From b6eb2fca5bbca1daf98ee37615a5584c0896c99d Mon Sep 17 00:00:00 2001 From: =?utf8?q?=E5=88=98=E6=B4=AA=E9=9D=92?= Date: Mon, 8 Mar 2021 15:12:05 +0800 Subject: [PATCH] =?utf8?q?docs:=20=E6=95=B4=E7=90=86=20=E8=AE=A4=E8=AF=81?= =?utf8?q?=E6=8E=88=E6=9D=83=E8=8F=9C=E5=8D=95=E5=88=9D=E5=A7=8B=E5=8C=96?= =?utf8?q?=20=E6=93=8D=E4=BD=9C=E8=AF=B4=E6=98=8E=E6=96=87=E6=A1=A3?= MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit --- ...11\345\210\235\345\247\213\345\214\226.md" | 667 ++++++++++++++++++ 1 file changed, 667 insertions(+) create mode 100644 "deploy-manifests/k8s-rancher/0.1.2.\350\256\244\350\257\201\346\216\210\346\235\203\350\217\234\345\215\225\357\274\210\344\272\221\345\271\263\345\217\260\345\206\205\357\274\211\345\210\235\345\247\213\345\214\226.md" diff --git "a/deploy-manifests/k8s-rancher/0.1.2.\350\256\244\350\257\201\346\216\210\346\235\203\350\217\234\345\215\225\357\274\210\344\272\221\345\271\263\345\217\260\345\206\205\357\274\211\345\210\235\345\247\213\345\214\226.md" "b/deploy-manifests/k8s-rancher/0.1.2.\350\256\244\350\257\201\346\216\210\346\235\203\350\217\234\345\215\225\357\274\210\344\272\221\345\271\263\345\217\260\345\206\205\357\274\211\345\210\235\345\247\213\345\214\226.md" new file mode 100644 index 0000000..9d87b87 --- /dev/null +++ "b/deploy-manifests/k8s-rancher/0.1.2.\350\256\244\350\257\201\346\216\210\346\235\203\350\217\234\345\215\225\357\274\210\344\272\221\345\271\263\345\217\260\345\206\205\357\274\211\345\210\235\345\247\213\345\214\226.md" @@ -0,0 +1,667 @@ + +# 认证授权菜单初始化 + + +[TOC] + + +## 文档说明 + + + +## 操作指南 + + + + +## 导入数据 + +### 应用 + +```sql +insert into TB_MGT_APPLICATION (ID, DELETED, CODE, NAME, STATUS) +values ('10', 0, '10', '认证授权', '1'); +``` + + +```json +{"id": "10", "code": "10", "name":"认证授权", "memo":"", "status":"1", "url":""} +``` + + +```bash +curl -i -s -X POST "http://admin-center-sa-svc.admin-center.svc.cluster.local:8080/v1/admin/applications" -H 'Content-Type: application/json' \ +-d \ +' +{"id": "10", "code": "10", "name":"认证授权", "memo":"", "status":"1", "url":""} +' +``` + + +### 菜单 + +* 认证管理 + +```sql +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20000', 0, 'cas-server', '认证管理', '1', '2', '', '/', '10', '1', 20000, 1, 18, 33); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20100', 0, 'loginConfig', '登录方式配置', '1', '2', 'su-icon-denglupeizhi', '/cas-server/loginConfig', '10', '20000', 20100, 2, 19, 20); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20200', 0, 'safeLoginConfig', '账号安全配置', '1', '2', 'su-icon-config-security', '/cas-server/safeLoginConfig', '10', '20000', 20200, 2, 21, 22); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20300', 0, 'accountActivationConfiguration', '账号激活配置', '1', '2', 'su-icon-bulb', '/cas-server/accountActivationConfiguration', '10', '20000', 20300, 2, 23, 24); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20400', 0, 'safeConfig', '安全策略配置', '1', '2', 'su-icon-celuepeizhi', '/cas-server/safeConfig', '10', '20000', 20400, 2, 25, 26); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20500', 0, 'passwordConfig', '密码策略配置', '1', '2', 'su-icon-mimacelue', '/cas-server/passwordConfig', '10', '20000', 20500, 2, 27, 28); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20600', 0, 'serverManagement', '应用对接配置', '1', '2', 'el-icon-service', '/cas-server/serverManagement', '10', '20000', 20600, 2, 29, 30); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20700', 0, 'loginPageConfig', '登录页面配置', '1', '2', 'su-icon-tongxunxinxi', '/cas-server/loginPageConfig', '10', '20000', 20700, 2, 29, 30); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('20800', 0, 'linkLoginConfig', '联合登录配置', '1', '2', 'su-icon-test', '/cas-server/linkLoginConfig', '10', '20000', 20800, 2, 29, 30); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('21000', 0, 'lockManagement', '认证锁定管理', '1', '2', 'su-icon-shouquanjiguanli', '/cas-server/lockManagement', '10', '20000', 21000, 2, 31, 32); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('21100', 