fix: 对齐运维页面原型并收口权限边界
- 删除模型大类概览和细分银行概览中原型未包含的过渡跳转按钮,保留卡片点击、筛选、指标趋势和详情入口。 - 移除运维系统配置页中的模型平台新增页面依赖、登录角色来源等内部说明,仅保留实际配置内容。 - 将开发工作台访问控制统一收敛到 dashboard:view,业务团队仅保留运维工作台权限;直接访问开发工作台时自动回到运维工作台。 - 补充架构实现基线、外部写入协议、运维 API 清单、三角色权限验收说明和首条纵向链路联调手册。 - 按当前实现更新架构变更记录和本周目标完成情况。
This commit is contained in:
@@ -81,7 +81,6 @@ SELECT r.role_id, p.permission_id
|
||||
FROM roles AS r
|
||||
JOIN permissions AS p
|
||||
ON p.permission_code IN (
|
||||
'dashboard:view',
|
||||
'operations:workbench:view',
|
||||
'operations:model-overview:view',
|
||||
'operations:bank-overview:view',
|
||||
@@ -103,6 +102,16 @@ ON DUPLICATE KEY UPDATE
|
||||
is_deleted = 0,
|
||||
deleted_at = NULL;
|
||||
|
||||
-- 矩阵修正:业务团队只进入运维工作台,不允许进入开发工作台。
|
||||
UPDATE role_permissions AS rp
|
||||
JOIN roles AS r ON r.role_id = rp.role_id
|
||||
JOIN permissions AS p ON p.permission_id = rp.permission_id
|
||||
SET rp.is_deleted = 1,
|
||||
rp.deleted_at = CURRENT_TIMESTAMP(3)
|
||||
WHERE r.role_code = 'business_team'
|
||||
AND p.permission_code = 'dashboard:view'
|
||||
AND rp.is_deleted = 0;
|
||||
|
||||
-- 模型团队:developer 角色对应模型团队。
|
||||
INSERT INTO role_permissions (role_id, permission_id)
|
||||
SELECT r.role_id, p.permission_id
|
||||
|
||||
Reference in New Issue
Block a user