Tree: 70b53de34c

master

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '70b53de34c'

${ noResults }

Commit Graph

4 Commits (70b53de34cae4045c3b5180e4733f1e07ceb6de6)

Author	SHA1	Message	Date
luoweijian	78aa9748e4	feat: 数据权限按业务模块可配（ADR-0018） 将数据权限从「单一全局档位」改造为「按业务模块分别配置档位」： - 新增 sys_data_scope_module 注册表 + sys_role_data_scope 角色×模块档位表 - @DataScope 注解新增必填 module 属性，启动时校验 code 在注册表中存在 - DataVisibility 持有 Map<String, DataScopeLevel> 替代单个 level - DataVisibilityContext.currentScope(moduleCode) 加参数取该模块的 scope - DataScopeInterceptor 顺序调换：先找表→查注解→取该模块 scope→注入 WHERE - PermissionResolverImpl 查 sys_role_data_scope 按 module_code 分组取最宽 - 删除 SysRole.dataScope 列 + 删除 DataScopeEnum.CUSTOM(5) - RoleController saveOrUpdate 用 moduleScopes JSON 替代 dataScope - 新增 GET /api/data-scope/modules 端点 - saveRoleWithScopes 原子事务（角色保存+范围全量替换同提交同回滚） - DataScopeModuleController 返回 DTO 不泄露 BaseEntity 审计字段 - 一次性迁移 SQL 脚本（单事务，CROSS JOIN 旧值，DROP 旧列） - DataInitializer 初始化 4 个内置模块 + ADMIN 每模块 ALL 档位 - 全量测试通过：crm-base 80 tests + crm-auth 153 tests	4 weeks ago
luoweijian	a263f1736c	feat(auth): role management — ancestor completion, CRUD, permission assignment, cascade delete (ADR-0012) Implements ADR-0005 (backend ancestor completion) and ADR-0012 (role management architecture) across 5 tracer-bullet tickets: - ISysMenuService.getAncestorIds: batch query full table, in-memory parentId traversal, returns complete ancestor set (ADR-0005) - SysRole.builtin field + DataInitializer idempotent refactor + 5 button permission seeds (crm:role:list/detail/save/delete/assign) bound to ADMIN - RoleController (/api/roles/*): page, saveOrUpdate, detail, assign-resources, delete — pure hasAuthority, POST + action suffix, form params - SysRoleServiceImpl.saveRole: roleCode uniqueness, builtin protection, dataScope 1-4 range, create can't set builtin=true - assignResources: calls getAncestorIds for ancestor completion, then full replacement (delete + insert) of sys_role_menu - getRoleDetail: returns RoleDetailVO with basic info + resourceIds - deleteRoleCascade: cleans sys_role_menu + sys_user_role, builtin rejection, three-table transaction - SystemController: all role endpoints removed, unused deps cleaned - Dead code removed: assignMenus, getMenuIdsByRoleId (superseded by assignResources, getRoleDetail) - H2 test schemas updated with builtin column - 150 tests pass (16 new in SysRoleServiceImplTest, 7 in SysMenuServiceImplTest)	1 month ago
luoweijian	73304b7734	commit	1 month ago
luoweijian	6329a6ba74	first-commit	1 month ago