chore: 1.3 部署文档,菜单、角色权限
author刘洪青 <hongqing.liu@supwisdom.com>
Mon, 18 Oct 2021 14:32:16 +0000 (22:32 +0800)
committer刘洪青 <hongqing.liu@supwisdom.com>
Mon, 18 Oct 2021 14:32:16 +0000 (22:32 +0800)
deploy-manifests/charts/1.3.0002.认证授权-云平台数据初始化(菜单、角色权限).md [new file with mode: 0644]

diff --git a/deploy-manifests/charts/1.3.0002.认证授权-云平台数据初始化(菜单、角色权限).md b/deploy-manifests/charts/1.3.0002.认证授权-云平台数据初始化(菜单、角色权限).md
new file mode 100644 (file)
index 0000000..df47c64
--- /dev/null
@@ -0,0 +1,166 @@
+
+# 认证授权-云平台数据初始化
+
+
+[TOC]
+
+
+## 文档说明
+
+
+
+## 操作指南
+
+**请仔细阅读文档后,再进行操作**
+
+本文档中的各部分操作,只须 选择其中一种方式处理即可
+
+
+## 初始化数据
+
+
+
+### 创建菜单
+
+#### 方式一,手动导入
+
+进入 云平台 - 基础管理 - 菜单管理,导入
+
+所属应用 选择 用户授权
+
+菜单列表(JSON)如下,(复制后粘贴)
+
+**将 origin 修改为正确的 学校域名**
+
+* 授权管理
+
+```json
+[
+  {
+    "id": "41100", "parentIdOrCode":"40000", "code": "accountAuthorizationAudit", "name": "账号授权审计", "memo": "", "status": "1", 
+    "icon": "su-icon-zhsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/accountAuthorizationAudit", "target": "", 
+    "order": 41100, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41200", "parentIdOrCode":"40000", "code": "userAudit", "name": "用户规则权限审计", "memo": "", "status": "1", 
+    "icon": "su-icon-yhgzqxsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAudit", "target": "", 
+    "order": 41200, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41300", "parentIdOrCode":"40000", "code": "rolePermissionAudit", "name": "角色授权审计", "memo": "", "status": "1", 
+    "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/rolePermissionAudits", "target": "", 
+    "order": 41300, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41350", "parentIdOrCode":"40000", "code": "roleGroupPermissionAudit", "name": "角色组授权审计", "memo": "", "status": "1", 
+    "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/roleGroupPermissionAudit", "target": "", 
+    "order": 41350, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41400", "parentIdOrCode":"40000", "code": "authOperationsAudit", "name": "权限操作审计", "memo": "", "status": "1", 
+    "icon": "su-icon-qxczsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authOperationsAudit", "target": "", 
+    "order": 41400, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41500", "parentIdOrCode":"40000", "code": "authStatisticalMonitor", "name": "授权统计监控", "memo": "", "status": "1", 
+    "icon": "su-icon-sqtjjk", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authStatisticalMonitor", "target": "", 
+    "order": 41500, "resourceIdOrCodes": []
+  }
+]
+```
+
+
+#### 方式二,bash脚本
+
+* 认证管理
+
+```bash
+curl -i -s -X POST "http://admin-platform-admin-center-sa.admin-platform.svc.cluster.local:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \
+-d \
+'
+{
+  "applicationId": "10",
+  "menuList": 
+    [
+      {
+        "id": "41100", "parentIdOrCode":"40000", "code": "accountAuthorizationAudit", "name": "账号授权审计", "memo": "", "status": "1", 
+        "icon": "su-icon-zhsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/accountAuthorizationAudit", "target": "", 
+        "order": 41100, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41200", "parentIdOrCode":"40000", "code": "userAudit", "name": "用户规则权限审计", "memo": "", "status": "1", 
+        "icon": "su-icon-yhgzqxsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAudit", "target": "", 
+        "order": 41200, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41300", "parentIdOrCode":"40000", "code": "rolePermissionAudit", "name": "角色授权审计", "memo": "", "status": "1", 
+        "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/rolePermissionAudits", "target": "", 
+        "order": 41300, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41350", "parentIdOrCode":"40000", "code": "roleGroupPermissionAudit", "name": "角色组授权审计", "memo": "", "status": "1", 
+        "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/roleGroupPermissionAudit", "target": "", 
+        "order": 41350, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41400", "parentIdOrCode":"40000", "code": "authOperationsAudit", "name": "权限操作审计", "memo": "", "status": "1", 
+        "icon": "su-icon-qxczsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authOperationsAudit", "target": "", 
+        "order": 41400, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41500", "parentIdOrCode":"40000", "code": "authStatisticalMonitor", "name": "授权统计监控", "memo": "", "status": "1", 
+        "icon": "su-icon-sqtjjk", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authStatisticalMonitor", "target": "", 
+        "order": 41500, "resourceIdOrCodes": []
+      }
+    ]
+}
+'
+```
+
+
+### 关联角色权限
+
+角色由授权服务进行初始化
+
+
+#### 方式一,手动导入(暂不支持)
+
+进入 云平台 - 基础管理 - 角色权限,导入
+
+角色权限(JSON)如下,(复制后粘贴)
+
+```json
+[
+  {
+    "roleId": "40", "roleCode":"user-authz-admin", 
+    "permissionIdOrCodes": ["41100", "41200", "41300", "41350", "41400", "41500"]
+  }
+]
+```
+
+
+#### 方式二,bash脚本
+
+```bash
+curl -i -s -X POST "http://admin-platform-admin-center-sa.admin-platform.svc.cluster.local:8080/v1/admin/rolePermissions/importRolePermission" -H 'Content-Type: application/json' \
+-d \
+'
+{
+  "roleCodeIdMap": {
+    "cas-admin": "20",
+    "user-admin": "30",
+    "user-authz-admin": "40",
+    "user-authz-grant-admin": "41",
+    "user-authz-man-grant-admin": "42"
+  },
+  "rolePermissionList": 
+    [
+      {
+        "roleCode":"user-authz-admin", 
+        "permissionIdOrCodes": ["41100", "41200", "41300", "41350", "41400", "41500"]
+      }
+    ]
+}
+'
+```
+