9 Commits

Author SHA1 Message Date
af5cce0c45 bigfix 2026-05-06 08:11:39 +08:00
f901813244 revert: only add /{modulename}/{tablename} page path permission, remove CRUD API registration 2026-05-05 22:28:20 +08:00
98e1bbe96a fix: register /{module}/{table} page path for CRUD table menu items in init_permissions.py
- Menu items use url='{{entire_url('/module/table')}}' format
- init_permissions.py now registers both the page path and CRUD API endpoints
- Page path: /{module}/{table} (for menu navigation)
- API paths: /{module}/api/{table}_{list|create|update|delete}.dspy
2026-05-05 22:22:41 +08:00
010ab6e354 remove app/init_permissions.py, keep only root init_permissions.py 2026-05-05 14:17:02 +08:00
b4785d49ab fix: APP_ROOT handles both root/ and app/ script locations 2026-05-05 14:15:59 +08:00
77cdacf878 fix: correct APP_ROOT to single dirname since script is in project root 2026-05-05 14:15:32 +08:00
bec9cb956b fix: use raw SQL for user password update to avoid sor.U() generating wrong WHERE clause 2026-05-05 14:13:03 +08:00
1fc2be73c0 fix: init_permissions.py - use config.json databases for DBPools, add id for rolepermission insert
1. Replace manual DB_CONFIG with getConfig('.').databases for DBPools init
2. Add id=getID() when inserting into rolepermission table (id has no default value)
3. Sync app/ and root copies
2026-05-05 14:08:49 +08:00
1ed4ce0935 fix: RBAC permission init - remove /main prefix, include js/css files, use * wildcard
- perm_config.py: all paths no longer use /main prefix
- init_permissions.py:
  1. scan wwwroot including symlinks for .ui/.dspy/.js/.css
  2. register paths without /main prefix
  3. create admin_superuser user (super/Kyy@123456)
  4. use orgtypeid='*' for role wildcard matching
- sync app/ and root copies
2026-05-05 13:44:55 +08:00