-- =============================================
|
-- 考勤规则：导入按钮权限点
|
--
|
-- 背景：新增 /hrm/attendance/rule/import 与 /get-import-template 两个接口，
|
-- 权限码 hrm:attendance-rule:import 在 system_menu 中不存在，
|
-- 会导致非超级管理员调用时 403。
|
--
|
-- 做法：补一个 type=3 的按钮权限点（不显示在侧栏），并授权给所有现有启用角色，
|
-- 与既有「考勤规则查询/新增/修改/删除/导出」的授权范围保持一致。
|
--
|
-- 动态 id（MAX(id)+1），可重复执行（幂等）。
|
-- =============================================
|
SET NAMES utf8mb4;
|
|
-- 1. 定位父菜单：考勤规则（优先按 path，兜底按既有权限码反查）
|
SET @hrm := (SELECT id FROM `system_menu` WHERE `path` IN ('hrm','/hrm') AND `deleted`=b'0' LIMIT 1);
|
SET @att := (SELECT id FROM `system_menu` WHERE `path`='attendance' AND `parent_id`=@hrm AND `deleted`=b'0' LIMIT 1);
|
SET @att_rule := (SELECT `parent_id` FROM `system_menu`
|
WHERE `permission`='hrm:attendance-rule:query' AND `deleted`=b'0' LIMIT 1);
|
SET @att_rule := IFNULL(@att_rule,
|
(SELECT id FROM `system_menu` WHERE `path`='rule' AND `parent_id`=@att AND `deleted`=b'0' LIMIT 1));
|
|
-- 2. 插入权限点
|
SET @perm_exists := (SELECT COUNT(*) FROM `system_menu` WHERE `permission`='hrm:attendance-rule:import');
|
SET @import_menu_id := IFNULL((SELECT MAX(id) FROM `system_menu`), 0) + 1;
|
|
INSERT INTO `system_menu` (`id`,`name`,`permission`,`type`,`sort`,`parent_id`,`path`,`icon`,`component`,
|
`component_name`,`status`,`visible`,`keep_alive`,`always_show`,
|
`creator`,`create_time`,`updater`,`update_time`,`deleted`)
|
SELECT @import_menu_id, '考勤规则导入', 'hrm:attendance-rule:import', 3, 6, @att_rule, '', '', '', NULL,
|
0, b'1', b'1', b'1', '1', NOW(), '1', NOW(), b'0'
|
FROM DUAL
|
WHERE @perm_exists = 0 AND @att_rule IS NOT NULL;
|
|
-- 3. 授权给所有现有启用角色
|
SET @menu_id := (SELECT id FROM `system_menu` WHERE `permission`='hrm:attendance-rule:import' AND `deleted`=b'0' LIMIT 1);
|
|
INSERT INTO `system_role_menu` (`role_id`,`menu_id`,`creator`,`create_time`,`updater`,`update_time`,`deleted`)
|
SELECT r.`id`, @menu_id, '1', NOW(), '1', NOW(), b'0'
|
FROM `system_role` r
|
WHERE @menu_id IS NOT NULL
|
AND r.`deleted` = b'0'
|
AND r.`status` = 0
|
AND NOT EXISTS (SELECT 1 FROM `system_role_menu` rm
|
WHERE rm.`role_id` = r.`id` AND rm.`menu_id` = @menu_id AND rm.`deleted` = b'0');
|
|
-- 4. 核对
|
SELECT id, name, permission, type, parent_id FROM `system_menu`
|
WHERE permission = 'hrm:attendance-rule:import';
|
|
SELECT r.id AS role_id, r.name AS role_name, rm.menu_id
|
FROM `system_role` r
|
LEFT JOIN `system_role_menu` rm ON rm.role_id = r.id AND rm.menu_id = @menu_id AND rm.deleted = b'0'
|
WHERE r.deleted = b'0' AND r.status = 0;
|
|
SELECT 'hrm:attendance-rule:import 权限点初始化完成' AS result;
|