0, 'analyze', '认证统计分析', '1', '2', 'su-icon-renzhengtongjifenxi', '/cas-server/analyze', '10', '20000', 21100, 2, 31, 32); +``` + + +```json +[ + { + "id": "20000", "parentIdOrCode":"1", "code": "cas-server", "name": "认证管理", "memo": "", "status": "1", + "icon": "", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/", "target": "", + "order": 20000, "resourceIdOrCodes": [] + }, + { + "id": "20100", "parentIdOrCode":"20000", "code": "loginConfig", "name": "登录方式配置", "memo": "", "status": "1", + "icon": "su-icon-denglupeizhi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/loginConfig", "target": "", + "order": 20100, "resourceIdOrCodes": [] + }, + { + "id": "20200", "parentIdOrCode":"20000", "code": "safeLoginConfig", "name": "账号安全配置", "memo": "", "status": "1", + "icon": "su-icon-config-security", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/safeLoginConfig", "target": "", + "order": 20200, "resourceIdOrCodes": [] + }, + { + "id": "20300", "parentIdOrCode":"20000", "code": "accountActivationConfiguration", "name": "账号激活配置", "memo": "", "status": "1", + "icon": "su-icon-bulb", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/accountActivationConfiguration", "target": "", + "order": 20300, "resourceIdOrCodes": [] + }, + { + "id": "20400", "parentIdOrCode":"20000", "code": "safeConfig", "name": "安全策略配置", "memo": "", "status": "1", + "icon": "su-icon-celuepeizhi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/safeConfig", "target": "", + "order": 20400, "resourceIdOrCodes": [] + }, + { + "id": "20500", "parentIdOrCode":"20000", "code": "passwordConfig", "name": "密码策略配置", "memo": "", "status": "1", + "icon": "su-icon-mimacelue", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/passwordConfig", "target": "", + "order": 20500, "resourceIdOrCodes": [] + }, + { + "id": "20600", "parentIdOrCode":"20000", "code": "serverManagement", "name": "应用对接配置", "memo": "", "status": "1", + "icon": "el-icon-service", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/serverManagement", "target": "", + "order": 20600, "resourceIdOrCodes": [] + }, + { + "id": "20700", "parentIdOrCode":"20000", "code": "loginPageConfig", "name": "登录页面配置", "memo": "", "status": "1", + "icon": "su-icon-tongxunxinxi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/loginPageConfig", "target": "", + "order": 20700, "resourceIdOrCodes": [] + }, + { + "id": "20800", "parentIdOrCode":"20000", "code": "linkLoginConfig", "name": "联合登录配置", "memo": "", "status": "1", + "icon": "su-icon-test", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/linkLoginConfig", "target": "", + "order": 20800, "resourceIdOrCodes": [] + }, + { + "id": "21000", "parentIdOrCode":"20000", "code": "lockManagement", "name": "认证锁定管理", "memo": "", "status": "1", + "icon": "su-icon-shouquanjiguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/lockManagement", "target": "", + "order": 21000, "resourceIdOrCodes": [] + }, + { + "id": "21100", "parentIdOrCode":"20000", "code": "analyze", "name": "认证统计分析", "memo": "", "status": "1", + "icon": "su-icon-renzhengtongjifenxi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/analyze", "target": "", + "order": 21100, "resourceIdOrCodes": [] + } +] +``` + + +```bash +curl -i -s -X POST "http://admin-center-sa-svc.admin-center.svc.cluster.local:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \ +-d \ +' +{ + "applicationId": "10", + "menuList": + [ + { + "id": "20000", "parentIdOrCode":"1", "code": "cas-server", "name": "认证管理", "memo": "", "status": "1", + "icon": "", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/", "target": "", + "order": 20000, "resourceIdOrCodes": [] + }, + { + "id": "20100", "parentIdOrCode":"20000", "code": "loginConfig", "name": "登录方式配置", "memo": "", "status": "1", + "icon": "su-icon-denglupeizhi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/loginConfig", "target": "", + "order": 