fix(ticket): remove obsolete ticket permissions

2026-05-02 20:48:44 +08:00
parent 3eea8f29b7
commit d9130d6d56
2 changed files with 123 additions and 0 deletions
@@ -83,6 +83,70 @@ func TestLightweightTicketMigrationResetDeletesTicketData(t *testing.T) {
 	assertTableCount(t, db, &models.TicketNoSequence{}, 0)
 }

+func TestLightweightTicketMigrationDeletesObsoletePermissions(t *testing.T) {
+	db, err := gorm.Open(sqlite.Open("file:"+t.Name()+"?mode=memory&cache=shared"), &gorm.Config{
+		NamingStrategy: schema.NamingStrategy{
+			TablePrefix:   "t_",
+			SingularTable: true,
+		},
+	})
+	if err != nil {
+		t.Fatalf("open sqlite db: %v", err)
+	}
+	sqlDB, err := db.DB()
+	if err != nil {
+		t.Fatalf("get sqlite db: %v", err)
+	}
+	t.Cleanup(func() {
+		_ = sqlDB.Close()
+	})
+
+	if err := db.AutoMigrate(&models.Permission{}, &models.RolePermission{}, &models.UserPermission{}); err != nil {
+		t.Fatalf("AutoMigrate() error = %v", err)
+	}
+
+	now := time.Now()
+	legacyPermission := &models.Permission{
+		Name:        "回复工单",
+		Code:        "ticket.reply",
+		Type:        "api",
+		GroupName:   "ticket",
+		AuditFields: models.AuditFields{CreatedAt: now, UpdatedAt: now},
+	}
+	currentPermission := &models.Permission{
+		Name:        "查看工单",
+		Code:        "ticket.view",
+		Type:        "api",
+		GroupName:   "ticket",
+		AuditFields: models.AuditFields{CreatedAt: now, UpdatedAt: now},
+	}
+	if err := db.Create(legacyPermission).Error; err != nil {
+		t.Fatalf("create legacy permission error = %v", err)
+	}
+	if err := db.Create(currentPermission).Error; err != nil {
+		t.Fatalf("create current permission error = %v", err)
+	}
+	if err := db.Create(&models.RolePermission{RoleID: 1, PermissionID: legacyPermission.ID, AuditFields: models.AuditFields{CreatedAt: now, UpdatedAt: now}}).Error; err != nil {
+		t.Fatalf("create legacy role permission error = %v", err)
+	}
+	if err := db.Create(&models.UserPermission{UserID: 1, PermissionID: legacyPermission.ID, Effect: 1, AuditFields: models.AuditFields{CreatedAt: now, UpdatedAt: now}}).Error; err != nil {
+		t.Fatalf("create legacy user permission error = %v", err)
+	}
+	if err := db.Create(&models.RolePermission{RoleID: 1, PermissionID: currentPermission.ID, AuditFields: models.AuditFields{CreatedAt: now, UpdatedAt: now}}).Error; err != nil {
+		t.Fatalf("create current role permission error = %v", err)
+	}
+
+	if err := deleteObsoleteTicketPermissions(db); err != nil {
+		t.Fatalf("deleteObsoleteTicketPermissions() error = %v", err)
+	}
+
+	assertPermissionCodeCount(t, db, "ticket.reply", 0)
+	assertPermissionCodeCount(t, db, "ticket.view", 1)
+	assertPermissionRelationCount(t, db, &models.RolePermission{}, legacyPermission.ID, 0)
+	assertPermissionRelationCount(t, db, &models.UserPermission{}, legacyPermission.ID, 0)
+	assertPermissionRelationCount(t, db, &models.RolePermission{}, currentPermission.ID, 1)
+}
+
 func assertTableCount(t *testing.T, db *gorm.DB, model any, expected int64) {
 	t.Helper()

@@ -94,3 +158,27 @@ func assertTableCount(t *testing.T, db *gorm.DB, model any, expected int64) {
 		t.Fatalf("expected %T count %d, got %d", model, expected, count)
 	}
 }
+
+func assertPermissionCodeCount(t *testing.T, db *gorm.DB, code string, expected int64) {
+	t.Helper()
+
+	var count int64
+	if err := db.Model(&models.Permission{}).Where("code = ?", code).Count(&count).Error; err != nil {
+		t.Fatalf("count permission %s error = %v", code, err)
+	}
+	if count != expected {
+		t.Fatalf("expected permission %s count %d, got %d", code, expected, count)
+	}
+}
+
+func assertPermissionRelationCount(t *testing.T, db *gorm.DB, model any, permissionID int64, expected int64) {
+	t.Helper()
+
+	var count int64
+	if err := db.Model(model).Where("permission_id = ?", permissionID).Count(&count).Error; err != nil {
+		t.Fatalf("count %T permission %d error = %v", model, permissionID, err)
+	}
+	if count != expected {
+		t.Fatalf("expected %T permission %d count %d, got %d", model, permissionID, expected, count)
+	}
+}