Initial commit of akmon project
This commit is contained in:
237
dev_open_permissions.sql
Normal file
237
dev_open_permissions.sql
Normal file
@@ -0,0 +1,237 @@
|
||||
-- =====================================================
|
||||
-- 快速开放消息系统所有权限（开发模式）
|
||||
-- 适用于开发/测试环境的一键权限开放
|
||||
-- ⚠️ 生产环境严禁使用！
|
||||
-- =====================================================
|
||||
|
||||
-- 确保所有消息表启用RLS
|
||||
ALTER TABLE IF EXISTS public.ak_message_types ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE IF EXISTS public.ak_messages ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE IF EXISTS public.ak_message_recipients ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE IF EXISTS public.ak_message_groups ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE IF EXISTS public.ak_message_group_members ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE IF EXISTS public.ak_message_templates ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE IF EXISTS public.ak_user_message_preferences ENABLE ROW LEVEL SECURITY;
|
||||
ALTER TABLE IF EXISTS public.ak_message_stats ENABLE ROW LEVEL SECURITY;
|
||||
|
||||
-- =============================================================================
|
||||
-- 一键清理所有限制性策略并创建开放策略
|
||||
-- =============================================================================
|
||||
|
||||
DO $$
|
||||
DECLARE
|
||||
table_names TEXT[] := ARRAY[
|
||||
'ak_message_types', 'ak_messages', 'ak_message_recipients',
|
||||
'ak_message_groups', 'ak_message_group_members', 'ak_message_templates',
|
||||
'ak_user_message_preferences', 'ak_message_stats'
|
||||
];
|
||||
table_name TEXT;
|
||||
r RECORD;
|
||||
BEGIN
|
||||
RAISE NOTICE '🔓 开始设置开发权限模式...';
|
||||
|
||||
-- 清理现有策略
|
||||
FOREACH table_name IN ARRAY table_names LOOP
|
||||
-- 删除该表的所有策略
|
||||
FOR r IN
|
||||
SELECT policyname
|
||||
FROM pg_policies
|
||||
WHERE schemaname = 'public' AND tablename = table_name
|
||||
LOOP
|
||||
EXECUTE format('DROP POLICY IF EXISTS %I ON public.%I', r.policyname, table_name);
|
||||
END LOOP;
|
||||
|
||||
-- 创建开放策略
|
||||
EXECUTE format('
|
||||
CREATE POLICY "dev_open_access_%s" ON public.%I
|
||||
FOR ALL USING (auth.role() = ''authenticated'')
|
||||
WITH CHECK (auth.role() = ''authenticated'')
|
||||
', replace(table_name, 'ak_', ''), table_name);
|
||||
|
||||
RAISE NOTICE '✅ 已为表 % 设置开放权限', table_name;
|
||||
END LOOP;
|
||||
|
||||
RAISE NOTICE '🎉 开发权限模式设置完成！';
|
||||
RAISE NOTICE '⚠️ 所有已认证用户现在可以完全操作消息系统';
|
||||
RAISE NOTICE '📝 记住：这仅适用于开发/测试环境！';
|
||||
END $$;
|
||||
|
||||
-- =============================================================================
|
||||
-- 创建开发便捷函数
|
||||
-- =============================================================================
|
||||
|
||||
-- 快速发送消息
|
||||
CREATE OR REPLACE FUNCTION public.dev_send_message(
|
||||
p_title TEXT,
|
||||
p_content TEXT,
|
||||
p_to_user_id UUID,
|
||||
p_type_name TEXT DEFAULT 'notification'
|
||||
)
|
||||
RETURNS UUID
|
||||
LANGUAGE plpgsql
|
||||
SECURITY DEFINER
|
||||
AS $$
|
||||
DECLARE
|
||||
v_message_id UUID;
|
||||
v_type_id UUID;
|
||||
v_sender_id UUID := auth.uid();
|
||||
BEGIN
|
||||
-- 获取或创建消息类型
|
||||
SELECT id INTO v_type_id
|
||||
FROM public.ak_message_types
|
||||
WHERE type_name = p_type_name;
|
||||
|
||||
IF v_type_id IS NULL THEN
|
||||
INSERT INTO public.ak_message_types (type_name, display_name, is_active)
|
||||
VALUES (p_type_name, initcap(p_type_name), true)
|
||||
RETURNING id INTO v_type_id;
|
||||
END IF;
|
||||
|
||||
-- 创建消息
|
||||
INSERT INTO public.ak_messages (
|
||||
message_type_id, sender_type, sender_id, receiver_type, receiver_id,
|
||||
title, content, status, created_by
|
||||
) VALUES (
|
||||
v_type_id, 'user', v_sender_id, 'user', p_to_user_id,
|
||||
p_title, p_content, 'sent', v_sender_id
|
||||
) RETURNING id INTO v_message_id;
|
||||
|
||||
-- 创建接收记录
|
||||
INSERT INTO public.ak_message_recipients (
|
||||
message_id, user_id, status, created_by
|
||||
) VALUES (
|
||||
v_message_id, p_to_user_id, 'unread', v_sender_id
|
||||
);
|