20100, "resourceIdOrCodes": [] + }, + { + "id": "20200", "parentIdOrCode":"20000", "code": "safeLoginConfig", "name": "账号安全配置", "memo": "", "status": "1", + "icon": "su-icon-config-security", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/safeLoginConfig", "target": "", + "order": 20200, "resourceIdOrCodes": [] + }, + { + "id": "20300", "parentIdOrCode":"20000", "code": "accountActivationConfiguration", "name": "账号激活配置", "memo": "", "status": "1", + "icon": "su-icon-bulb", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/accountActivationConfiguration", "target": "", + "order": 20300, "resourceIdOrCodes": [] + }, + { + "id": "20400", "parentIdOrCode":"20000", "code": "safeConfig", "name": "安全策略配置", "memo": "", "status": "1", + "icon": "su-icon-celuepeizhi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/safeConfig", "target": "", + "order": 20400, "resourceIdOrCodes": [] + }, + { + "id": "20500", "parentIdOrCode":"20000", "code": "passwordConfig", "name": "密码策略配置", "memo": "", "status": "1", + "icon": "su-icon-mimacelue", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/passwordConfig", "target": "", + "order": 20500, "resourceIdOrCodes": [] + }, + { + "id": "20600", "parentIdOrCode":"20000", "code": "serverManagement", "name": "应用对接配置", "memo": "", "status": "1", + "icon": "el-icon-service", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/serverManagement", "target": "", + "order": 20600, "resourceIdOrCodes": [] + }, + { + "id": "20700", "parentIdOrCode":"20000", "code": "loginPageConfig", "name": "登录页面配置", "memo": "", "status": "1", + "icon": "su-icon-tongxunxinxi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/loginPageConfig", "target": "", + "order": 20700, "resourceIdOrCodes": [] + }, + { + "id": "20800", "parentIdOrCode":"20000", "code": "linkLoginConfig", "name": "联合登录配置", "memo": "", "status": "1", + "icon": "su-icon-test", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/linkLoginConfig", "target": "", + "order": 20800, "resourceIdOrCodes": [] + }, + { + "id": "21000", "parentIdOrCode":"20000", "code": "lockManagement", "name": "认证锁定管理", "memo": "", "status": "1", + "icon": "su-icon-shouquanjiguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/lockManagement", "target": "", + "order": 21000, "resourceIdOrCodes": [] + }, + { + "id": "21100", "parentIdOrCode":"20000", "code": "analyze", "name": "认证统计分析", "memo": "", "status": "1", + "icon": "su-icon-renzhengtongjifenxi", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/cas-server/analyze", "target": "", + "order": 21100, "resourceIdOrCodes": [] + } + ] +} +' +``` + + +* 用户管理 + +```sql + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30000', 0, 'user-server', '用户管理', '1', '2', '', '/', '10', '1', 30000, 1, 34, 53); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30100', 0, 'dictionary', '字典管理', '1', '2', 'su-icon-zidian', '/user-server/dictionary', '10', '30000', 30100, 2, 35, 36); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30200', 0, 'identity', '身份管理', '1', '2', 'su-icon-shenfen', '/user-server/identity', '10', '30000', 30200, 2, 37, 38); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30300', 0, 'mechanism', '组织机构管理', '1', '2', 'su-icon-department', '/user-server/mechanism', '10', '30000', 30300, 2, 39, 40); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30400', 0, 'person', '人员管理', '1', '2', 'su-icon-people', '/user-server/person', '10', '30000', 30400, 2, 41, 42); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30500', 0, 'label', '标签管理', '1', '2', 'su-icon-biaoqian', '/user-server/label', '10', '30000', 30500, 2, 43, 44); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30600', 0, 'simpleUserGroupManage', '普通用户组管理', '1', '2', 'su-icon-portrait', '/user-server/simpleUserGroupManage', '10', '30000', 30600, 2, 45, 46); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30700', 0, 'postUserGroupManage', '岗位用户组管理', '1', '2', 'su-icon-personnel', '/user-server/postUserGroupManage', '10', '30000', 30700, 2, 47, 48); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30750', 0, 'userScope', '用户规则', '1', '1', 'el-icon-guide', '/user-server/userScope', '1', '30000', 