Features - User Management (Phase 4.1): - Database: Add user_modules table for fine-grained module permissions - Database: Add 4 user permissions (view/create/edit/delete) to role_permissions - Backend: UserService (780 lines) - CRUD with tenant isolation - Backend: UserController + UserRoutes (648 lines) - 13 API endpoints - Backend: Batch import users from Excel - Frontend: UserListPage (412 lines) - list/filter/search/pagination - Frontend: UserFormPage (341 lines) - create/edit with module config - Frontend: UserDetailPage (393 lines) - details/tenant/module management - Frontend: 3 modal components (592 lines) - import/assign/configure - API: GET/POST/PUT/DELETE /api/admin/users/* endpoints Architecture Upgrade - Module Permission System: - Backend: Add getUserModules() method in auth.service - Backend: Login API returns modules array in user object - Frontend: AuthContext adds hasModule() method - Frontend: Navigation filters modules based on user.modules - Frontend: RouteGuard checks requiredModule instead of requiredVersion - Frontend: Remove deprecated version-based permission system - UX: Only show accessible modules in navigation (clean UI) - UX: Smart redirect after login (avoid 403 for regular users) Fixes: - Fix UTF-8 encoding corruption in ~100 docs files - Fix pageSize type conversion in userService (String to Number) - Fix authUser undefined error in TopNavigation - Fix login redirect logic with role-based access check - Update Git commit guidelines v1.2 with UTF-8 safety rules Database Changes: - CREATE TABLE user_modules (user_id, tenant_id, module_code, is_enabled) - ADD UNIQUE CONSTRAINT (user_id, tenant_id, module_code) - INSERT 4 permissions + role assignments - UPDATE PUBLIC tenant with 8 module subscriptions Technical: - Backend: 5 new files (~2400 lines) - Frontend: 10 new files (~2500 lines) - Docs: 1 development record + 2 status updates + 1 guideline update - Total: ~4900 lines of code Status: User management 100% complete, module permission system operational
70 lines
1.5 KiB
PHP
70 lines
1.5 KiB
PHP
<?php
|
||
/**
|
||
* REDCap密码哈希生成脚本
|
||
* 直接在数据库中更新Admin密码
|
||
*/
|
||
|
||
// REDCap密码哈希算法(SHA-512 + Salt)
|
||
$username = 'Admin';
|
||
$new_password = 'Admin123!';
|
||
|
||
// 生成新的salt(REDCap使用100字符的随机salt)
|
||
$salt = '';
|
||
$characters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_=+[]{}|;:,.<>?~';
|
||
for ($i = 0; $i < 100; $i++) {
|
||
$salt .= $characters[random_int(0, strlen($characters) - 1)];
|
||
}
|
||
|
||
// 生成密码哈希(SHA-512(password + salt))
|
||
$password_hash = hash('sha512', $new_password . $salt);
|
||
|
||
// 数据库连接信息
|
||
$db_host = getenv('REDCAP_DB_HOST') ?: 'redcap-mysql';
|
||
$db_name = getenv('REDCAP_DB_NAME') ?: 'redcap';
|
||
$db_user = getenv('REDCAP_DB_USER') ?: 'redcap_user';
|
||
$db_pass = getenv('REDCAP_DB_PASS') ?: 'redcap_pass_dev_456';
|
||
|
||
try {
|
||
$pdo = new PDO("mysql:host=$db_host;dbname=$db_name", $db_user, $db_pass);
|
||
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
||
|
||
// 更新密码
|
||
$stmt = $pdo->prepare("UPDATE redcap_auth SET password = ?, password_salt = ? WHERE username = ?");
|
||
$result = $stmt->execute([$password_hash, $salt, $username]);
|
||
|
||
if ($result) {
|
||
echo "✅ Password updated successfully!\n\n";
|
||
echo "Username: $username\n";
|
||
echo "New Password: $new_password\n\n";
|
||
echo "You can now login at: http://localhost:8080/\n";
|
||
} else {
|
||
echo "❌ Failed to update password\n";
|
||
}
|
||
|
||
} catch (PDOException $e) {
|
||
echo "❌ Database error: " . $e->getMessage() . "\n";
|
||
}
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|