83 lines
4.3 KiB
Python
83 lines
4.3 KiB
Python
# -*- coding: utf-8 -*-
|
|
"""Seed default permissions and role-permission bindings into existing DB."""
|
|
import sqlite3
|
|
from datetime import datetime
|
|
|
|
DB_PATH = 'data/user_management.db'
|
|
conn = sqlite3.connect(DB_PATH)
|
|
cur = conn.cursor()
|
|
|
|
permissions = [
|
|
('User List', 'user:list', 2, 'List users', '/api/v1/users', 'GET', 10),
|
|
('View User', 'user:view', 2, 'View user detail', '/api/v1/users/:id', 'GET', 11),
|
|
('Edit User', 'user:edit', 2, 'Edit user info', '/api/v1/users/:id', 'PUT', 12),
|
|
('Delete User', 'user:delete', 2, 'Delete user', '/api/v1/users/:id', 'DELETE', 13),
|
|
('Manage User', 'user:manage', 2, 'Manage user status', '/api/v1/users/:id/status', 'PUT', 14),
|
|
('View Profile', 'profile:view', 2, 'View own profile', '/api/v1/auth/userinfo', 'GET', 20),
|
|
('Edit Profile', 'profile:edit', 2, 'Edit own profile', '/api/v1/users/:id', 'PUT', 21),
|
|
('Change Pwd', 'profile:change_password', 2, 'Change password', '/api/v1/users/:id/password', 'PUT', 22),
|
|
('Role Manage', 'role:manage', 2, 'Manage roles', '/api/v1/roles', 'GET', 30),
|
|
('Create Role', 'role:create', 2, 'Create role', '/api/v1/roles', 'POST', 31),
|
|
('Edit Role', 'role:edit', 2, 'Edit role', '/api/v1/roles/:id', 'PUT', 32),
|
|
('Delete Role', 'role:delete', 2, 'Delete role', '/api/v1/roles/:id', 'DELETE', 33),
|
|
('Perm Manage', 'permission:manage', 2, 'Manage permissions', '/api/v1/permissions', 'GET', 40),
|
|
('View Own Log', 'log:view_own', 2, 'View own login log', '/api/v1/logs/login/me', 'GET', 50),
|
|
('View All Logs', 'log:view_all', 2, 'View all logs (admin)','/api/v1/logs/login', 'GET', 51),
|
|
('Dashboard', 'stats:view', 2, 'View dashboard stats','/api/v1/admin/stats/dashboard','GET', 60),
|
|
('Device Manage', 'device:manage', 2, 'Manage devices', '/api/v1/devices', 'GET', 70),
|
|
]
|
|
|
|
now = datetime.now().strftime('%Y-%m-%d %H:%M:%S')
|
|
perm_ids = {}
|
|
|
|
for name, code, ptype, desc, path, method, sort in permissions:
|
|
cur.execute('SELECT id FROM permissions WHERE code=?', (code,))
|
|
row = cur.fetchone()
|
|
if row:
|
|
perm_ids[code] = row[0]
|
|
print(f' skip existing: {code}')
|
|
else:
|
|
cur.execute(
|
|
'INSERT INTO permissions(name,code,type,description,level,path,method,sort,status,created_at,updated_at) VALUES(?,?,?,?,1,?,?,?,1,?,?)',
|
|
(name, code, ptype, desc, path, method, sort, now, now)
|
|
)
|
|
perm_ids[code] = cur.lastrowid
|
|
print(f' created: {code}')
|
|
|
|
conn.commit()
|
|
|
|
# Admin role: bind all permissions
|
|
cur.execute('SELECT id FROM roles WHERE code=?', ('admin',))
|
|
admin_role = cur.fetchone()
|
|
if admin_role:
|
|
rid = admin_role[0]
|
|
for code, pid in perm_ids.items():
|
|
cur.execute('SELECT 1 FROM role_permissions WHERE role_id=? AND permission_id=?', (rid, pid))
|
|
if not cur.fetchone():
|
|
cur.execute('INSERT INTO role_permissions(role_id,permission_id) VALUES(?,?)', (rid, pid))
|
|
conn.commit()
|
|
print(f'Admin role {rid}: bound {len(perm_ids)} permissions')
|
|
|
|
# User role: bind basic permissions
|
|
cur.execute('SELECT id FROM roles WHERE code=?', ('user',))
|
|
user_role = cur.fetchone()
|
|
if user_role:
|
|
rid = user_role[0]
|
|
for code in ['profile:view', 'profile:edit', 'log:view_own']:
|
|
pid = perm_ids.get(code)
|
|
if pid:
|
|
cur.execute('SELECT 1 FROM role_permissions WHERE role_id=? AND permission_id=?', (rid, pid))
|
|
if not cur.fetchone():
|
|
cur.execute('INSERT INTO role_permissions(role_id,permission_id) VALUES(?,?)', (rid, pid))
|
|
conn.commit()
|
|
print(f'User role {rid}: bound 3 base permissions')
|
|
|
|
# Summary
|
|
cur.execute('SELECT COUNT(*) FROM permissions')
|
|
print(f'\nTotal permissions: {cur.fetchone()[0]}')
|
|
cur.execute('SELECT COUNT(*) FROM role_permissions')
|
|
print(f'Total role_permissions: {cur.fetchone()[0]}')
|
|
|
|
conn.close()
|
|
print('Done.')
|