30750, 2, 51, 52); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('30800', 0, 'assignation', '人员分配', '1', '2', 'su-icon-tihuanbanliren', '/user-server/assignation', '10', '30000', 30800, 2, 49, 50); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('31000', 0, 'activateAccount', '账号激活审核', '1', '2', 'su-icon-yonghushouquan', '/user-server/activateAccount', '10', '30000', 31000, 2, 51, 52); + +``` + + + +```json +[ + { + "id": "30000", "parentIdOrCode":"1", "code": "user-server", "name": "用户管理", "memo": "", "status": "1", + "icon": "", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/", "target": "", + "order": 30000, "resourceIdOrCodes": [] + }, + { + "id": "30100", "parentIdOrCode":"30000", "code": "dictionary", "name": "字典管理", "memo": "", "status": "1", + "icon": "su-icon-zidian", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/dictionary", "target": "", + "order": 30100, "resourceIdOrCodes": [] + }, + { + "id": "30200", "parentIdOrCode":"30000", "code": "identity", "name": "身份管理", "memo": "", "status": "1", + "icon": "su-icon-shenfen", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/identity", "target": "", + "order": 30200, "resourceIdOrCodes": [] + }, + { + "id": "30300", "parentIdOrCode":"30000", "code": "mechanism", "name": "组织机构管理", "memo": "", "status": "1", + "icon": "su-icon-department", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/mechanism", "target": "", + "order": 30300, "resourceIdOrCodes": [] + }, + { + "id": "30400", "parentIdOrCode":"30000", "code": "person", "name": "人员管理", "memo": "", "status": "1", + "icon": "su-icon-people", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/person", "target": "", + "order": 30400, "resourceIdOrCodes": [] + }, + { + "id": "30500", "parentIdOrCode":"30000", "code": "label", "name": "标签管理", "memo": "", "status": "1", + "icon": "su-icon-biaoqian", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/label", "target": "", + "order": 30500, "resourceIdOrCodes": [] + }, + { + "id": "30600", "parentIdOrCode":"30000", "code": "simpleUserGroupManage", "name": "普通用户组管理", "memo": "", "status": "1", + "icon": "su-icon-portrait", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/simpleUserGroupManage", "target": "", + "order": 30600, "resourceIdOrCodes": [] + }, + { + "id": "30700", "parentIdOrCode":"30000", "code": "postUserGroupManage", "name": "岗位用户组管理", "memo": "", "status": "1", + "icon": "su-icon-personnel", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/postUserGroupManage", "target": "", + "order": 30700, "resourceIdOrCodes": [] + }, + { + "id": "30750", "parentIdOrCode":"30000", "code": "userScope", "name": "用户规则", "memo": "", "status": "1", + "icon": "el-icon-guide", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/userScope", "target": "", + "order": 30750, "resourceIdOrCodes": [] + }, + { + "id": "30800", "parentIdOrCode":"30000", "code": "assignation", "name": "人员分配", "memo": "", "status": "1", + "icon": "su-icon-tihuanbanliren", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/assignation", "target": "", + "order": 30800, "resourceIdOrCodes": [] + }, + { + "id": "31000", "parentIdOrCode":"30000", "code": "activateAccount", "name": "账号激活审核", "memo": "", "status": "1", + "icon": "su-icon-yonghushouquan", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/activateAccount", "target": "", + "order": 31000, "resourceIdOrCodes": [] + } +] +``` + + +```bash +curl -i -s -X POST "http://admin-center-sa-svc.admin-center.svc.cluster.local:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \ +-d \ +' +{ + "applicationId": "10", + "menuList": + [ + { + "id": "30000", "parentIdOrCode":"1", "code": "user-server", "name": "用户管理", "memo": "", "status": "1", + "icon": "", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/", "target": "", + "order": 30000, "resourceIdOrCodes": [] + }, + { + "id": "30100", "parentIdOrCode":"30000", "code": "dictionary", "name": "字典管理", "memo": "", "status": "1", + "icon": "su-icon-zidian", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/dictionary", "target": "", + "order": 