From 491b4c1e5528af28ef77a1b1a0ed6e9f3f39c3ab Mon Sep 17 00:00:00 2001
From: =?utf8?q?=E5=88=98=E6=B4=AA=E9=9D=92?= <hongqing.liu@supwisdom.com>
Date: Tue, 2 Nov 2021 16:35:36 +0800
Subject: [PATCH] =?utf8?q?docs:=20=E8=B0=83=E6=95=B4=E6=96=87=E6=A1=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

---
 ...62\346\235\203\351\231\220\357\274\211.md" |  67 ++++--
 ...1\243\357\274\210V1.2-V1.3\357\274\211.md" | 199 ++++++++++++++++++
 2 files changed, 249 insertions(+), 17 deletions(-)

diff --git "a/deploy-manifests/charts/1.3.0002.\350\256\244\350\257\201\346\216\210\346\235\203-\344\272\221\345\271\263\345\217\260\346\225\260\346\215\256\345\210\235\345\247\213\345\214\226\357\274\210\350\217\234\345\215\225\343\200\201\350\247\222\350\211\262\346\235\203\351\231\220\357\274\211.md" "b/deploy-manifests/charts/1.3.0002.\350\256\244\350\257\201\346\216\210\346\235\203-\344\272\221\345\271\263\345\217\260\346\225\260\346\215\256\345\210\235\345\247\213\345\214\226\357\274\210\350\217\234\345\215\225\343\200\201\350\247\222\350\211\262\346\235\203\351\231\220\357\274\211.md"
index 644d89c..c7aa703 100644
--- "a/deploy-manifests/charts/1.3.0002.\350\256\244\350\257\201\346\216\210\346\235\203-\344\272\221\345\271\263\345\217\260\346\225\260\346\215\256\345\210\235\345\247\213\345\214\226\357\274\210\350\217\234\345\215\225\343\200\201\350\247\222\350\211\262\346\235\203\351\231\220\357\274\211.md"
+++ "b/deploy-manifests/charts/1.3.0002.\350\256\244\350\257\201\346\216\210\346\235\203-\344\272\221\345\271\263\345\217\260\346\225\260\346\215\256\345\210\235\345\247\213\345\214\226\357\274\210\350\217\234\345\215\225\343\200\201\350\247\222\350\211\262\346\235\203\351\231\220\357\274\211.md"
@@ -24,13 +24,27 @@
 
 #### 方式一，手动导入
 
+**将 origin 修改为正确的 学校域名**
+
 进入 云平台 - 基础管理 - 菜单管理，导入
 
 所属应用 选择 用户授权
 
 菜单列表（JSON）如下，（复制后粘贴）
 
-**将 origin 修改为正确的 学校域名**
+
+* 认证管理
+
+```json
+[
+  {
+    "id": "22000", "parentIdOrCode":"20000", "code": "journalManage", "name": "日志管理", "memo": "", "status": "1", 
+    "icon": "su-icon-taocanguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/journalManage", "target": "", 
+    "order": 22000, "resourceIdOrCodes": []
+  }
+]
+```
+
 
