272 lines
16 KiB
JavaScript
272 lines
16 KiB
JavaScript
/**
|
||
* 优化权限管理数据库结构
|
||
* 创建permissions表，优化role_permissions表，实现完整的权限管理
|
||
*/
|
||
|
||
const { sequelize } = require('../config/database-simple');
|
||
|
||
async function optimizePermissionStructure() {
|
||
try {
|
||
console.log('开始优化权限管理数据库结构...');
|
||
|
||
// 1. 创建permissions表
|
||
console.log('1. 创建permissions表...');
|
||
await sequelize.query(`
|
||
CREATE TABLE IF NOT EXISTS permissions (
|
||
id INT(11) NOT NULL AUTO_INCREMENT,
|
||
permission_key VARCHAR(100) NOT NULL UNIQUE COMMENT '权限标识',
|
||
permission_name VARCHAR(100) NOT NULL COMMENT '权限名称',
|
||
permission_desc TEXT COMMENT '权限描述',
|
||
module VARCHAR(50) NOT NULL COMMENT '所属模块',
|
||
action VARCHAR(50) NOT NULL COMMENT '操作类型',
|
||
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
||
updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
||
PRIMARY KEY (id),
|
||
INDEX idx_module (module),
|
||
INDEX idx_action (action),
|
||
INDEX idx_permission_key (permission_key)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='权限定义表'
|
||
`);
|
||
|
||
// 2. 优化role_permissions表结构
|
||
console.log('2. 优化role_permissions表结构...');
|
||
|
||
// 先备份现有数据
|
||
const [existingData] = await sequelize.query('SELECT * FROM role_permissions');
|
||
console.log(`备份了 ${existingData.length} 条现有数据`);
|
||
|
||
// 删除现有表
|
||
await sequelize.query('DROP TABLE IF EXISTS role_permissions');
|
||
|
||
// 创建新的role_permissions表
|
||
await sequelize.query(`
|
||
CREATE TABLE role_permissions (
|
||
id INT(11) NOT NULL AUTO_INCREMENT,
|
||
role_id INT(11) NOT NULL COMMENT '角色ID',
|
||
permission_id INT(11) NOT NULL COMMENT '权限ID',
|
||
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
||
updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
||
PRIMARY KEY (id),
|
||
UNIQUE KEY uk_role_permission (role_id, permission_id),
|
||
INDEX idx_role_id (role_id),
|
||
INDEX idx_permission_id (permission_id),
|
||
FOREIGN KEY (role_id) REFERENCES roles(id) ON DELETE CASCADE,
|
||
FOREIGN KEY (permission_id) REFERENCES permissions(id) ON DELETE CASCADE
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='角色权限关联表'
|
||
`);
|
||
|
||
// 3. 插入权限数据
|
||
console.log('3. 插入权限数据...');
|
||
const permissions = [
|
||
// 用户管理权限
|
||
{ key: 'user:view', name: '查看用户', desc: '查看用户列表和详情', module: 'user', action: 'view' },
|
||
{ key: 'user:create', name: '创建用户', desc: '创建新用户', module: 'user', action: 'create' },
|
||
{ key: 'user:update', name: '更新用户', desc: '更新用户信息', module: 'user', action: 'update' },
|
||
{ key: 'user:delete', name: '删除用户', desc: '删除用户', module: 'user', action: 'delete' },
|
||
|
||
// 角色管理权限
|
||
{ key: 'role:view', name: '查看角色', desc: '查看角色列表和详情', module: 'role', action: 'view' },
|
||
{ key: 'role:create', name: '创建角色', desc: '创建新角色', module: 'role', action: 'create' },
|
||
{ key: 'role:update', name: '更新角色', desc: '更新角色信息', module: 'role', action: 'update' },
|
||
{ key: 'role:delete', name: '删除角色', desc: '删除角色', module: 'role', action: 'delete' },
|
||
{ key: 'role:assign', name: '分配权限', desc: '为角色分配权限', module: 'role', action: 'assign' },
|
||
|
||
// 养殖场管理权限
|
||
{ key: 'farm:view', name: '查看养殖场', desc: '查看养殖场列表和详情', module: 'farm', action: 'view' },
|
||
{ key: 'farm:create', name: '创建养殖场', desc: '创建新养殖场', module: 'farm', action: 'create' },
|
||