30100, "resourceIdOrCodes": [] + }, + { + "id": "30200", "parentIdOrCode":"30000", "code": "identity", "name": "身份管理", "memo": "", "status": "1", + "icon": "su-icon-shenfen", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/identity", "target": "", + "order": 30200, "resourceIdOrCodes": [] + }, + { + "id": "30300", "parentIdOrCode":"30000", "code": "mechanism", "name": "组织机构管理", "memo": "", "status": "1", + "icon": "su-icon-department", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/mechanism", "target": "", + "order": 30300, "resourceIdOrCodes": [] + }, + { + "id": "30400", "parentIdOrCode":"30000", "code": "person", "name": "人员管理", "memo": "", "status": "1", + "icon": "su-icon-people", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/person", "target": "", + "order": 30400, "resourceIdOrCodes": [] + }, + { + "id": "30500", "parentIdOrCode":"30000", "code": "label", "name": "标签管理", "memo": "", "status": "1", + "icon": "su-icon-biaoqian", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/label", "target": "", + "order": 30500, "resourceIdOrCodes": [] + }, + { + "id": "30600", "parentIdOrCode":"30000", "code": "simpleUserGroupManage", "name": "普通用户组管理", "memo": "", "status": "1", + "icon": "su-icon-portrait", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/simpleUserGroupManage", "target": "", + "order": 30600, "resourceIdOrCodes": [] + }, + { + "id": "30700", "parentIdOrCode":"30000", "code": "postUserGroupManage", "name": "岗位用户组管理", "memo": "", "status": "1", + "icon": "su-icon-personnel", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/postUserGroupManage", "target": "", + "order": 30700, "resourceIdOrCodes": [] + }, + { + "id": "30750", "parentIdOrCode":"30000", "code": "userScope", "name": "用户规则", "memo": "", "status": "1", + "icon": "el-icon-guide", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/userScope", "target": "", + "order": 30750, "resourceIdOrCodes": [] + }, + { + "id": "30800", "parentIdOrCode":"30000", "code": "assignation", "name": "人员分配", "memo": "", "status": "1", + "icon": "su-icon-tihuanbanliren", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/assignation", "target": "", + "order": 30800, "resourceIdOrCodes": [] + }, + { + "id": "31000", "parentIdOrCode":"30000", "code": "activateAccount", "name": "账号激活审核", "memo": "", "status": "1", + "icon": "su-icon-yonghushouquan", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/user-server/activateAccount", "target": "", + "order": 31000, "resourceIdOrCodes": [] + } + ] +} +' +``` + + +* 授权管理 + +```sql + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('40000', 0, 'authorization-server', '授权管理', '1', '2', '', '/', '10', '1', 40000, 1, 54, 77); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('40100', 0, 'applicationRole', '角色授权', '1', '2', 'su-icon-yingyongjuese', '/auth-server/applicationRole', '10', '40000', 40100, 2, 55, 56); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('40200', 0, 'authorizationRoleComponent', '角色组授权', '1', '2', 'su-icon-juesezu', '/auth-server/authorizationRoleComponent', '10', '40000', 40200, 2, 57, 58); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('40300', 0, 'userAuthManagePeople', '用户授权', '1', '2', 'su-icon-yonghushouquan', '/auth-server/userAuthManagePeople', '10', '40000', 40300, 2, 59, 60); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('40400', 0, 'roleAuthManagement', '用户规则授权', '1', '2', 'su-icon-yonghuguize', '/auth-server/roleAuthManagement', '10', '40000', 40400, 2, 61, 62); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('40500', 0, 'userGroupAuth', '用户组授权', '1', '2', 'su-icon-yonghuguize', '/auth-server/userGroupAuth', '10', '40000', 40500, 2, 63, 64); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('40900', 0, 'authorizationAndManagement', '分级授权管理', '1', '2', 'su-icon-shouquanjiguanli', '/auth-server/authorizationAndManagement', '10', '40000', 40900, 2, 65, 66); + +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('41100', 