- build.sh四处清单(mv/pip install/xls2ui/软链)删pipeline_dist - app/pipeline_app.py删import+load_pipeline_dist() - conf/config.json删module_dbname条目; conf/rp.json删/pipeline_dist两条 - bin/init_perms.py删分销管理访问权限; scripts/load_path.py删3条RBAC路径 - scripts/merge_i18n.py删MODULES条目; wwwroot/index.ui删分销管理菜单项 - deploy/smoke/cases.json删s09营销产线壳用例 - i18n源+产物删5词条(分销商产线配置/分销商管理/分销管理/2条描述语) - wwwroot/pipeline_dist软链删除(git跟踪) - deploy/migrations/m0020登记DROP两表+清码表+清权限(破坏性,dmig拒绝自动执行,人工复核手工跑;测试机两表0行) - supplychain的sub_distributor*权限/表不受影响(path前缀与表名均不同)
72 lines
1.8 KiB
JSON
72 lines
1.8 KiB
JSON
{
|
||
"_comment": "pipeline-app RBAC 权限定义(r:p 数据)。角色 -> 路径模式。路径模式:精确匹配 /pipeline-sdlc/index.ui;前缀匹配 /product_management/** 或 /pricing/%(匹配该前缀下所有路径)。由 scripts/import_rp.py 导入 permission + rolepermission 表。",
|
||
"roles": {
|
||
"any": [
|
||
"/rbac/user/login.ui",
|
||
"/rbac/user/up_login.dspy",
|
||
"/rbac/user/userpassword_login.dspy",
|
||
"/rbac/user/userpassword_login.ui",
|
||
"/rbac/phone_login.dspy",
|
||
"/rbac/gen_sms_code.dspy",
|
||
"/rbac/qr_scan.ui",
|
||
"/rbac/user/logout.dspy",
|
||
"/rbac/usermenu.ui",
|
||
"/i18n_getmsgs",
|
||
"/appbase/menu.ui",
|
||
"/product_management/menu.ui",
|
||
"/discount/menu.ui",
|
||
"/pricing/menu.ui",
|
||
"/unipay/usermenu.ui",
|
||
"/univer-office",
|
||
"/univer-office/**",
|
||
"/accounting/api/fetch_forex_rates.dspy",
|
||
"/accounting/api/dayend.dspy"
|
||
],
|
||
"logined": [
|
||
"/idfile",
|
||
"/idfile/**",
|
||
"/download",
|
||
"/download/**",
|
||
"/pipeline-sdlc",
|
||
"/pipeline-sdlc/**",
|
||
"/product_management",
|
||
"/product_management/**",
|
||
"/discount",
|
||
"/discount/**",
|
||
"/pricing",
|
||
"/pricing/**",
|
||
"/unipay",
|
||
"/unipay/**",
|
||
"/appbase",
|
||
"/appbase/**",
|
||
"/showcase",
|
||
"/showcase/**",
|
||
"/tenant",
|
||
"/tenant/**",
|
||
"/pipeline_core",
|
||
"/pipeline_core/**",
|
||
"/mine.ui",
|
||
"/pipeline_ops",
|
||
"/pipeline_ops/**",
|
||
"/pipeline_task",
|
||
"/pipeline_task/**",
|
||
"/app_audit",
|
||
"/app_audit/**",
|
||
"/office",
|
||
"/office/**",
|
||
"/accounting",
|
||
"/accounting/**",
|
||
"/pipeline-llm",
|
||
"/pipeline-llm/**",
|
||
"/rag",
|
||
"/rag/",
|
||
"/rag/**"
|
||
],
|
||
"owner.superuser": [
|
||
"/rbac",
|
||
"/rbac/**",
|
||
"/dapi",
|
||
"/dapi/**"
|
||
]
|
||
}
|
||
} |