feat(M02-D): 完成用户与员工权限管理

2026-06-18 14:45:01 +08:00
parent 46acb8422a
commit 5a300a82f6
21 changed files with 894 additions and 40 deletions
@@ -33,10 +33,15 @@ export class RbacRepository {
    );
    await this.pool.execute(
      `INSERT IGNORE INTO qipai_role_permissions (tenant_id, role_id, permission_id)
-       SELECT ?, r.id, p.id
-       FROM qipai_roles r
-       INNER JOIN qipai_permissions p ON p.code IN ('profile.read', 'order.self.read')
-       WHERE r.tenant_id = ? AND r.code = 'CUSTOMER'`,
+       SELECT ?, r.id, p.id FROM qipai_roles r
+       INNER JOIN qipai_permissions p ON
+         (r.code = 'CUSTOMER' AND p.code IN ('profile.read', 'order.self.read'))
+         OR (r.code = 'STORE_ADMIN'
+             AND p.code IN ('user.read', 'staff.manage', 'session.reset',
+                            'store.operation.read', 'store.operation.write'))
+         OR (r.code IN ('TENANT_ADMIN', 'PLATFORM_ADMIN')
+             AND p.code IN ('user.read', 'staff.manage', 'session.reset', 'tenant.manage'))
+       WHERE r.tenant_id = ?`,
      [tenantId, tenantId]
    );
  }