{ key: 'farm:update', name: '更新养殖场', desc: '更新养殖场信息', module: 'farm', action: 'update' },
|
||
{ key: 'farm:delete', name: '删除养殖场', desc: '删除养殖场', module: 'farm', action: 'delete' },
|
||
|
||
// 设备管理权限
|
||
{ key: 'device:view', name: '查看设备', desc: '查看设备列表和详情', module: 'device', action: 'view' },
|
||
{ key: 'device:create', name: '创建设备', desc: '创建新设备', module: 'device', action: 'create' },
|
||
{ key: 'device:update', name: '更新设备', desc: '更新设备信息', module: 'device', action: 'update' },
|
||
{ key: 'device:delete', name: '删除设备', desc: '删除设备', module: 'device', action: 'delete' },
|
||
{ key: 'device:control', name: '控制设备', desc: '控制设备操作', module: 'device', action: 'control' },
|
||
|
||
// 智能设备权限
|
||
{ key: 'smart_device:view', name: '查看智能设备', desc: '查看智能设备列表', module: 'smart_device', action: 'view' },
|
||
{ key: 'smart_device:manage', name: '管理智能设备', desc: '管理智能设备', module: 'smart_device', action: 'manage' },
|
||
|
||
// 智能耳标权限
|
||
{ key: 'smart_eartag:view', name: '查看智能耳标', desc: '查看智能耳标列表', module: 'smart_eartag', action: 'view' },
|
||
{ key: 'smart_eartag:create', name: '创建智能耳标', desc: '创建智能耳标', module: 'smart_eartag', action: 'create' },
|
||
{ key: 'smart_eartag:update', name: '更新智能耳标', desc: '更新智能耳标信息', module: 'smart_eartag', action: 'update' },
|
||
{ key: 'smart_eartag:delete', name: '删除智能耳标', desc: '删除智能耳标', module: 'smart_eartag', action: 'delete' },
|
||
|
||
// 智能脚环权限
|
||
{ key: 'smart_anklet:view', name: '查看智能脚环', desc: '查看智能脚环列表', module: 'smart_anklet', action: 'view' },
|
||
{ key: 'smart_anklet:create', name: '创建智能脚环', desc: '创建智能脚环', module: 'smart_anklet', action: 'create' },
|
||
{ key: 'smart_anklet:update', name: '更新智能脚环', desc: '更新智能脚环信息', module: 'smart_anklet', action: 'update' },
|
||
{ key: 'smart_anklet:delete', name: '删除智能脚环', desc: '删除智能脚环', module: 'smart_anklet', action: 'delete' },
|
||
|
||
// 智能项圈权限
|
||
{ key: 'smart_collar:view', name: '查看智能项圈', desc: '查看智能项圈列表', module: 'smart_collar', action: 'view' },
|
||
{ key: 'smart_collar:create', name: '创建智能项圈', desc: '创建智能项圈', module: 'smart_collar', action: 'create' },
|
||
{ key: 'smart_collar:update', name: '更新智能项圈', desc: '更新智能项圈信息', module: 'smart_collar', action: 'update' },
|
||
{ key: 'smart_collar:delete', name: '删除智能项圈', desc: '删除智能项圈', module: 'smart_collar', action: 'delete' },
|
||
|
||
// 智能主机权限
|
||
{ key: 'smart_host:view', name: '查看智能主机', desc: '查看智能主机列表', module: 'smart_host', action: 'view' },
|
||
{ key: 'smart_host:create', name: '创建智能主机', desc: '创建智能主机', module: 'smart_host', action: 'create' },
|
||
{ key: 'smart_host:update', name: '更新智能主机', desc: '更新智能主机信息', module: 'smart_host', action: 'update' },
|
||
{ key: 'smart_host:delete', name: '删除智能主机', desc: '删除智能主机', module: 'smart_host', action: 'delete' },
|
||
|
||
// 智能围栏权限
|
||
{ key: 'smart_fence:view', name: '查看智能围栏', desc: '查看智能围栏列表', module: 'smart_fence', action: 'view' },
|
||
{ key: 'smart_fence:create', name: '创建智能围栏', desc: '创建智能围栏', module: 'smart_fence', action: 'create' },
|
||
{ key: 'smart_fence:update', name: '更新智能围栏', desc: '更新智能围栏信息', module: 'smart_fence', action: 'update' },
|
||
{ key: 'smart_fence:delete', name: '删除智能围栏', desc: '删除智能围栏', module: 'smart_fence', action: 'delete' },
|
||
|
||
// 动物管理权限
|
||
{ key: 'animal:view', name: '查看动物', desc: '查看动物列表和详情', module: 'animal', action: 'view' },
|
||
