Tree: a263f1736c

master

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'a263f1736c'

${ noResults }

Commit Graph

3 Commits (a263f1736cb02356eb518a7dbe368cb2db4a971e)

Author	SHA1	Message	Date
luoweijian	a263f1736c	feat(auth): role management — ancestor completion, CRUD, permission assignment, cascade delete (ADR-0012) Implements ADR-0005 (backend ancestor completion) and ADR-0012 (role management architecture) across 5 tracer-bullet tickets: - ISysMenuService.getAncestorIds: batch query full table, in-memory parentId traversal, returns complete ancestor set (ADR-0005) - SysRole.builtin field + DataInitializer idempotent refactor + 5 button permission seeds (crm:role:list/detail/save/delete/assign) bound to ADMIN - RoleController (/api/roles/*): page, saveOrUpdate, detail, assign-resources, delete — pure hasAuthority, POST + action suffix, form params - SysRoleServiceImpl.saveRole: roleCode uniqueness, builtin protection, dataScope 1-4 range, create can't set builtin=true - assignResources: calls getAncestorIds for ancestor completion, then full replacement (delete + insert) of sys_role_menu - getRoleDetail: returns RoleDetailVO with basic info + resourceIds - deleteRoleCascade: cleans sys_role_menu + sys_user_role, builtin rejection, three-table transaction - SystemController: all role endpoints removed, unused deps cleaned - Dead code removed: assignMenus, getMenuIdsByRoleId (superseded by assignResources, getRoleDetail) - H2 test schemas updated with builtin column - 150 tests pass (16 new in SysRoleServiceImplTest, 7 in SysMenuServiceImplTest)	1 month ago
luoweijian	b38ab9ec94	feat(auth): 动态权限拦截 + 封遗留写路径 基于 apiUrl 的动态权限拦截机制（fail-open，Ant 风格匹配）： - ApiPermissionCache：Caffeine 缓存 button 节点 apiUrl→perms 规则 - ApiPermissionInterceptor：HandlerInterceptor 匹配 URL 校验 authority - ApiPermissionRule：pattern→perms 映射 record - WebMvcConfig：注册拦截器 /api/** - ResourceServiceImpl：save/delete 后触发缓存失效 封遗留写路径 + 收拢 Mapper 到 Service 层： - 删除 /menus/save 和 /menus/delete（ResourceController 已覆盖） - ISysRoleService.assignMenus() + deleteRoleCascade() 事务保护 - IAuthUserService.assignRoles() 事务保护 - SystemController 不再持有 SysRoleMenuMapper/SysUserRoleMapper 测试：ApiPermissionInterceptorTest 7 个 + ResourceServiceImplTest 缓存失效验证	1 month ago
luoweijian	6329a6ba74	first-commit	1 month ago