0, 'accountAuthorizationAudit', '账号授权审计', '1', '2', 'su-icon-zhsqsj', '/auth-server/accountAuthorizationAudit', '10', '40000', 41100, 2, 67, 68); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('41200', 0, 'userAudit', '用户规则权限审计', '1', '2', 'su-icon-yhgzqxsj', '/auth-server/userAudit', '10', '40000', 41200, 2, 69, 70); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('41300', 0, 'rolePermissionAudit', '角色/组授权审计', '1', '2', 'su-icon-jszsqsj', '/auth-server/rolePermissionAudit', '10', '40000', 41300, 2, 71, 72); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('41400', 0, 'authOperationsAudit', '权限操作审计', '1', '2', 'su-icon-qxczsj', '/auth-server/authOperationsAudit', '10', '40000', 41400, 2, 73, 74); +insert into TB_MGT_PERMISSION (ID, DELETED, CODE, NAME, STATUS, TYPE_, ICON, URL, APPLICATION_ID, PARENT_ID, ORDER_, LEVEL_, LFT, RGT) +values ('41500', 0, 'authStatisticalMonitor', '授权统计监控', '1', '2', 'su-icon-sqtjjk', '/auth-server/authStatisticalMonitor', '10', '40000', 41500, 2, 75, 76); + +``` + + +```json +[ + { + "id": "40000", "parentIdOrCode":"1", "code": "authorization-server", "name": "授权管理", "memo": "", "status": "1", + "icon": "", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/", "target": "", + "order": 40000, "resourceIdOrCodes": [] + }, + { + "id": "40100", "parentIdOrCode":"40000", "code": "applicationRole", "name": "角色授权", "memo": "", "status": "1", + "icon": "su-icon-yingyongjuese", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/applicationRole", "target": "", + "order": 40100, "resourceIdOrCodes": [] + }, + { + "id": "40200", "parentIdOrCode":"40000", "code": "authorizationRoleComponent", "name": "角色组授权", "memo": "", "status": "1", + "icon": "su-icon-juesezu", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authorizationRoleComponent", "target": "", + "order": 40200, "resourceIdOrCodes": [] + }, + { + "id": "40300", "parentIdOrCode":"40000", "code": "userAuthManagePeople", "name": "用户授权", "memo": "", "status": "1", + "icon": "su-icon-yonghushouquan", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAuthManagePeople", "target": "", + "order": 40300, "resourceIdOrCodes": [] + }, + { + "id": "40400", "parentIdOrCode":"40000", "code": "roleAuthManagement", "name": "用户规则授权", "memo": "", "status": "1", + "icon": "su-icon-yonghuguize", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/roleAuthManagement", "target": "", + "order": 40400, "resourceIdOrCodes": [] + }, + { + "id": "40500", "parentIdOrCode":"40000", "code": "userGroupAuth", "name": "用户组授权", "memo": "", "status": "1", + "icon": "su-icon-yonghuguize", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userGroupAuth", "target": "", + "order": 40500, "resourceIdOrCodes": [] + }, + { + "id": "40900", "parentIdOrCode":"40000", "code": "authorizationAndManagement", "name": "分级授权管理", "memo": "", "status": "1", + "icon": "su-icon-shouquanjiguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authorizationAndManagement", "target": "", + "order": 40900, "resourceIdOrCodes": [] + }, + { + "id": "41100", "parentIdOrCode":"40000", "code": "accountAuthorizationAudit", "name": "账号授权审计", "memo": "", "status": "1", + "icon": "su-icon-zhsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/accountAuthorizationAudit", "target": "", + "order": 41100, "resourceIdOrCodes": [] + }, + { + "id": "41200", "parentIdOrCode":"40000", "code": "userAudit", "name": "用户规则权限审计", "memo": "", "status": "1", + "icon": "su-icon-yhgzqxsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAudit", "target": "", + "order": 41200, "resourceIdOrCodes": [] + }, + { + "id": "41300", "parentIdOrCode":"40000", "code": "rolePermissionAudit", "name": "角色/组授权审计", "memo": "", "status": "1", + "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/rolePermissionAudit", "target": "", + "order": 41300, "resourceIdOrCodes": [] + }, + { + "id": "41400", "parentIdOrCode":"40000", "code": "authOperationsAudit", "name": "权限操作审计", "memo": "", "status": "1", + "icon": "su-icon-qxczsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authOperationsAudit", "target": "", + "order": 