star-cloud/database/seeders/RoleSeeder.php
sky121113 7ceb7644f0 [FIX] 統一基本設定權限機制並清除冗餘特殊權限
1. 修正 RoleSeeder.php:移除了預設分配給客戶管理員角色模板的 menu.basic.discord-notifications 與 menu.basic.apk-versions 權限,使其運作機制與機台設定、金流設定完全一致,預設不分配且避免部署時被強制重灌。
2. 清除冗餘權限:從 Seeder 權限宣告中移除專案未引用的 menu.special-permission.apk-versions 與 menu.special-permission.discord-notifications。
3. 語系檔對齊整理:自 zh_TW.json, en.json, ja.json 中刪除冗餘的特殊權限翻譯 Key,並重新按字母排序(ksort)且還原斜線。
4. 修正單元測試:調整 DiscordNotificationSecurityTest.php,在 setUp 中為測試角色手動指派基本通知權限以通過 Gate 檢查,成功修正測試案例。
2026-06-04 13:01:49 +08:00

126 lines
4.1 KiB
PHP

<?php
namespace Database\Seeders;
use Illuminate\Database\Seeder;
use App\Models\System\Role;
use Spatie\Permission\Models\Permission;
use Illuminate\Support\Facades\Schema;
class RoleSeeder extends Seeder
{
/**
* Run the database seeds.
*/
public function run(): void
{
// 重設快取
app()[\Spatie\Permission\PermissionRegistrar::class]->forgetCachedPermissions();
// 建立權限
$permissions = [
'menu.members',
'menu.machines',
'menu.machines.list',
'menu.machines.permissions',
'menu.machines.utilization',
'menu.machines.maintenance',
'menu.app',
'menu.warehouses',
'menu.warehouses.overview',
'menu.warehouses.inventory',
'menu.warehouses.transfers',
'menu.warehouses.replenishments',
'menu.warehouses.machine-inventory',
'menu.sales',
'menu.sales.records',
'menu.sales.pickup-codes',
'menu.sales.orders',
'menu.sales.promotions',
'menu.sales.pass-codes',
'menu.sales.store-gifts',
'menu.analysis',
'menu.analysis.change-stock',
'menu.analysis.machine-reports',
'menu.analysis.product-reports',
'menu.analysis.survey-analysis',
'menu.audit',
'menu.data-config',
'menu.data-config.products',
'menu.data-config.advertisements',
'menu.data-config.sub-accounts',
'menu.data-config.points',
'menu.data-config.badges',
'menu.remote',
'menu.remote.stock',
'menu.remote.commands',
'menu.line',
'menu.reservation',
'menu.special-permission',
'menu.special-permission.clear-stock',
'menu.basic',
'menu.basic.machines',
'menu.basic.payment-configs',
'menu.basic.discord-notifications',
'menu.basic.apk-versions',
'menu.permissions',
'menu.permissions.companies',
'menu.permissions.accounts',
'menu.permissions.roles',
];
foreach ($permissions as $permission) {
Permission::updateOrCreate(['name' => $permission, 'guard_name' => 'web']);
}
// 建立角色
$superAdmin = Role::updateOrCreate(
['name' => 'super-admin', 'company_id' => null],
['is_system' => true, 'guard_name' => 'web']
);
$superAdmin->syncPermissions(Permission::all());
$tenantAdmin = Role::updateOrCreate(
['name' => '客戶管理員角色模板', 'company_id' => null],
['is_system' => true, 'guard_name' => 'web']
);
$tenantAdmin->syncPermissions([
'menu.members',
'menu.machines',
'menu.machines.list',
'menu.machines.permissions',
'menu.machines.utilization',
'menu.machines.maintenance',
'menu.app',
'menu.warehouses',
'menu.warehouses.overview',
'menu.warehouses.inventory',
'menu.warehouses.transfers',
'menu.warehouses.replenishments',
'menu.warehouses.machine-inventory',
'menu.sales',
'menu.sales.records',
'menu.sales.pickup-codes',
'menu.sales.orders',
'menu.sales.promotions',
'menu.sales.pass-codes',
'menu.sales.store-gifts',
'menu.analysis',
'menu.analysis.product-reports',
'menu.audit',
'menu.data-config',
'menu.data-config.products',
'menu.data-config.advertisements',
'menu.data-config.sub-accounts',
'menu.data-config.points',
'menu.data-config.badges',
'menu.remote',
'menu.remote.stock',
'menu.remote.commands',
'menu.line',
'menu.reservation',
'menu.special-permission',
'menu.special-permission.clear-stock',
]);
}
}