Features - User Management (Phase 4.1): - Database: Add user_modules table for fine-grained module permissions - Database: Add 4 user permissions (view/create/edit/delete) to role_permissions - Backend: UserService (780 lines) - CRUD with tenant isolation - Backend: UserController + UserRoutes (648 lines) - 13 API endpoints - Backend: Batch import users from Excel - Frontend: UserListPage (412 lines) - list/filter/search/pagination - Frontend: UserFormPage (341 lines) - create/edit with module config - Frontend: UserDetailPage (393 lines) - details/tenant/module management - Frontend: 3 modal components (592 lines) - import/assign/configure - API: GET/POST/PUT/DELETE /api/admin/users/* endpoints Architecture Upgrade - Module Permission System: - Backend: Add getUserModules() method in auth.service - Backend: Login API returns modules array in user object - Frontend: AuthContext adds hasModule() method - Frontend: Navigation filters modules based on user.modules - Frontend: RouteGuard checks requiredModule instead of requiredVersion - Frontend: Remove deprecated version-based permission system - UX: Only show accessible modules in navigation (clean UI) - UX: Smart redirect after login (avoid 403 for regular users) Fixes: - Fix UTF-8 encoding corruption in ~100 docs files - Fix pageSize type conversion in userService (String to Number) - Fix authUser undefined error in TopNavigation - Fix login redirect logic with role-based access check - Update Git commit guidelines v1.2 with UTF-8 safety rules Database Changes: - CREATE TABLE user_modules (user_id, tenant_id, module_code, is_enabled) - ADD UNIQUE CONSTRAINT (user_id, tenant_id, module_code) - INSERT 4 permissions + role assignments - UPDATE PUBLIC tenant with 8 module subscriptions Technical: - Backend: 5 new files (~2400 lines) - Frontend: 10 new files (~2500 lines) - Docs: 1 development record + 2 status updates + 1 guideline update - Total: ~4900 lines of code Status: User management 100% complete, module permission system operational
122 lines
3.6 KiB
TypeScript
122 lines
3.6 KiB
TypeScript
/**
|
|
* Prompt管理系统初始化脚本
|
|
*
|
|
* 功能:
|
|
* 1. 创建 capability_schema
|
|
* 2. 添加 prompt:* 权限
|
|
* 3. 更新角色权限分配
|
|
*/
|
|
|
|
import { PrismaClient } from '@prisma/client';
|
|
|
|
const prisma = new PrismaClient();
|
|
|
|
async function main() {
|
|
console.log('🚀 开始初始化 Prompt 管理系统...\n');
|
|
|
|
// 1. 创建 capability_schema
|
|
console.log('📁 Step 1: 创建 capability_schema...');
|
|
try {
|
|
await prisma.$executeRaw`CREATE SCHEMA IF NOT EXISTS capability_schema`;
|
|
console.log(' ✅ capability_schema 创建成功\n');
|
|
} catch (error) {
|
|
console.log(' ⚠️ capability_schema 可能已存在\n');
|
|
}
|
|
|
|
// 2. 添加 prompt:* 权限
|
|
console.log('🔐 Step 2: 添加 prompt:* 权限...');
|
|
|
|
const promptPermissions = [
|
|
{ code: 'prompt:view', name: '查看Prompt', description: '查看Prompt模板列表和详情', module: 'admin' },
|
|
{ code: 'prompt:edit', name: '编辑Prompt', description: '创建和修改Prompt草稿', module: 'admin' },
|
|
{ code: 'prompt:debug', name: '调试Prompt', description: '开启调试模式,在生产环境测试草稿', module: 'admin' },
|
|
{ code: 'prompt:publish', name: '发布Prompt', description: '将草稿发布为正式版', module: 'admin' },
|
|
];
|
|
|
|
for (const perm of promptPermissions) {
|
|
try {
|
|
await prisma.permissions.upsert({
|
|
where: { code: perm.code },
|
|
update: { name: perm.name, description: perm.description, module: perm.module },
|
|
create: perm,
|
|
});
|
|
console.log(` ✅ ${perm.code}`);
|
|
} catch (error) {
|
|
console.log(` ⚠️ ${perm.code} 添加失败:`, error);
|
|
}
|
|
}
|
|
console.log('');
|
|
|
|
// 3. 获取权限ID
|
|
console.log('🔗 Step 3: 更新角色权限分配...');
|
|
|
|
const permissions = await prisma.permissions.findMany({
|
|
where: { code: { startsWith: 'prompt:' } },
|
|
});
|
|
|
|
const permissionMap = new Map(permissions.map(p => [p.code, p.id]));
|
|
|
|
// SUPER_ADMIN: 全部权限
|
|
const superAdminPermissions = ['prompt:view', 'prompt:edit', 'prompt:debug', 'prompt:publish'];
|
|
for (const permCode of superAdminPermissions) {
|
|
const permId = permissionMap.get(permCode);
|
|
if (permId) {
|
|
try {
|
|
await prisma.role_permissions.upsert({
|
|
where: {
|
|
role_permission_id: { role: 'SUPER_ADMIN', permission_id: permId },
|
|
},
|
|
update: {},
|
|
create: { role: 'SUPER_ADMIN', permission_id: permId },
|
|
});
|
|
} catch (error) {
|
|
// 可能已存在
|
|
}
|
|
}
|
|
}
|
|
console.log(' ✅ SUPER_ADMIN: prompt:view, prompt:edit, prompt:debug, prompt:publish');
|
|
|
|
// PROMPT_ENGINEER: 无 publish 权限
|
|
const promptEngineerPermissions = ['prompt:view', 'prompt:edit', 'prompt:debug'];
|
|
for (const permCode of promptEngineerPermissions) {
|
|
const permId = permissionMap.get(permCode);
|
|
if (permId) {
|
|
try {
|
|
await prisma.role_permissions.upsert({
|
|
where: {
|
|
role_permission_id: { role: 'PROMPT_ENGINEER', permission_id: permId },
|
|
},
|
|
update: {},
|
|
create: { role: 'PROMPT_ENGINEER', permission_id: permId },
|
|
});
|
|
} catch (error) {
|
|
// 可能已存在
|
|
}
|
|
}
|
|
}
|
|
console.log(' ✅ PROMPT_ENGINEER: prompt:view, prompt:edit, prompt:debug (无publish)');
|
|
console.log('');
|
|
|
|
// 4. 验证
|
|
console.log('✅ Prompt 管理系统初始化完成!\n');
|
|
|
|
const allPermissions = await prisma.permissions.findMany({
|
|
where: { code: { startsWith: 'prompt:' } },
|
|
});
|
|
console.log('📋 已添加的权限:');
|
|
allPermissions.forEach(p => console.log(` - ${p.code}: ${p.name}`));
|
|
}
|
|
|
|
main()
|
|
.catch(console.error)
|
|
.finally(() => prisma.$disconnect());
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|