO "AdminUserRole" ("userId", "roleId", "createdAt") SELECT "id", :role_id, :created_at FROM "AdminUser" ON CONFLICT DO NOTHING').bindparams(role_id=SUPER_ROLE_ID, created_at=now))
|
|
op.execute(sa.text('INSERT INTO "AdminUserDepartment" ("userId", "deptId", "createdAt") SELECT "id", :dept_id, :created_at FROM "AdminUser" ON CONFLICT DO NOTHING').bindparams(dept_id=DEFAULT_DEPT_ID, created_at=now))
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_table("AdminRoleDepartment")
|
|
op.drop_table("AdminUserDepartment")
|
|
op.drop_table("AdminRoleMenu")
|
|
op.drop_table("AdminUserRole")
|
|
op.drop_table("AdminMenu")
|
|
op.drop_table("AdminDepartment")
|
|
op.drop_table("AdminRole")
|