41400, "resourceIdOrCodes": [] + }, + { + "id": "41500", "parentIdOrCode":"40000", "code": "authStatisticalMonitor", "name": "授权统计监控", "memo": "", "status": "1", + "icon": "su-icon-sqtjjk", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authStatisticalMonitor", "target": "", + "order": 41500, "resourceIdOrCodes": [] + } +] +``` + + +```bash +curl -i -s -X POST "http://admin-center-sa-svc.admin-center.svc.cluster.local:8080/v1/admin/menus/importMenu" -H 'Content-Type: application/json' \ +-d \ +' +{ + "applicationId": "10", + "menuList": + [ + { + "id": "40000", "parentIdOrCode":"1", "code": "authorization-server", "name": "授权管理", "memo": "", "status": "1", + "icon": "", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/", "target": "", + "order": 40000, "resourceIdOrCodes": [] + }, + { + "id": "40100", "parentIdOrCode":"40000", "code": "applicationRole", "name": "角色授权", "memo": "", "status": "1", + "icon": "su-icon-yingyongjuese", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/applicationRole", "target": "", + "order": 40100, "resourceIdOrCodes": [] + }, + { + "id": "40200", "parentIdOrCode":"40000", "code": "authorizationRoleComponent", "name": "角色组授权", "memo": "", "status": "1", + "icon": "su-icon-juesezu", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authorizationRoleComponent", "target": "", + "order": 40200, "resourceIdOrCodes": [] + }, + { + "id": "40300", "parentIdOrCode":"40000", "code": "userAuthManagePeople", "name": "用户授权", "memo": "", "status": "1", + "icon": "su-icon-yonghushouquan", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAuthManagePeople", "target": "", + "order": 40300, "resourceIdOrCodes": [] + }, + { + "id": "40400", "parentIdOrCode":"40000", "code": "roleAuthManagement", "name": "用户规则授权", "memo": "", "status": "1", + "icon": "su-icon-yonghuguize", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/roleAuthManagement", "target": "", + "order": 40400, "resourceIdOrCodes": [] + }, + { + "id": "40500", "parentIdOrCode":"40000", "code": "userGroupAuth", "name": "用户组授权", "memo": "", "status": "1", + "icon": "su-icon-yonghuguize", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userGroupAuth", "target": "", + "order": 40500, "resourceIdOrCodes": [] + }, + { + "id": "40900", "parentIdOrCode":"40000", "code": "authorizationAndManagement", "name": "分级授权管理", "memo": "", "status": "1", + "icon": "su-icon-shouquanjiguanli", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authorizationAndManagement", "target": "", + "order": 40900, "resourceIdOrCodes": [] + }, + { + "id": "41100", "parentIdOrCode":"40000", "code": "accountAuthorizationAudit", "name": "账号授权审计", "memo": "", "status": "1", + "icon": "su-icon-zhsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/accountAuthorizationAudit", "target": "", + "order": 41100, "resourceIdOrCodes": [] + }, + { + "id": "41200", "parentIdOrCode":"40000", "code": "userAudit", "name": "用户规则权限审计", "memo": "", "status": "1", + "icon": "su-icon-yhgzqxsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/userAudit", "target": "", + "order": 41200, "resourceIdOrCodes": [] + }, + { + "id": "41300", "parentIdOrCode":"40000", "code": "rolePermissionAudit", "name": "角色/组授权审计", "memo": "", "status": "1", + "icon": "su-icon-jszsqsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/rolePermissionAudit", "target": "", + "order": 41300, "resourceIdOrCodes": [] + }, + { + "id": "41400", "parentIdOrCode":"40000", "code": "authOperationsAudit", "name": "权限操作审计", "memo": "", "status": "1", + "icon": "su-icon-qxczsj", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authOperationsAudit", "target": "", + "order": 41400, "resourceIdOrCodes": [] + }, + { + "id": "41500", "parentIdOrCode":"40000", "code": "authStatisticalMonitor", "name": "授权统计监控", "memo": "", "status": "1", + "icon": "su-icon-sqtjjk", "origin": "http://admin-platform.paas.xxx.edu.cn", "url": "/auth-server/authStatisticalMonitor", "target": "", + "order": 