-- ============================================================
-- Shiro 权限初始化 —— 抖音商品(同步 / 查询 / 绑定套餐)
-- 数据库: PostgreSQL (park_bike, system_* 系列表)
-- 作者  : rk
-- 日期  : 2026-06-25
-- 说明  :
--   1) 本脚本【幂等】,可重复执行,不产生重复权限或重复授权。
--   2) Shiro 的 @RequiresPermissions 匹配 system_permission.code。
--   3) 抖音【验券】类接口为 web 端使用(JWT 鉴权),不走 Shiro,
--      故不在此处登记权限。
--   4) 默认授权给超管角色 id = 1;若不同请替换。菜单(system_menu)另行配置。
-- ============================================================


-- ------------------------------------------------------------
-- 一、抖音商品权限定义(system_permission)
-- ------------------------------------------------------------

INSERT INTO system_permission (code, name, remark, fixed, deleted, create_time, update_time)
SELECT 'business:douyinProduct:sync', '抖音商品-同步', '从抖音同步团购商品到本地', 0, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
WHERE NOT EXISTS (SELECT 1 FROM system_permission WHERE code = 'business:douyinProduct:sync' AND deleted = 0);

INSERT INTO system_permission (code, name, remark, fixed, deleted, create_time, update_time)
SELECT 'business:douyinProduct:query', '抖音商品-查询', '抖音商品分页/详情/联调测试查询', 0, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
WHERE NOT EXISTS (SELECT 1 FROM system_permission WHERE code = 'business:douyinProduct:query' AND deleted = 0);

INSERT INTO system_permission (code, name, remark, fixed, deleted, create_time, update_time)
SELECT 'business:douyinProduct:bind', '抖音商品-绑定套餐', '将抖音商品 out_id 绑定本地套餐(discount.id),空值解绑', 0, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
WHERE NOT EXISTS (SELECT 1 FROM system_permission WHERE code = 'business:douyinProduct:bind' AND deleted = 0);


-- ------------------------------------------------------------
-- 二、授权给超级管理员角色(system_role_permission,默认 id = 1)
-- ------------------------------------------------------------

INSERT INTO system_role_permission (role_id, permission_id, deleted, create_time, update_time)
SELECT 1 AS role_id, p.id AS permission_id, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
FROM system_permission p
WHERE p.deleted = 0
  AND p.code IN (
       'business:douyinProduct:sync',
       'business:douyinProduct:query',
       'business:douyinProduct:bind'
  )
  AND NOT EXISTS (
       SELECT 1 FROM system_role_permission rp
       WHERE rp.role_id = 1 AND rp.permission_id = p.id AND rp.deleted = 0
  );


-- ============================================================
-- 附:给【其它角色】授权的模板(按需取消注释使用)
-- ------------------------------------------------------------
-- INSERT INTO system_role_permission (role_id, permission_id, deleted, create_time, update_time)
-- SELECT r.id, p.id, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
-- FROM system_permission p
-- CROSS JOIN system_role r
-- WHERE p.deleted = 0
--   AND r.deleted = 0
--   AND r.name LIKE '%运营%'                  -- ← 改成目标角色名关键字
--   AND p.code LIKE 'business:douyinProduct%'
--   AND NOT EXISTS (
--        SELECT 1 FROM system_role_permission rp
--        WHERE rp.role_id = r.id AND rp.permission_id = p.id AND rp.deleted = 0
--   );
-- ============================================================


-- ============================================================
-- 数据报表(概览 / 收入车型分析 / 收入统计)—— 不登记权限点
-- 作者  : rk
-- 日期  : 2026-06-26
-- 说明  :
--   1) 数据报表接口由 web 端(JWT)迁移至 platform 端(/business/report/*)。
--   2) 【配置约定】报表类为只读统计,不做菜单/按钮级权限限制:
--      Controller 上不挂 @RequiresPermissions,仅受 Shiro authc 登录校验保护,
--      任何登录后台的账号均可访问;故不登记 system_permission 权限点,
--      也不写 system_role_permission 授权。
--   3) 如日后需要细粒度权限,再于此追加 business:report:query 定义并授权。
-- ============================================================


-- ============================================================
-- 抖音券核销(管理端:核销记录分页 / 撤销核销)
-- 作者  : rk
-- 日期  : 2026-06-26
-- 说明  :
--   1) 撤销核销由 web 端(/web/douyin/cancel,JWT)迁移至 platform 端(/business/douyinVerify/cancel,Shiro)。
--   2) 核销记录对外分页 /business/douyinVerify/page 亦在 platform 端。
--   3) 幂等登记 query/cancel 两个权限点,默认授权超管 role_id = 1。
-- ============================================================

INSERT INTO system_permission (code, name, remark, fixed, deleted, create_time, update_time)
SELECT 'business:douyinVerify:query', '抖音核销-查询', '抖音券核销记录对外分页查询', 0, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
WHERE NOT EXISTS (SELECT 1 FROM system_permission WHERE code = 'business:douyinVerify:query' AND deleted = 0);

INSERT INTO system_permission (code, name, remark, fixed, deleted, create_time, update_time)
SELECT 'business:douyinVerify:cancel', '抖音核销-撤销', '撤销抖音券核销(管理端,作废本地套餐卡)', 0, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
WHERE NOT EXISTS (SELECT 1 FROM system_permission WHERE code = 'business:douyinVerify:cancel' AND deleted = 0);

INSERT INTO system_role_permission (role_id, permission_id, deleted, create_time, update_time)
SELECT 1 AS role_id, p.id AS permission_id, 0, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
FROM system_permission p
WHERE p.deleted = 0
  AND p.code IN (
       'business:douyinVerify:query',
       'business:douyinVerify:cancel'
  )
  AND NOT EXISTS (
       SELECT 1 FROM system_role_permission rp
       WHERE rp.role_id = 1 AND rp.permission_id = p.id AND rp.deleted = 0
  );