916d0891f1
1. 在 RoleSeeder 中註冊分析管理的 4 個子權限（零錢庫存、機台報表、商品報表、問卷分析），並僅指派「商品報表」權限給租戶管理員模板。
2. 在 PermissionController 與視圖 (role-list, role-card) 的 activeModules 白名單中加入 menu.analysis，使數據分析大項能正常被撈取與顯示。
3. 修改 sidebar-menu.blade.php，用 @can 防護數據分析子選單；修改 web.php 為 4 個分析路由掛載 middleware('can:...') 路由防護。
4. 補全 zh_TW.json、en.json、ja.json 翻譯檔案中關於 4 個新分析權限的金鑰與翻譯文字。
5. 修復 2026_05_11_163543_add_missing_types_to_machine_stock_movements_table.php 歷史 migration 以相容 SQLite 測試。
6. 新增 AnalysisPermissionTest.php 測試案例並於本地測試通過，保證多租戶與 RBAC 架構之權限隔離與防越權機制 100% 正確運作。
128 lines
4.3 KiB
PHP
128 lines
4.3 KiB
PHP
<?php
|
|
|
|
namespace Database\Seeders;
|
|
|
|
use Illuminate\Database\Seeder;
|
|
use App\Models\System\Role;
|
|
use Spatie\Permission\Models\Permission;
|
|
use Illuminate\Support\Facades\Schema;
|
|
|
|
class RoleSeeder extends Seeder
|
|
{
|
|
/**
|
|
* Run the database seeds.
|
|
*/
|
|
public function run(): void
|
|
{
|
|
// 重設快取
|
|
app()[\Spatie\Permission\PermissionRegistrar::class]->forgetCachedPermissions();
|
|
|
|
// 建立權限
|
|
$permissions = [
|
|
'menu.members',
|
|
'menu.machines',
|
|
'menu.machines.list',
|
|
'menu.machines.permissions',
|
|
'menu.machines.utilization',
|
|
'menu.machines.maintenance',
|
|
'menu.app',
|
|
'menu.warehouses',
|
|
'menu.warehouses.overview',
|
|
'menu.warehouses.inventory',
|
|
'menu.warehouses.transfers',
|
|
'menu.warehouses.replenishments',
|
|
'menu.warehouses.machine-inventory',
|
|
'menu.sales',
|
|
'menu.sales.records',
|
|
'menu.sales.pickup-codes',
|
|
'menu.sales.orders',
|
|
'menu.sales.promotions',
|
|
'menu.sales.pass-codes',
|
|
'menu.sales.store-gifts',
|
|
'menu.analysis',
|
|
'menu.analysis.change-stock',
|
|
'menu.analysis.machine-reports',
|
|
'menu.analysis.product-reports',
|
|
'menu.analysis.survey-analysis',
|
|
'menu.audit',
|
|
'menu.data-config',
|
|
'menu.data-config.products',
|
|
'menu.data-config.advertisements',
|
|
'menu.data-config.sub-accounts',
|
|
'menu.data-config.points',
|
|
'menu.data-config.badges',
|
|
'menu.remote',
|
|
'menu.remote.stock',
|
|
'menu.remote.commands',
|
|
'menu.line',
|
|
'menu.reservation',
|
|
'menu.special-permission',
|
|
'menu.special-permission.clear-stock',
|
|
'menu.special-permission.apk-versions',
|
|
'menu.special-permission.discord-notifications',
|
|
'menu.basic',
|
|
'menu.basic.machines',
|
|
'menu.basic.payment-configs',
|
|
'menu.permissions',
|
|
'menu.permissions.companies',
|
|
'menu.permissions.accounts',
|
|
'menu.permissions.roles',
|
|
];
|
|
|
|
foreach ($permissions as $permission) {
|
|
Permission::updateOrCreate(['name' => $permission, 'guard_name' => 'web']);
|
|
}
|
|
|
|
// 建立角色
|
|
$superAdmin = Role::updateOrCreate(
|
|
['name' => 'super-admin', 'company_id' => null],
|
|
['is_system' => true, 'guard_name' => 'web']
|
|
);
|
|
$superAdmin->syncPermissions(Permission::all());
|
|
|
|
$tenantAdmin = Role::updateOrCreate(
|
|
['name' => '客戶管理員角色模板', 'company_id' => null],
|
|
['is_system' => true, 'guard_name' => 'web']
|
|
);
|
|
$tenantAdmin->syncPermissions([
|
|
'menu.members',
|
|
'menu.machines',
|
|
'menu.machines.list',
|
|
'menu.machines.permissions',
|
|
'menu.machines.utilization',
|
|
'menu.machines.maintenance',
|
|
'menu.app',
|
|
'menu.warehouses',
|
|
'menu.warehouses.overview',
|
|
'menu.warehouses.inventory',
|
|
'menu.warehouses.transfers',
|
|
'menu.warehouses.replenishments',
|
|
'menu.warehouses.machine-inventory',
|
|
'menu.sales',
|
|
'menu.sales.records',
|
|
'menu.sales.pickup-codes',
|
|
'menu.sales.orders',
|
|
'menu.sales.promotions',
|
|
'menu.sales.pass-codes',
|
|
'menu.sales.store-gifts',
|
|
'menu.analysis',
|
|
'menu.analysis.product-reports',
|
|
'menu.audit',
|
|
'menu.data-config',
|
|
'menu.data-config.products',
|
|
'menu.data-config.advertisements',
|
|
'menu.data-config.sub-accounts',
|
|
'menu.data-config.points',
|
|
'menu.data-config.badges',
|
|
'menu.remote',
|
|
'menu.remote.stock',
|
|
'menu.remote.commands',
|
|
'menu.line',
|
|
'menu.reservation',
|
|
'menu.special-permission',
|
|
'menu.special-permission.clear-stock',
|
|
'menu.special-permission.apk-versions',
|
|
'menu.special-permission.discord-notifications',
|
|
]);
|
|
}
|
|
} |