feat: 实现用户登录认证与权限控制系统
- 新增用户登录页面与API端点(/api/auth/login、/api/auth/logout、/api/auth/me) - 引入基于密码哈希的认证机制,支持默认管理员账号登录 - 创建访问控制模块(lib/access-control.ts),实现基于角色的权限验证 - 在现有API端点中集成权限检查,限制非管理员用户只能访问其所属项目数据 - 更新应用布局,要求用户登录后才能访问主界面 - 扩展用户表结构,增加用户名和密码哈希字段 - 调整项目、KR、目标、会议记录等资源的查询逻辑,根据用户权限过滤数据 - 改进管理页面(指标、模板)的删除操作,使用确认对话框替代直接确认 - 优化“我的KR”页面,为管理员提供全员KR概览视图 - 修复.gitignore文件中的拼写错误(.trae → .travis) - 添加数据库迁移脚本,支持任务直接关联项目、禁用RLS、添加求助字段等 - 配置Next.js以支持独立输出和子路径部署
This commit is contained in:
56
supabase/migrations/add_help_request_fields.sql
Normal file
56
supabase/migrations/add_help_request_fields.sql
Normal file
@@ -0,0 +1,56 @@
|
||||
alter table public.tasks
|
||||
add column if not exists help_requested_to_user_id uuid null,
|
||||
add column if not exists help_requested_by_user_id uuid null,
|
||||
add column if not exists help_requested_at timestamptz null;
|
||||
|
||||
alter table public.task_steps
|
||||
add column if not exists help_requested_to_user_id uuid null,
|
||||
add column if not exists help_requested_by_user_id uuid null,
|
||||
add column if not exists help_requested_at timestamptz null;
|
||||
|
||||
do $$
|
||||
begin
|
||||
if not exists (
|
||||
select 1 from pg_constraint where conname = 'tasks_help_requested_to_user_id_fkey'
|
||||
) then
|
||||
alter table public.tasks
|
||||
add constraint tasks_help_requested_to_user_id_fkey
|
||||
foreign key (help_requested_to_user_id) references public.users(id);
|
||||
end if;
|
||||
|
||||
if not exists (
|
||||
select 1 from pg_constraint where conname = 'tasks_help_requested_by_user_id_fkey'
|
||||
) then
|
||||
alter table public.tasks
|
||||
add constraint tasks_help_requested_by_user_id_fkey
|
||||
foreign key (help_requested_by_user_id) references public.users(id);
|
||||
end if;
|
||||
|
||||
if not exists (
|
||||
select 1 from pg_constraint where conname = 'task_steps_help_requested_to_user_id_fkey'
|
||||
) then
|
||||
alter table public.task_steps
|
||||
add constraint task_steps_help_requested_to_user_id_fkey
|
||||
foreign key (help_requested_to_user_id) references public.users(id);
|
||||
end if;
|
||||
|
||||
if not exists (
|
||||
select 1 from pg_constraint where conname = 'task_steps_help_requested_by_user_id_fkey'
|
||||
) then
|
||||
alter table public.task_steps
|
||||
add constraint task_steps_help_requested_by_user_id_fkey
|
||||
foreign key (help_requested_by_user_id) references public.users(id);
|
||||
end if;
|
||||
end $$;
|
||||
|
||||
create index if not exists tasks_help_requested_to_user_id_idx
|
||||
on public.tasks(help_requested_to_user_id);
|
||||
|
||||
create index if not exists tasks_help_requested_by_user_id_idx
|
||||
on public.tasks(help_requested_by_user_id);
|
||||
|
||||
create index if not exists task_steps_help_requested_to_user_id_idx
|
||||
on public.task_steps(help_requested_to_user_id);
|
||||
|
||||
create index if not exists task_steps_help_requested_by_user_id_idx
|
||||
on public.task_steps(help_requested_by_user_id);
|
||||
Reference in New Issue
Block a user