||||
|
||||
RETURN v_message_id;
|
||||
END $$;
|
||||
|
||||
-- 快速创建群组
|
||||
CREATE OR REPLACE FUNCTION public.dev_create_group(
|
||||
p_name TEXT,
|
||||
p_description TEXT DEFAULT '',
|
||||
p_is_public BOOLEAN DEFAULT true
|
||||
)
|
||||
RETURNS UUID
|
||||
LANGUAGE plpgsql
|
||||
SECURITY DEFINER
|
||||
AS $$
|
||||
DECLARE
|
||||
v_group_id UUID;
|
||||
v_creator_id UUID := auth.uid();
|
||||
BEGIN
|
||||
INSERT INTO public.ak_message_groups (
|
||||
name, description, is_public, status, created_by
|
||||
) VALUES (
|
||||
p_name, p_description, p_is_public, 'active', v_creator_id
|
||||
) RETURNING id INTO v_group_id;
|
||||
|
||||
-- 添加创建者为群主
|
||||
INSERT INTO public.ak_message_group_members (
|
||||
group_id, user_id, role, status, joined_at, created_by
|
||||
) VALUES (
|
||||
v_group_id, v_creator_id, 'owner', 'active', NOW(), v_creator_id
|
||||
);
|
||||
|
||||
RETURN v_group_id;
|
||||
END $$;
|
||||
|
||||
-- 快速添加群组成员
|
||||
CREATE OR REPLACE FUNCTION public.dev_add_to_group(
|
||||
p_group_id UUID,
|
||||
p_user_id UUID,
|
||||
p_role TEXT DEFAULT 'member'
|
||||
)
|
||||
RETURNS BOOLEAN
|
||||
LANGUAGE plpgsql
|
||||
SECURITY DEFINER
|
||||
AS $$
|
||||
BEGIN
|
||||
INSERT INTO public.ak_message_group_members (
|
||||
group_id, user_id, role, status, joined_at, created_by
|
||||
) VALUES (
|
||||
p_group_id, p_user_id, p_role, 'active', NOW(), auth.uid()
|
||||
) ON CONFLICT (group_id, user_id) DO UPDATE SET
|
||||
status = 'active',
|
||||
role = EXCLUDED.role,
|
||||
joined_at = NOW();
|
||||
|
||||
RETURN true;
|
||||
END $$;
|
||||
|
||||
-- 开发数据查看函数
|
||||
CREATE OR REPLACE FUNCTION public.dev_show_my_messages()
|
||||
RETURNS TABLE (
|
||||
message_id UUID,
|
||||
title TEXT,
|
||||
content TEXT,
|
||||
sender_name TEXT,
|
||||
created_at TIMESTAMPTZ,
|
||||
status TEXT
|
||||
)
|
||||
LANGUAGE plpgsql
|
||||
SECURITY DEFINER
|
||||
AS $$
|
||||
BEGIN
|
||||
RETURN QUERY
|
||||
SELECT
|
||||
m.id,
|
||||
m.title,
|
||||
m.content,
|
||||
COALESCE('User-' || m.sender_id::TEXT, 'System') as sender_name,
|
||||
m.created_at,
|
||||
COALESCE(mr.status, m.status) as message_status
|
||||
FROM public.ak_messages m
|
||||
LEFT JOIN public.ak_message_recipients mr ON m.id = mr.message_id AND mr.user_id = auth.uid()
|
||||
WHERE m.receiver_id = auth.uid() OR mr.user_id = auth.uid()
|
||||
ORDER BY m.created_at DESC;
|
||||
END $$;
|
||||
|
||||
-- =============================================================================
|
||||
-- 验证开发模式设置
|
||||
-- =============================================================================
|
||||
|
||||
DO $$
|
||||
DECLARE
|
||||
policy_count INTEGER;
|
||||
function_count INTEGER;
|
||||
BEGIN
|
||||
-- 检查策略
|
||||
SELECT COUNT(*) INTO policy_count
|
||||
FROM pg_policies
|
||||
WHERE schemaname = 'public'
|
||||
AND policyname LIKE 'dev_open_access_%';
|
||||
|
||||
-- 检查函数
|
||||
SELECT COUNT(*) INTO function_count
|
||||
FROM information_schema.routines
|
||||
WHERE routine_schema = 'public'
|
||||
AND routine_name LIKE 'dev_%';
|
||||
|
||||
RAISE NOTICE '📊 开发模式统计:';
|
||||
RAISE NOTICE ' - 开放策略: % 个', policy_count;
|
||||
RAISE NOTICE ' - 便捷函数: % 个', function_count;
|
||||
|
||||
IF policy_count >= 8 THEN
|
||||
RAISE NOTICE '🎯 开发权限模式已成功启用！';
|
||||
RAISE NOTICE '';
|
||||
RAISE NOTICE '🛠️ 可用的开发函数：';
|
||||
RAISE NOTICE ' • dev_send_message(标题, 内容, 接收者ID, 类型)';
|
||||
RAISE NOTICE ' • dev_create_group(群组名, 描述, 是否公开)';
|
||||
RAISE NOTICE ' • dev_add_to_group(群组ID, 用户ID, 角色)';
|
||||
RAISE NOTICE ' • dev_show_my_messages() - 查看我的消息';
|
||||
RAISE NOTICE '';
|
||||
RAISE NOTICE '📝 使用示例：';
|
||||
RAISE NOTICE ' SELECT dev_send_message(''测试'', ''内容'', ''user-id'');';
|
||||
RAISE NOTICE ' SELECT * FROM dev_show_my_messages();';
|
||||
ELSE
|
||||
RAISE NOTICE '⚠️ 策略设置可能不完整，请检查';
|
||||
END IF;
|
||||
END $$;
|
||||
|
||||
-- 完成提示
|
||||
SELECT
|
||||
'🔓 开发权限模式' as mode,
|
||||
'已启用' as status,
|
||||
'所有authenticated用户可操作消息系统' as description,
|
||||
'⚠️ 仅用于开发/测试环境' as warning;
|
||||
Reference in New Issue
Block a user