luoweijian
/
crm-backend-matt
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
101 Commits
1 Branch
0 Tags
403 MiB
Tree: 94effd1ce5
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '94effd1ce5'
${ noResults }
crm-backend-matt/.scratch/unified-resource-tree/issues/04-icon-upload.md

14 lines
865 B
Raw Normal View History

feat(auth): role management — ancestor completion, CRUD, permission assignment, cascade delete (ADR-0012) Implements ADR-0005 (backend ancestor completion) and ADR-0012 (role management architecture) across 5 tracer-bullet tickets: - ISysMenuService.getAncestorIds: batch query full table, in-memory parentId traversal, returns complete ancestor set (ADR-0005) - SysRole.builtin field + DataInitializer idempotent refactor + 5 button permission seeds (crm:role:list/detail/save/delete/assign) bound to ADMIN - RoleController (/api/roles/*): page, saveOrUpdate, detail, assign-resources, delete — pure hasAuthority, POST + action suffix, form params - SysRoleServiceImpl.saveRole: roleCode uniqueness, builtin protection, dataScope 1-4 range, create can't set builtin=true - assignResources: calls getAncestorIds for ancestor completion, then full replacement (delete + insert) of sys_role_menu - getRoleDetail: returns RoleDetailVO with basic info + resourceIds - deleteRoleCascade: cleans sys_role_menu + sys_user_role, builtin rejection, three-table transaction - SystemController: all role endpoints removed, unused deps cleaned - Dead code removed: assignMenus, getMenuIdsByRoleId (superseded by assignResources, getRoleDetail) - H2 test schemas updated with builtin column - 150 tests pass (16 new in SysRoleServiceImplTest, 7 in SysMenuServiceImplTest)
1 month ago
# 04 — 图标上传
**What to build:** `POST /api/resources/icon/upload`（multipart/form-data）接收图片文件，校验格式（png/jpg/gif/svg/webp）和大小（≤500KB），调 crm-file 模块的 `FileApi` 上传到 MinIO，返回可访问的预览 URL。前端将 URL 写入节点的 `icon` 字段。不合法的文件返回明确错误信息。
**Blocked by:** 01（需要 SysMenu icon 字段 + 依赖 crm-file 的 FileApi 接口可用）。
**Status:** ready-for-agent
- [ ] `POST /api/resources/icon/upload`，参数 `file`（multipart）
- [ ] 格式校验：拒绝非 png/jpg/gif/svg/webp 扩展名，返回错误
- [ ] 大小校验：拒绝超过 500KB 的文件，返回错误
- [ ] 调用 `FileApi` 上传，返回 `{ "url": "https://..." }`
- [ ] TDD 测试覆盖：合法图片上传成功返回 URL、非法格式拒绝、超大小拒绝