hms/crates/erp-server/migration/src/m20260501_000097_seed_menu_permissions.rs

//! 为菜单种子数据关联权限码 + 补全缺失菜单项

use sea_orm_migration::prelude::*;

#[derive(DeriveMigrationName)]
pub struct Migration;

#[async_trait::async_trait]
impl MigrationTrait for Migration {
    async fn up(&self, manager: &SchemaManager) -> Result<(), DbErr> {
        let db = manager.get_connection();

        // === 更新已有菜单的 permission 字段 ===

        // 健康管理菜单
        update_perm(db, "b0000003-0000-0000-0000-000000000002", "health.patient.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000003", "health.doctor.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000004", "health.appointment.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000005", "health.appointment.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000006", "health.follow-up.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000007", "health.consultation.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000008", "health.patient.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000009", "health.points.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000010", "health.points.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000011", "health.points.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000012", "health.points.list").await?;
        // AI 模块菜单
        update_perm(db, "b0000003-0000-0000-0000-000000000013", "ai.prompt.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000014", "ai.analysis.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000015", "ai.usage.list").await?;
        // 告警菜单
        update_perm(db, "b0000003-0000-0000-0000-000000000016", "health.alerts.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000017", "health.alerts.list").await?;
        update_perm(db, "b0000003-0000-0000-0000-000000000018", "health.alert-rules.list").await?;
        // 设备菜单
        update_perm(db, "b0000003-0000-0000-0000-000000000019", "health.devices.list").await?;

        // === 补全缺失菜单 ===

        let result = db.query_one(sea_orm::Statement::from_string(
            sea_orm::DatabaseBackend::Postgres,
            "SELECT id::text FROM tenant LIMIT 1".to_string(),
        ))
        .await?;

        let tid = match result {
            Some(row) => row.try_get_by_index::<String>(0).unwrap_or_default(),
            None => return Ok(()),
        };

        let sys = "00000000-0000-0000-0000-000000000000";
        let d3 = "a0000000-0000-0000-0000-000000000003"; // 健康管理目录

        // 透析管理（sort 19）
        insert_menu_with_perm(db, &tid, d3, "b0000003-0000-0000-0000-000000000020", "透析管理", "/health/dialysis", "ExperimentOutlined", 19, "health.dialysis.list", sys).await?;
        // 资讯管理（sort 20）
        insert_menu_with_perm(db, &tid, d3, "b0000003-0000-0000-0000-000000000021", "资讯管理", "/health/articles", "ReadOutlined", 20, "health.articles.list", sys).await?;

        Ok(())
    }

    async fn down(&self, manager: &SchemaManager) -> Result<(), DbErr> {
        let db = manager.get_connection();

        // 清除所有菜单的 permission
        db.execute(sea_orm::Statement::from_string(
            sea_orm::DatabaseBackend::Postgres,
            "UPDATE menus SET permission = NULL WHERE deleted_at IS NULL".to_string(),
        ))
        .await?;

        // 删除新增菜单
        for id in &[
            "b0000003-0000-0000-0000-000000000020",
            "b0000003-0000-0000-0000-000000000021",
        ] {
            db.execute(sea_orm::Statement::from_string(
                sea_orm::DatabaseBackend::Postgres,
                format!("DELETE FROM menus WHERE id = '{id}'"),
            ))
            .await
            .ok();
        }

        Ok(())
    }
}

async fn update_perm(
    db: &sea_orm_migration::SchemaManagerConnection<'_>,
    menu_id: &str,
    permission: &str,
) -> Result<(), DbErr> {
    db.execute(sea_orm::Statement::from_string(
        sea_orm::DatabaseBackend::Postgres,
        format!(
            "UPDATE menus SET permission = '{permission}', updated_at = NOW() \
             WHERE id = '{menu_id}' AND deleted_at IS NULL"
        ),
    ))
    .await?;
    Ok(())
}

async fn insert_menu_with_perm(
    db: &sea_orm_migration::SchemaManagerConnection<'_>,
    tenant_id: &str,
    parent_id: &str,
    id: &str,
    title: &str,
    path: &str,
    icon: &str,
    sort: i32,
    permission: &str,
    sys: &str,
) -> Result<(), DbErr> {
    let esc_title = title.replace('\'', "''");
    db.execute(sea_orm::Statement::from_string(
        sea_orm::DatabaseBackend::Postgres,
        format!(
            "INSERT INTO menus (id, tenant_id, parent_id, title, path, icon, sort_order, visible, menu_type, permission, created_at, updated_at, created_by, updated_by, deleted_at, version) \
             VALUES ('{id}', '{tenant_id}', '{parent_id}', '{esc_title}', '{path}', '{icon}', {sort}, true, 'menu', '{permission}', NOW(), NOW(), '{sys}', '{sys}', NULL, 1) \
             ON CONFLICT (id) DO UPDATE SET permission = EXCLUDED.permission, updated_at = NOW()"
        ),
    ))
    .await?;
    Ok(())
}