Files
KCGL/inventory-backend/fix_bom_perms.py

45 lines
1.6 KiB
Python
Raw Normal View History

"""补全 BOM 模块缺失的权限码"""
import subprocess, sys
CODES = [
('bom_manage:parent_spec', '父件规格'),
('bom_manage:child_id', '子件ID'),
('bom_manage:dosage', '用量'),
('bom_manage:remark', '备注'),
]
SQLS = []
# 1. sys_element
for code, name in CODES:
SQLS.append(f"""INSERT INTO sys_element (menu_code, name, code, element_type)
SELECT 'bom_manage', '{name}', '{code}', 'column'
WHERE NOT EXISTS (SELECT 1 FROM sys_element WHERE code = '{code}');""")
# 2. sys_role_permission — 给已有 BOM 权限的角色补全
SQLS.append("""
INSERT INTO sys_role_permission (role_code, target_code, type, company_name)
SELECT rp.role_code, elem.code, 'element', rp.company_name
FROM (SELECT DISTINCT role_code, company_name FROM sys_role_permission WHERE target_code LIKE 'bom_manage:%') rp
CROSS JOIN (SELECT unnest(ARRAY['bom_manage:parent_spec','bom_manage:child_id','bom_manage:dosage','bom_manage:remark']) AS code) elem
WHERE NOT EXISTS (
SELECT 1 FROM sys_role_permission rp2
WHERE rp2.role_code = rp.role_code
AND rp2.target_code = elem.code
AND COALESCE(rp2.company_name, '') = COALESCE(rp.company_name, '')
);
""")
# 3. 验证
SQLS.append("""SELECT target_code, string_agg(role_code, ', ' ORDER BY role_code) AS roles
FROM sys_role_permission WHERE target_code LIKE 'bom_manage:%'
GROUP BY target_code ORDER BY target_code;""")
full_sql = '\n'.join(SQLS)
result = subprocess.run(
['docker', 'exec', '-i', 'inventory_db', 'psql', '-U', 'test', '-d', 'inventory_system'],
input=full_sql, capture_output=True, text=True, timeout=10
)
print(result.stdout)
if result.stderr:
print(result.stderr, file=sys.stderr)