41500, "resourceIdOrCodes": [] + } + ] +} +' +``` + + +### 角色 + +```sql + +insert into TB_MGT_ROLE (ID, DELETED, CODE, NAME, STATUS) +values ('20', 0, 'cas-admin', '认证管理员', '1'); + +insert into TB_MGT_ROLE (ID, DELETED, CODE, NAME, STATUS) +values ('30', 0, 'user-admin', '用户管理员', '1'); + +insert into TB_MGT_ROLE (ID, DELETED, CODE, NAME, STATUS) +values ('40', 0, 'user-authz-admin', '授权管理员', '1'); +insert into TB_MGT_ROLE (ID, DELETED, CODE, NAME, STATUS) +values ('41', 0, 'user-authz-use-admin', '用户授权管理员', '1'); +insert into TB_MGT_ROLE (ID, DELETED, CODE, NAME, STATUS) +values ('42', 0, 'user-authz-man-admin', '分级授权管理员', '1'); + +commit; + + +insert into TB_MGT_ROLE_PERMISSION (ID, DELETED, ROLE_ID, PERMISSION_ID) + +select CONCAT('20_', ID) as ID, 0 as DELETED, '20' as ROLE_ID, ID as PERMISSION_ID +from TB_MGT_PERMISSION +where ID like '2____' or ID='1' +; + +insert into TB_MGT_ROLE_PERMISSION (ID, DELETED, ROLE_ID, PERMISSION_ID) + +select CONCAT('30_', ID) as ID, 0 as DELETED, '30' as ROLE_ID, ID as PERMISSION_ID +from TB_MGT_PERMISSION +where ID like '3____' or ID='1' +; + +insert into TB_MGT_ROLE_PERMISSION (ID, DELETED, ROLE_ID, PERMISSION_ID) + +select CONCAT('40_', ID) as ID, 0 as DELETED, '40' as ROLE_ID, ID as PERMISSION_ID +from TB_MGT_PERMISSION +where ID like '4____' or ID='1' +; + + +insert into TB_MGT_ROLE_PERMISSION (ID, DELETED, ROLE_ID, PERMISSION_ID) + +select CONCAT('41_', ID) as ID, 0 as DELETED, '41' as ROLE_ID, ID as PERMISSION_ID +from TB_MGT_PERMISSION +where ID in ('40000', '40100', '40300', '40400', '40500') or ID='1' +; + + +insert into TB_MGT_ROLE_PERMISSION (ID, DELETED, ROLE_ID, PERMISSION_ID) + +select CONCAT('42_', ID) as ID, 0 as DELETED, '41' as ROLE_ID, ID as PERMISSION_ID +from TB_MGT_PERMISSION +where ID in ('40000', '40900') or ID='1' +; + +commit; + +``` + + +```json +[ + { + "id": "20", "code": "cas-admin", "name":"认证管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["20000", "20100", "20200", "20300", "20400", "20500", "20600", "20700", "20800", "21000", "21100"] + }, + { + "id": "30", "code": "user-admin", "name":"用户管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["30000", "30100", "30200", "30300", "30400", "30500", "30600", "30700", "30750", "30800", "31000"] + }, + { + "id": "40", "code": "user-authz-admin", "name":"授权管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["40000", "40100", "40200", "40300", "40400", "40500", "40900", "41100", "41200", "41300", "41400", "41500"] + }, + { + "id": "41", "code": "user-authz-grant-admin", "name":"用户授权管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["40000", "40100", "40300", "40400", "40500"] + }, + { + "id": "42", "code": "user-authz-man-grant-admin", "name":"分级授权管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["40000", "40900"] + } +] +``` + + +```bash +curl -i -s -X POST "http://admin-center-sa-svc.admin-center.svc.cluster.local:8080/v1/admin/roles/importRole" -H 'Content-Type: application/json' \ +-d \ +' +{ + "applicationId": "10", + "roleList": + [ + { + "id": "20", "code": "cas-admin", "name":"认证管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["20000", "20100", "20200", "20300", "20400", "20500", "20600", "20700", "20800", "21000", "21100"] + }, + { + "id": "30", "code": "user-admin", "name":"用户管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["30000", "30100", "30200", "30300", "30400", "30500", "30600", "30700", "30800", "31000"] + }, + { + "id": "40", "code": "user-authz-admin", "name":"授权管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["40000", "40100", "40200", "40300", "40400", "40500", "40900", "41100", "41200", "41300", "41400", "41500"] + }, + { + "id": "41", "code": "user-authz-grant-admin", "name":"用户授权管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["40000", "40100", "40300", "40400", "40500"] + }, + { + "id": "42", "code": "user-authz-man-grant-admin", "name":"分级授权管理员", "memo":"", "status":"1", + "permissionIdOrCodes": ["40000", "40900"] + } + ] +} +' +``` + -- 2.17.1