{ key: 'animal:create', name: '创建动物', desc: '创建新动物', module: 'animal', action: 'create' },
|
||
{ key: 'animal:update', name: '更新动物', desc: '更新动物信息', module: 'animal', action: 'update' },
|
||
{ key: 'animal:delete', name: '删除动物', desc: '删除动物', module: 'animal', action: 'delete' },
|
||
|
||
// 牛只管理权限
|
||
{ key: 'cattle:archives:view', name: '查看牛只档案', desc: '查看牛只档案列表', module: 'cattle', action: 'archives:view' },
|
||
{ key: 'cattle:archives:create', name: '创建牛只档案', desc: '创建牛只档案', module: 'cattle', action: 'archives:create' },
|
||
{ key: 'cattle:archives:update', name: '更新牛只档案', desc: '更新牛只档案信息', module: 'cattle', action: 'archives:update' },
|
||
{ key: 'cattle:archives:delete', name: '删除牛只档案', desc: '删除牛只档案', module: 'cattle', action: 'archives:delete' },
|
||
|
||
{ key: 'cattle:pens:view', name: '查看栏舍', desc: '查看栏舍列表', module: 'cattle', action: 'pens:view' },
|
||
{ key: 'cattle:pens:create', name: '创建栏舍', desc: '创建栏舍', module: 'cattle', action: 'pens:create' },
|
||
{ key: 'cattle:pens:update', name: '更新栏舍', desc: '更新栏舍信息', module: 'cattle', action: 'pens:update' },
|
||
{ key: 'cattle:pens:delete', name: '删除栏舍', desc: '删除栏舍', module: 'cattle', action: 'pens:delete' },
|
||
|
||
// 预警管理权限
|
||
{ key: 'alert:view', name: '查看预警', desc: '查看预警列表', module: 'alert', action: 'view' },
|
||
{ key: 'alert:create', name: '创建预警', desc: '创建预警', module: 'alert', action: 'create' },
|
||
{ key: 'alert:update', name: '更新预警', desc: '更新预警信息', module: 'alert', action: 'update' },
|
||
{ key: 'alert:delete', name: '删除预警', desc: '删除预警', module: 'alert', action: 'delete' },
|
||
{ key: 'alert:handle', name: '处理预警', desc: '处理预警', module: 'alert', action: 'handle' },
|
||
|
||
// 智能预警权限
|
||
{ key: 'smart_alert:view', name: '查看智能预警', desc: '查看智能预警列表', module: 'smart_alert', action: 'view' },
|
||
{ key: 'smart_eartag_alert:view', name: '查看耳标预警', desc: '查看耳标预警', module: 'smart_alert', action: 'eartag:view' },
|
||
{ key: 'smart_collar_alert:view', name: '查看项圈预警', desc: '查看项圈预警', module: 'smart_alert', action: 'collar:view' },
|
||
|
||
// 数据分析权限
|
||
{ key: 'analytics:view', name: '查看分析', desc: '查看数据分析', module: 'analytics', action: 'view' },
|
||
{ key: 'report:generate', name: '生成报表', desc: '生成报表', module: 'report', action: 'generate' },
|
||
{ key: 'report:export', name: '导出报表', desc: '导出报表', module: 'report', action: 'export' },
|
||
|
||
// 系统管理权限
|
||
{ key: 'system:config', name: '系统配置', desc: '系统配置管理', module: 'system', action: 'config' },
|
||
{ key: 'system:monitor', name: '系统监控', desc: '系统监控', module: 'system', action: 'monitor' },
|
||
{ key: 'system:backup', name: '系统备份', desc: '系统备份', module: 'system', action: 'backup' },
|
||
|
||
// 实时监控权限
|
||
{ key: 'monitor:view', name: '实时监控', desc: '实时监控查看', module: 'monitor', action: 'view' },
|
||
|
||
// 地图权限
|
||
{ key: 'map:view', name: '查看地图', desc: '查看地图', module: 'map', action: 'view' },
|
||
{ key: 'map:edit', name: '编辑地图', desc: '编辑地图标记', module: 'map', action: 'edit' },
|
||
|
||
// 产品订单权限
|
||
{ key: 'product:view', name: '查看产品', desc: '查看产品列表', module: 'product', action: 'view' },
|
||
{ key: 'product:manage', name: '管理产品', desc: '管理产品', module: 'product', action: 'manage' },
|
||
{ key: 'order:view', name: '查看订单', desc: '查看订单列表', module: 'order', action: 'view' },
|
||
{ key: 'order:manage', name: '管理订单', desc: '管理订单', module: 'order', action: 'manage' }
