crm-backend-matt

0 Tags

401 MiB

Author	SHA1	Message	Date
luoweijian	4a4b31d8e1	commit	4 weeks ago
luoweijian	78aa9748e4	feat: 数据权限按业务模块可配（ADR-0018）将数据权限从「单一全局档位」改造为「按业务模块分别配置档位」： - 新增 sys_data_scope_module 注册表 + sys_role_data_scope 角色×模块档位表 - @DataScope 注解新增必填 module 属性，启动时校验 code 在注册表中存在 - DataVisibility 持有 Map<String, DataScopeLevel> 替代单个 level - DataVisibilityContext.currentScope(moduleCode) 加参数取该模块的 scope - DataScopeInterceptor 顺序调换：先找表→查注解→取该模块 scope→注入 WHERE - PermissionResolverImpl 查 sys_role_data_scope 按 module_code 分组取最宽 - 删除 SysRole.dataScope 列 + 删除 DataScopeEnum.CUSTOM(5) - RoleController saveOrUpdate 用 moduleScopes JSON 替代 dataScope - 新增 GET /api/data-scope/modules 端点 - saveRoleWithScopes 原子事务（角色保存+范围全量替换同提交同回滚） - DataScopeModuleController 返回 DTO 不泄露 BaseEntity 审计字段 - 一次性迁移 SQL 脚本（单事务，CROSS JOIN 旧值，DROP 旧列） - DataInitializer 初始化 4 个内置模块 + ADMIN 每模块 ALL 档位 - 全量测试通过：crm-base 80 tests + crm-auth 153 tests	4 weeks ago
luoweijian	ef7ad8e368	refactor: RoleController IO to RoleDTO/RoleParam, sink paging into service (ADR-0017 ticket 06) - rename RoleDetailVO -> RoleDTO extending BaseDTO, add toEntity() - new RoleParam extends BaseParam; page() now uses PageConverter (size clamp + orderBy anti-injection), fixing pagination bypass - saveOrUpdate 6 @RequestParam -> RoleDTO; detail returns RoleDTO - add PageConverterTest covering size clamp + orderBy injection guard	4 weeks ago
luoweijian	ae103a1f1c	refactor: BaseDTO 重构为 abstract 基类 + IBaseService 清理死代码 (ADR-0017 ticket 01) - BaseDTO 改为 abstract，仅保留 id/createTime/updateTime（均加 @JsonInclude NON_NULL） - 移除 creatorId/updaterId/deleted 字段及默认值——防止出参侧泄露 - 移除泛型 toEntity(Supplier) 方法——转换方法下沉到各 DTO 类 - IBaseService 删除 saveDTO/updateDTO 死代码（零调用方） - BeanCopyUtils javadoc 同步更新（移除 BaseDTO.toEntity 引用） - README §3/§4/§10 同步更新 BaseDTO 和 IBaseService 说明 - 修复 ResourceController/RoleController 预存 UTF-8 BOM 问题 - 新增 ADR-0017、spec.md、7 个 implementation tickets Refs: ADR-0017, .scratch/controller-io-conventions/	4 weeks ago
luoweijian	a263f1736c	feat(auth): role management — ancestor completion, CRUD, permission assignment, cascade delete (ADR-0012) Implements ADR-0005 (backend ancestor completion) and ADR-0012 (role management architecture) across 5 tracer-bullet tickets: - ISysMenuService.getAncestorIds: batch query full table, in-memory parentId traversal, returns complete ancestor set (ADR-0005) - SysRole.builtin field + DataInitializer idempotent refactor + 5 button permission seeds (crm:role:list/detail/save/delete/assign) bound to ADMIN - RoleController (/api/roles/*): page, saveOrUpdate, detail, assign-resources, delete — pure hasAuthority, POST + action suffix, form params - SysRoleServiceImpl.saveRole: roleCode uniqueness, builtin protection, dataScope 1-4 range, create can't set builtin=true - assignResources: calls getAncestorIds for ancestor completion, then full replacement (delete + insert) of sys_role_menu - getRoleDetail: returns RoleDetailVO with basic info + resourceIds - deleteRoleCascade: cleans sys_role_menu + sys_user_role, builtin rejection, three-table transaction - SystemController: all role endpoints removed, unused deps cleaned - Dead code removed: assignMenus, getMenuIdsByRoleId (superseded by assignResources, getRoleDetail) - H2 test schemas updated with builtin column - 150 tests pass (16 new in SysRoleServiceImplTest, 7 in SysMenuServiceImplTest)	1 month ago

1 Commits (70b53de34cae4045c3b5180e4733f1e07ceb6de6)