- 新增 user_departments 关联表(migration + entity) - JWT 中间件查询用户部门并注入 TenantContext.department_ids - role_permission entity 添加 data_scope 字段 - data_handler 接线行级数据权限过滤(list/count/aggregate) - DataScopeParams + build_scope_sql + merge_scope_condition 实现全链路
54 lines
1.4 KiB
Rust
54 lines
1.4 KiB
Rust
use sea_orm::entity::prelude::*;
|
|
use serde::{Deserialize, Serialize};
|
|
|
|
#[derive(Clone, Debug, PartialEq, DeriveEntityModel, Serialize, Deserialize)]
|
|
#[sea_orm(table_name = "role_permissions")]
|
|
pub struct Model {
|
|
#[sea_orm(primary_key, auto_increment = false)]
|
|
pub role_id: Uuid,
|
|
#[sea_orm(primary_key, auto_increment = false)]
|
|
pub permission_id: Uuid,
|
|
pub tenant_id: Uuid,
|
|
/// 行级数据权限范围: all, self, department, department_tree
|
|
pub data_scope: String,
|
|
pub created_at: DateTimeUtc,
|
|
pub updated_at: DateTimeUtc,
|
|
pub created_by: Uuid,
|
|
pub updated_by: Uuid,
|
|
#[serde(skip_serializing_if = "Option::is_none")]
|
|
pub deleted_at: Option<DateTimeUtc>,
|
|
pub version: i32,
|
|
}
|
|
|
|
#[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
|
|
pub enum Relation {
|
|
#[sea_orm(
|
|
belongs_to = "super::role::Entity",
|
|
from = "Column::RoleId",
|
|
to = "super::role::Column::Id",
|
|
on_delete = "Cascade"
|
|
)]
|
|
Role,
|
|
#[sea_orm(
|
|
belongs_to = "super::permission::Entity",
|
|
from = "Column::PermissionId",
|
|
to = "super::permission::Column::Id",
|
|
on_delete = "Cascade"
|
|
)]
|
|
Permission,
|
|
}
|
|
|
|
impl Related<super::role::Entity> for Entity {
|
|
fn to() -> RelationDef {
|
|
Relation::Role.def()
|
|
}
|
|
}
|
|
|
|
impl Related<super::permission::Entity> for Entity {
|
|
fn to() -> RelationDef {
|
|
Relation::Permission.def()
|
|
}
|
|
}
|
|
|
|
impl ActiveModelBehavior for ActiveModel {}
|