feat: 企业权限上限与迁移脚本；管理端/超管概览与财务；双端小程序 tab/订单/历史/测评选择等同步

Made-with: Cursor

api/database/migrations/_check_add_permissions.php

@@ -0,0 +1,15 @@
+<?php
+$pdo = new PDO(
+    'mysql:host=56b4c23f6853c.gz.cdb.myqcloud.com;port=14413;dbname=mbti;charset=utf8mb4',
+    'mbti',
+    'Zhiqun1984',
+    [PDO::ATTR_TIMEOUT => 10]
+);
+
+$r = $pdo->query("SHOW COLUMNS FROM mbti_enterprises LIKE 'permissions'");
+if ($r->rowCount() > 0) {
+    echo "Column 'permissions' already exists.\n";
+} else {
+    $pdo->exec("ALTER TABLE mbti_enterprises ADD COLUMN permissions json NULL COMMENT '功能权限开关' AFTER status");
+    echo "Column 'permissions' added.\n";
+}

api/database/migrations/_run_add_permissions.py

@@ -0,0 +1,27 @@
+import pymysql
+
+conn = pymysql.connect(
+    host='56b4c23f6853c.gz.cdb.myqcloud.com',
+    port=14413,
+    user='mbti',
+    password='Zhiqun1984',
+    database='mbti',
+    charset='utf8mb4'
+)
+cur = conn.cursor()
+
+cur.execute("SHOW COLUMNS FROM mbti_enterprises LIKE 'permissions'")
+row = cur.fetchone()
+if row:
+    print('Column permissions already exists, skipping.')
+else:
+    cur.execute("""
+        ALTER TABLE mbti_enterprises
+        ADD COLUMN permissions json NULL
+        COMMENT '功能权限开关 {face,mbti,pdp,disc,distribution}'
+        AFTER status
+    """)
+    conn.commit()
+    print('Column permissions added successfully.')
+
+conn.close()

api/database/migrations/add_enterprise_permissions.sql

@@ -0,0 +1,5 @@
+-- 企业权限字段：JSON 存储各功能开关（face/mbti/pdp/disc/distribution）
+-- 默认全开，未设置时后端视为全部允许
+ALTER TABLE `mbti_enterprises`
+  ADD COLUMN `permissions` json NULL COMMENT '功能权限开关 {"face":true,"mbti":true,"pdp":true,"disc":true,"distribution":true}'
+  AFTER `status`;

api/database/migrations/add_permissions_ceiling.sql

@@ -0,0 +1,7 @@
+-- 企业：permissions = 终端生效；permissionsCeiling = 仅超管可改的上限
+ALTER TABLE mbti_enterprises
+  ADD COLUMN permissionsCeiling json NULL COMMENT '超管功能授权上限' AFTER permissions;
+
+UPDATE mbti_enterprises
+SET permissionsCeiling = permissions
+WHERE permissionsCeiling IS NULL AND permissions IS NOT NULL;