From 0c184fd5fe15be5602546c8cc974e9c075fb816f Mon Sep 17 00:00:00 2001
From: yumoqing <yumoqing@gmail.com>
Date: Wed, 27 May 2026 16:28:35 +0800
Subject: [PATCH] feat: add load_path.py for RBAC permission registration

---
 scripts/load_path.py | 59 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 59 insertions(+)
 create mode 100644 scripts/load_path.py

diff --git a/scripts/load_path.py b/scripts/load_path.py
new file mode 100644
index 0000000..232879b
--- /dev/null
+++ b/scripts/load_path.py
@@ -0,0 +1,59 @@
+"""Generate RBAC permissions for dapi module paths.
+
+Run from Sage root with Sage venv:
+    cd ~/repos/sage && ./py3/bin/python ../dapi/scripts/load_path.py
+"""
+import os
+import sys
+import asyncio
+
+sage_root = os.environ.get('SAGE_ROOT')
+if sage_root and sage_root not in sys.path:
+    sys.path.insert(0, sage_root)
+
+from sqlor.dbpools import DBPools
+from appPublic.jsonConfig import getConfig
+from appPublic.dictObject import DictObject
+from appPublic.uniqueID import getID
+
+
+paths = [
+    ("/dapi", "logined"),
+    ("/dapi/create_apikey.ui", "logined"),
+    ("/dapi/apply_apikey.dspy", "logined"),
+    ("/dapi/copy_apikey.dspy", "logined"),
+    ("/dapi/create_apikey.dspy", "logined"),
+    ("/dapi/downapps.dspy", "logined"),
+    ("/dapi/get_apikey.dspy", "logined"),
+    ("/dapi/jumpin.dspy", "logined"),
+]
+
+
+async def main():
+    config = getConfig('.')
+    DBPools(config.databases)
+    dbname = 'sage'
+    async with DBPools().sqlorContext(dbname) as sor:
+        cnt = 0
+        for path, role in paths:
+            r = await sor.sqlExe(
+                'select * from permission where permcode = ${permcode}$',
+                {'permcode': path}
+            )
+            if len(r) == 0:
+                await sor.sqlExe(
+                    '''insert into permission (id, permcode, permname, permtype)
+                       values (${id}$, ${permcode}$, ${permname}$, ${permtype}$)''',
+                    {
+                        'id': getID(),
+                        'permcode': path,
+                        'permname': path,
+                        'permtype': role,
+                    }
+                )
+                cnt += 1
+        print(f'{cnt} path(s) inserted for dapi')
+
+
+if __name__ == '__main__':
+    asyncio.run(main())