 * 授权管理
 
@@ -72,10 +86,35 @@
 
 #### 方式二，bash脚本
 
+**将 origin 修改为正确的 学校域名**
+
+进入 admin-center-sa 下的 pod， 执行命令行
+
+
 * 认证管理
 
 ```bash
-curl -i -s -X POST "http://admin-platform-admin-center-sa.admin-platform.svc.cluster.local:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \
+curl -i -s -X POST "http://localhost:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \
+-d \
+'
+{
+  "applicationId": "10",
+  "menuList": 
+    [
+      {
+        "id": "22000", "parentIdOrCode":"20000", "code": "journalManage", "name": "日志管理", "memo": "", "status": "1", 
+        "icon": "su-icon-taocanguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/journalManage", "target": "", 
+        "order": 22000, "resourceIdOrCodes": []
+      }
+    ]
+}
+'
+```
+
+* 授权管理
+
+```bash
+curl -i -s -X POST "http://localhost:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \
 -d \
 '
 {
@@ -132,8 +171,12 @@ curl -i -s -X POST "http://admin-platform-admin-center-sa.admin-platform.svc.clu
 ```json
 [
   {
-    "roleId": "40", "roleCode":"user-authz-admin", 
-    "permissionIdOrCodes": ["41100", "41200", "41300", "41350", "41400", "41500"]
+    "roleId": "20", "roleCode":"cas-admin", 
+    "permissionIdOrCodes": ["1", "20000", "20100", "20200", "20300", "20400", "20500", "20600", "20700", "20800", "20900", "21000", "21100", "22000"]
+  },
+  {
+    "roleId": "40", "roleCode": "user-authz-admin", 
+    "permissionIdOrCodes": ["1", "40000", "40050", "40100", "40200", "40300", "40500", "40900", "41100", "41200", "41300", "41350", "41400", "41500"]
   }
 ]
 ```
@@ -141,8 +184,10 @@ curl -i -s -X POST "http://admin-platform-admin-center-sa.admin-platform.svc.clu
 
 #### 方式二，bash脚本
 
+进入 admin-center-sa 下的 pod， 执行命令行
+
 ```bash
-curl -i -s -X POST "http://admin-platform-admin-center-sa.admin-platform.svc.cluster.local:8080/v1/admin/rolePermissions/importRolePermission" -H 'Content-Type: application/json' \
+curl -i -s -X POST "http://localhost:8080/v1/admin/rolePermissions/importRolePermission" -H 'Content-Type: application/json' \
 -d \
 '
 {
@@ -159,21 +204,9 @@ curl -i -s -X POST "http://admin-platform-admin-center-sa.admin-platform.svc.clu
         "roleId": "20", "roleCode":"cas-admin", 
         "permissionIdOrCodes": ["1", "20000", "20100", "20200", "20300", "20400", "20500", "20600", "20700", "20800", "20900", "21000", "21100", "22000"]
       },
-      {
-        "roleId": "30", "roleCode": "user-admin", 
-        "permissionIdOrCodes": ["1", "30000", "30100", "30200", "30300", "30400", "30500", "30600", "30700", "30800", "31000"]
-      },
       {
         "roleId": "40", "roleCode": "user-authz-admin", 
         "permissionIdOrCodes": ["1", "40000", "40050", "40100", "40200", "40300", "40500", "40900", "41100", "41200", "41300", "41350", "41400", "41500"]
-      },
-      {
-        "roleId": "41", "roleCode": "user-authz-grant-admin", 
-        "permissionIdOrCodes": ["1", "40000", "40100", "40300", "40500"]
-      },
-      {
-        "roleId": "42", "roleCode": "user-authz-man-grant-admin", 
-        "permissionIdOrCodes": ["1", "40000", "40900"]
       }
     ]
 }
diff --git "a/deploy-manifests/k8s-rancher/0.1.3.\350\256\244\350\257\201\346\216\210\346\235\203\346\234\215\345\212\241\345\215\207\347\272\247\346\226\207\346\241\243\357\274\210V1.2-V1.3\357\274\211.md" "b/deploy-manifests/k8s-rancher/0.1.3.\350\256\244\350\257\201\346\216\210\346\235\203\346\234\215\345\212\241\345\215\207\347\272\247\346\226\207\346\241\243\357\274\210V1.2-V1.3\357\274\211.md"
index 6304ddf..4b0b9b7 100644
--- "a/deploy-manifests/k8s-rancher/0.1.3.\350\256\244\350\257\201\346\216\210\346\235\203\346\234\215\345\212\241\345\215\207\347\272\247\346\226\207\346\241\243\357\274\210V1.2-V1.3\357\274\211.md"
+++ "b/deploy-manifests/k8s-rancher/0.1.3.\350\256\244\350\257\201\346\216\210\346\235\203\346\234\215\345\212\241\345\215\207\347\272\247\346\226\207\346\241\243\357\274\210V1.2-V1.3\357\274\211.md"
@@ -35,3 +35,202 @@
   USER_SERVER_SPA_URL: http://admin-platform.paas.xxx.edu.cn/authx-management/user-server
   AUTH_SERVER_SPA_URL: http://admin-platform.paas.xxx.edu.cn/authx-management/auth-server
   ```
+
+
+
+## 初始化数据
+
+
+### 创建菜单
+
+#### 方式一，手动导入
+
+**将 origin 修改为正确的 学校域名**
+
+进入 云平台 - 基础管理 - 菜单管理，导入
+
+所属应用 选择 用户授权
+
+菜单列表（JSON）如下，（复制后粘贴）
+
+
+* 认证管理
+
+```json
+[
+  {
+    "id": "22000", "parentIdOrCode":"20000", "code": "journalManage", "name": "日志管理", "memo": "", "status": "1", 
+    "icon": "su-icon-taocanguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/journalManage", "target": "", 
+    "order": 22000, "resourceIdOrCodes": []
+  }
+]
+```
+
+
+* 授权管理
+
+```json
+[
+  {
+    "id": "41100", "parentIdOrCode":"40000", "code": "accountAuthorizationAudit", "name": "账号授权审计", "memo": "", "status": "1", 
+    "icon": "su-icon-zhsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/accountAuthorizationAudit", "target": "", 
+    "order": 41100, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41200", "parentIdOrCode":"40000", "code": "userAudit", "name": "用户规则权限审计", "memo": "", "status": "0", 
+    "icon": "su-icon-yhgzqxsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAudit", "target": "", 
