39 lines
1.6 KiB
SQL
39 lines
1.6 KiB
SQL
-- ============================================================
|
||
-- KTV Pipeline v1 API RBAC 权限配置
|
||
-- 新增 /v1/pipeline/submit 端点权限
|
||
-- ============================================================
|
||
|
||
-- 权限路径（供 load_path.py 或不直接支持的模块参考）
|
||
-- 目录级
|
||
-- /llmage/v1/pipeline logined
|
||
-- /llmage/v1/pipeline/submit logined
|
||
-- 文件级
|
||
-- /llmage/v1/pipeline/submit/index.dspy logined
|
||
|
||
-- ============================================================
|
||
-- Customer 角色权限（API调用者需要）
|
||
-- ============================================================
|
||
INSERT INTO permission (id, path, name)
|
||
SELECT REPLACE(UUID(), '-', ''), '/llmage/v1/pipeline/submit/index.dspy', 'KTV流水线提交'
|
||
WHERE NOT EXISTS (
|
||
SELECT 1 FROM permission WHERE path = '/llmage/v1/pipeline/submit/index.dspy'
|
||
);
|
||
|
||
-- 为 customer.admin 和 customer.user 角色授予权限
|
||
-- 注意：以下语句依赖 set_role_perm.py 或等效的角色-权限关联表
|
||
-- 如果用的是直接 role_permission 表：
|
||
INSERT IGNORE INTO role_permission (role_id, permission_id)
|
||
SELECT r.id, p.id
|
||
FROM role r, permission p
|
||
WHERE r.name IN ('customer.admin', 'customer.user')
|
||
AND p.path = '/llmage/v1/pipeline/submit/index.dspy';
|
||
|
||
-- ============================================================
|
||
-- 管理角色权限
|
||
-- ============================================================
|
||
INSERT IGNORE INTO role_permission (role_id, permission_id)
|
||
SELECT r.id, p.id
|
||
FROM role r, permission p
|
||
WHERE r.name IN ('owner.superuser', 'owner.admin', 'reseller.admin', 'reseller.operator')
|
||
AND p.path = '/llmage/v1/pipeline/submit/index.dspy';
|