|
||
];
|
||
|
||
// 插入权限数据
|
||
for (const permission of permissions) {
|
||
await sequelize.query(`
|
||
INSERT INTO permissions (permission_key, permission_name, permission_desc, module, action)
|
||
VALUES ('${permission.key}', '${permission.name}', '${permission.desc}', '${permission.module}', '${permission.action}')
|
||
ON DUPLICATE KEY UPDATE
|
||
permission_name = VALUES(permission_name),
|
||
permission_desc = VALUES(permission_desc),
|
||
module = VALUES(module),
|
||
action = VALUES(action)
|
||
`);
|
||
}
|
||
|
||
console.log(`插入了 ${permissions.length} 个权限定义`);
|
||
|
||
// 4. 为现有角色分配权限
|
||
console.log('4. 为现有角色分配权限...');
|
||
|
||
// 获取所有角色
|
||
const [roles] = await sequelize.query('SELECT id, name FROM roles');
|
||
console.log(`找到 ${roles.length} 个角色:`, roles.map(r => r.name));
|
||
|
||
// 获取所有权限
|
||
const [allPermissions] = await sequelize.query('SELECT id, permission_key FROM permissions');
|
||
const permissionMap = new Map(allPermissions.map(p => [p.permission_key, p.id]));
|
||
|
||
// 为admin角色分配所有权限
|
||
const adminRole = roles.find(r => r.name === 'admin');
|
||
if (adminRole) {
|
||
console.log(`为admin角色分配所有权限...`);
|
||
for (const permission of allPermissions) {
|
||
await sequelize.query(`
|
||
INSERT IGNORE INTO role_permissions (role_id, permission_id)
|
||
VALUES (${adminRole.id}, ${permission.id})
|
||
`);
|
||
}
|
||
console.log(`admin角色已分配 ${allPermissions.length} 个权限`);
|
||
}
|
||
|
||
// 为manager角色分配部分权限
|
||
const managerRole = roles.find(r => r.name === 'manager');
|
||
if (managerRole) {
|
||
console.log(`为manager角色分配权限...`);
|
||
const managerPermissions = [
|
||
'user:view', 'farm:view', 'farm:create', 'farm:update',
|
||
'device:view', 'device:create', 'device:update',
|
||
'animal:view', 'animal:create', 'animal:update',
|
||
'alert:view', 'alert:handle', 'analytics:view',
|
||
'monitor:view', 'map:view', 'product:view', 'order:view'
|
||
];
|
||
|
||
for (const permKey of managerPermissions) {
|
||
const permId = permissionMap.get(permKey);
|
||
if (permId) {
|
||
await sequelize.query(`
|
||
INSERT IGNORE INTO role_permissions (role_id, permission_id)
|
||
VALUES (${managerRole.id}, ${permId})
|
||
`);
|
||
}
|
||
}
|
||
console.log(`manager角色已分配 ${managerPermissions.length} 个权限`);
|
||
}
|
||
|
||
// 为operator角色分配基础权限
|
||
const operatorRole = roles.find(r => r.name === 'operator');
|
||
if (operatorRole) {
|
||
console.log(`为operator角色分配权限...`);
|
||
const operatorPermissions = [
|
||
'farm:view', 'device:view', 'animal:view',
|
||
'alert:view', 'monitor:view', 'map:view'
|
||
];
|
||
|
||
for (const permKey of operatorPermissions) {
|
||
const permId = permissionMap.get(permKey);
|
||
if (permId) {
|
||
await sequelize.query(`
|
||
INSERT IGNORE INTO role_permissions (role_id, permission_id)
|
||
VALUES (${operatorRole.id}, ${permId})
|
||
`);
|
||
}
|
||
}
|
||
console.log(`operator角色已分配 ${operatorPermissions.length} 个权限`);
|
||
}
|
||
|
||
console.log('✅ 权限管理数据库结构优化完成！');
|
||
console.log(`- 创建了permissions表，包含 ${permissions.length} 个权限定义`);
|
||
console.log(`- 优化了role_permissions表结构`);
|
||
console.log(`- 为现有角色分配了相应权限`);
|
||
|
||
} catch (error) {
|
||
console.error('❌ 优化权限管理数据库结构失败:', error);
|
||
throw error;
|
||
} finally {
|
||
process.exit(0);
|
||
}
|
||
}
|
||
|
||
optimizePermissionStructure();
|