#!/usr/bin/env python3 """ pricing 模块 RBAC 权限管理脚本 """ import subprocess, os, sys def find_sage_root(): for c in [os.path.expanduser("~/repos/sage"), os.path.expanduser("~/sage"), os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))]: if os.path.isdir(os.path.join(c, "py3")) and os.path.isdir(os.path.join(c, "wwwroot")): return c return None SAGE_ROOT = find_sage_root() if not SAGE_ROOT: print("ERROR: Cannot find Sage root directory"); sys.exit(1) PYTHON = os.path.join(SAGE_ROOT, "py3", "bin", "python") SET_PERM_SCRIPT = os.path.join(SAGE_ROOT, "set_role_perm.py") MOD = "pricing" PATHS_ANY = [f"/{MOD}/menu.ui"] PATHS_LOGINED = [ f"/{MOD}", f"/{MOD}/index.ui", f"/{MOD}/load_pricing_data.ui", f"/{MOD}/pricing_test.ui", f"/{MOD}/test_pricing_program.ui", f"/{MOD}/pricing_data_display.ui", f"/{MOD}/download_pricing_data.dspy", f"/{MOD}/download_pricing_pattern.dspy", f"/{MOD}/get_all_pricing_programs.dspy", f"/{MOD}/get_platform_providers.dspy", f"/{MOD}/test_pricing_program.dspy", f"/{MOD}/upload_pricing_data.dspy", f"/{MOD}/api/get_pricing_display.dspy", f"/{MOD}/api/add_pricing_program_timing.dspy", ] # CRUD aliases for alias in ["pricing_program", "pricing_program_list", "pricing_program_timing", "pricing_program_timing_list"]: tbl = alias.replace("_list", "") PATHS_LOGINED += [ f"/{MOD}/{alias}", f"/{MOD}/{alias}/index.ui", f"/{MOD}/{alias}/get_{tbl}.dspy", f"/{MOD}/{alias}/add_{tbl}.dspy", f"/{MOD}/{alias}/update_{tbl}.dspy", f"/{MOD}/{alias}/delete_{tbl}.dspy", ] def run_set_perm(role, path): return subprocess.run([PYTHON, SET_PERM_SCRIPT, role, path], capture_output=True, text=True).returncode == 0 def register_role_paths(role, paths): count = sum(1 for p in paths if run_set_perm(role, p)) print(f" {role}: {count}/{len(paths)} paths registered") return count def main(): print(f"Sage root: {SAGE_ROOT}") total = register_role_paths("any", PATHS_ANY) total += register_role_paths("logined", PATHS_LOGINED) print(f"\nDone. Total {total} permission entries registered.") print("NOTE: Restart Sage after permission changes to reload RBAC cache.") if __name__ == "__main__": main()