+    "order": 41200, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41300", "parentIdOrCode":"40000", "code": "rolePermissionAudit", "name": "角色授权审计", "memo": "", "status": "1", 
+    "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/rolePermissionAudits", "target": "", 
+    "order": 41300, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41350", "parentIdOrCode":"40000", "code": "roleGroupPermissionAudit", "name": "角色组授权审计", "memo": "", "status": "1", 
+    "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/roleGroupPermissionAudit", "target": "", 
+    "order": 41350, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41400", "parentIdOrCode":"40000", "code": "authOperationsAudit", "name": "权限操作审计", "memo": "", "status": "1", 
+    "icon": "su-icon-qxczsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authOperationsAudit", "target": "", 
+    "order": 41400, "resourceIdOrCodes": []
+  },
+  {
+    "id": "41500", "parentIdOrCode":"40000", "code": "authStatisticalMonitor", "name": "授权统计监控", "memo": "", "status": "1", 
+    "icon": "su-icon-sqtjjk", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authStatisticalMonitor", "target": "", 
+    "order": 41500, "resourceIdOrCodes": []
+  }
+]
+```
+
+
+#### 方式二，bash脚本
+
+**将 origin 修改为正确的 学校域名**
+
+进入 admin-center-sa 下的 pod， 执行命令行
+
+
+* 认证管理
+
+```bash
+curl -i -s -X POST "http://localhost:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \
+-d \
+'
+{
+  "applicationId": "10",
+  "menuList": 
+    [
+      {
+        "id": "22000", "parentIdOrCode":"20000", "code": "journalManage", "name": "日志管理", "memo": "", "status": "1", 
+        "icon": "su-icon-taocanguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/journalManage", "target": "", 
+        "order": 22000, "resourceIdOrCodes": []
+      }
+    ]
+}
+'
+```
+
+* 授权管理
+
+```bash
+curl -i -s -X POST "http://localhost:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \
+-d \
+'
+{
+  "applicationId": "10",
+  "menuList": 
+    [
+      {
+        "id": "41100", "parentIdOrCode":"40000", "code": "accountAuthorizationAudit", "name": "账号授权审计", "memo": "", "status": "1", 
+        "icon": "su-icon-zhsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/accountAuthorizationAudit", "target": "", 
+        "order": 41100, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41200", "parentIdOrCode":"40000", "code": "userAudit", "name": "用户规则权限审计", "memo": "", "status": "0", 
+        "icon": "su-icon-yhgzqxsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAudit", "target": "", 
+        "order": 41200, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41300", "parentIdOrCode":"40000", "code": "rolePermissionAudit", "name": "角色授权审计", "memo": "", "status": "1", 
+        "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/rolePermissionAudits", "target": "", 
+        "order": 41300, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41350", "parentIdOrCode":"40000", "code": "roleGroupPermissionAudit", "name": "角色组授权审计", "memo": "", "status": "1", 
+        "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/roleGroupPermissionAudit", "target": "", 
+        "order": 41350, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41400", "parentIdOrCode":"40000", "code": "authOperationsAudit", "name": "权限操作审计", "memo": "", "status": "1", 
+        "icon": "su-icon-qxczsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authOperationsAudit", "target": "", 
+        "order": 41400, "resourceIdOrCodes": []
+      },
+      {
+        "id": "41500", "parentIdOrCode":"40000", "code": "authStatisticalMonitor", "name": "授权统计监控", "memo": "", "status": "1", 
+        "icon": "su-icon-sqtjjk", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authStatisticalMonitor", "target": "", 
+        "order": 41500, "resourceIdOrCodes": []
+      }
+    ]
+}
+'
+```
+
+
+### 关联角色权限
+
+角色由授权服务进行初始化
+
+
+#### 方式一，手动导入（暂不支持）
+
+进入 云平台 - 基础管理 - 角色权限，导入
+
+角色权限（JSON）如下，（复制后粘贴）
+
+```json
+[
+  {
+    "roleId": "20", "roleCode":"cas-admin", 
+    "permissionIdOrCodes": ["1", "20000", "20100", "20200", "20300", "20400", "20500", "20600", "20700", "20800", "20900", "21000", "21100", "22000"]
+  },
+  {
+    "roleId": "40", "roleCode": "user-authz-admin", 
+    "permissionIdOrCodes": ["1", "40000", "40050", "40100", "40200", "40300", "40500", "40900", "41100", "41200", "41300", "41350", "41400", "41500"]
+  }
+]
+```
+
+
+#### 方式二，bash脚本
+
+进入 admin-center-sa 下的 pod， 执行命令行
+
+```bash
+curl -i -s -X POST "http://localhost:8080/v1/admin/rolePermissions/importRolePermission" -H 'Content-Type: application/json' \
+-d \
+'
+{
+  "roleCodeIdMap": {
+    "cas-admin": "20",
+    "user-admin": "30",
+    "user-authz-admin": "40",
+    "user-authz-grant-admin": "41",
+    "user-authz-man-grant-admin": "42"
+  },
+  "rolePermissionList": 
+    [
+      {
+        "roleId": "20", "roleCode":"cas-admin", 
+        "permissionIdOrCodes": ["1", "20000", "20100", "20200", "20300", "20400", "20500", "20600", "20700", "20800", "20900", "21000", "21100", "22000"]
+      },
+      {
+        "roleId": "40", "roleCode": "user-authz-admin", 
+        "permissionIdOrCodes": ["1", "40000", "40050", "40100", "40200", "40300", "40500", "40900", "41100", "41200", "41300", "41350", "41400", "41500"]
+      }
+    ]
+}
+'
+```
+
-- 
2.17.1