feat(admin): complete integration of auth, delivery, and system infrastructure modules
This commit is contained in:
17
docs/sql/20_rls/auth/ak_auth_rls_v1.sql
Normal file
17
docs/sql/20_rls/auth/ak_auth_rls_v1.sql
Normal file
@@ -0,0 +1,17 @@
|
||||
-- =====================================================================================
|
||||
-- RLS: 权限管理 (Auth) 安全策略
|
||||
-- 位置:docs/sql/20_rls/auth/ak_auth_rls_v1.sql
|
||||
-- 对象类型:RLS 策略
|
||||
-- 版本:v1
|
||||
-- 说明:角色与权限表默认不对外开放,全量管理通过 SECURITY DEFINER RPC 执行
|
||||
-- =====================================================================================
|
||||
|
||||
-- 启用 RLS
|
||||
ALTER TABLE public.ak_roles ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE public.ak_permissions ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE public.ak_admin_roles ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE public.ak_role_permissions ENABLE ROW LEVEL SECURITY;
|
||||
|
||||
-- 默认策略:NO DIRECT ACCESS
|
||||
-- 所有的查询和修改均建议通过 docs/sql/30_rpc/auth/ 下的专用管理接口完成
|
||||
-- 这样可以确保鉴权逻辑与 ak_users.role 强制绑定,且具备审计能力
|
||||
Reference in New Issue
Block a user