dedicated permission

CHANGELOG.md

@@ -1,3 +1,7 @@
+# dev
+## Changes
+1. Dedicated manage permission.
+
 # v0.5.0
 ## Changes
 1. Update `skynet_api` version.

task/Cargo.toml

@@ -23,6 +23,7 @@ skynet_api = { version = "0.4", features = [
     "plugin-api",
     "request-param",
     "service-skynet",
+    "viewer",
 ] }
 skynet_macro = "0.3"
 sea-orm-migration = { version = "1.1", features = [

task/frontend/src/components/card.tsx

@@ -161,7 +161,7 @@ const TaskCard = () => {
             tip={intl.get('pages.task.stop.tip')}
             color="#ff4d4f"
             perm={UserPerm.PermWrite}
-            permName="manage.plugin"
+            permName="manage.4adaf7d3-b877-43c3-82bd-da3689dc3920"
             onClick={() => handleStop(intl, ref, row.id, row.name)}
             disabled={row.result != undefined}
           />,
@@ -184,7 +184,11 @@ const TaskCard = () => {
             danger
             onClick={() => handleDeleteAll(intl, ref)}
             disabled={
-              !checkPerm(access, 'manage.notification', UserPerm.PermWrite)
+              !checkPerm(
+                access,
+                'manage.4adaf7d3-b877-43c3-82bd-da3689dc3920',
+                UserPerm.PermWrite,
+              )
             }
           >
             <FormattedMessage id="app.op.deleteall" />

task/frontend/src/components/output.tsx

@@ -1,5 +1,5 @@
 import TableBtn from '@/common_components/layout/table/tableBtn';
-import { getIntl, UserPerm } from '@/utils';
+import { getIntl } from '@/utils';
 import { ProfileOutlined } from '@ant-design/icons';
 import { Modal } from 'antd';
 import { useState } from 'react';
@@ -18,8 +18,6 @@ const TaskOutput: React.FC<TaskOutputProps> = (props) => {
       <TableBtn
         icon={ProfileOutlined}
         tip={intl.get('pages.task.output.tip')}
-        perm={UserPerm.PermRead}
-        permName="manage.plugin"
         onClick={() => setIsModalOpen(true)}
       />
       <Modal

task/frontend/src/pages/index.tsx

@@ -8,7 +8,7 @@ const IndexPage = () => {
   return (
     <MainLayout
       title="titles.task"
-      access="manage.plugin"
+      access="manage.4adaf7d3-b877-43c3-82bd-da3689dc3920"
       perm={UserPerm.PermRead}
     >
       <MainContainer

task/src/lib.rs

@@ -1,8 +1,12 @@
-use std::{path::PathBuf, sync::OnceLock};
+use std::{
+    path::PathBuf,
+    sync::{Arc, OnceLock},
+};
 
 use actix_cloud::{
     actix_web::web::Data,
     i18n::{i18n, Locale},
+    memorydb,
     router::CSRFType,
     state::{GlobalState, ServerHandle},
     tokio::runtime::Runtime,
@@ -20,13 +24,15 @@ use skynet_api::{
         },
         registry::Registry,
     },
-    permission::{IDTypes::PermManagePluginID, PermChecker, PERM_READ, PERM_WRITE},
+    permission::{PermChecker, PERM_READ, PERM_WRITE},
     plugin::{PluginStatus, Request, Response},
     request::{Method, Router, RouterType},
     route,
-    sea_orm::DatabaseConnection,
+    sea_orm::{DatabaseConnection, TransactionTrait},
     service::{SResult, Service, SKYNET_SERVICE},
-    uuid, HyUuid, MenuItem, Skynet,
+    uuid,
+    viewer::permissions::PermissionViewer,
+    HyUuid, MenuItem, Skynet,
 };
 use skynet_api_task::{viewer::tasks::TaskViewer, ID};
 
@@ -41,6 +47,7 @@ include!(concat!(env!("OUT_DIR"), "/response.rs"));
     db: Default::default(),
     state: Default::default(),
     runtime: Runtime::new().unwrap(),
+    manage_id: Default::default(),
 })]
 #[plugin_impl_root]
 #[plugin_impl_call(skynet_api::plugin::api::PluginApi, skynet_api_task::Service)]
@@ -49,6 +56,7 @@ struct Plugin {
     db: OnceLock<DatabaseConnection>,
     state: OnceLock<Data<GlobalState>>,
     runtime: Runtime,
+    manage_id: OnceLock<HyUuid>,
 }
 
 #[plugin_impl_trait]
@@ -67,6 +75,14 @@ impl skynet_api::plugin::api::PluginApi for Plugin {
             Migrator::up(&db, None).await?;
             let _ = self.db.set(db);
 
+            let tx = self.db.get().unwrap().begin().await?;
+            let _ = self.manage_id.set(
+                PermissionViewer::find_or_init(&tx, &format!("manage.{ID}"), "plugin task manager")
+                    .await?
+                    .id,
+            );
+            tx.commit().await?;
+
             TaskViewer::clean_running(self.db.get().unwrap()).await?;
 
             let _ = skynet.insert_menu(
@@ -75,17 +91,15 @@ impl skynet_api::plugin::api::PluginApi for Plugin {
                     plugin: Some(ID),
                     name: String::from("menu.task"),
                     path: format!("/plugin/{ID}/"),
-                    checker: PermChecker::new_entry(
-                        skynet.default_id[PermManagePluginID],
-                        PERM_READ,
-                    ),
+                    checker: PermChecker::new_entry(*self.manage_id.get().unwrap(), PERM_READ),
                     ..Default::default()
                 },
                 1,
                 Some(HyUuid(uuid!("d00d36d0-6068-4447-ab04-f82ce893c04e"))),
             );
             let locale = Locale::new(skynet.config.lang.clone()).add_locale(i18n!("locales"));
             let state = GlobalState {
+                memorydb: Arc::new(memorydb::default::DefaultBackend::new()),
                 config: Default::default(),
                 logger: None,
                 locale,
@@ -97,34 +111,35 @@ impl skynet_api::plugin::api::PluginApi for Plugin {
         })
     }
 
-    async fn on_register(&self, _: &Registry, skynet: Skynet, mut r: Vec<Router>) -> Vec<Router> {
+    async fn on_register(&self, _: &Registry, _skynet: Skynet, mut r: Vec<Router>) -> Vec<Router> {
+        let manage_id = *self.manage_id.get().unwrap();
         r.extend(vec![
             Router {
                 path: format!("/plugins/{ID}/tasks"),
                 method: Method::Get,
                 route: RouterType::Http(ID, String::from("api::get_all")),
-                checker: PermChecker::new_entry(skynet.default_id[PermManagePluginID], PERM_READ),
+                checker: PermChecker::new_entry(manage_id, PERM_READ),
                 csrf: CSRFType::Header,
             },
             Router {
                 path: format!("/plugins/{ID}/tasks"),
                 method: Method::Delete,
                 route: RouterType::Http(ID, String::from("api::delete_completed")),
-                checker: PermChecker::new_entry(skynet.default_id[PermManagePluginID], PERM_WRITE),
+                checker: PermChecker::new_entry(manage_id, PERM_WRITE),
                 csrf: CSRFType::Header,
             },
             Router {
                 path: format!("/plugins/{ID}/tasks/{{tid}}/output"),
                 method: Method::Get,
                 route: RouterType::Http(ID, String::from("api::get_output")),
-                checker: PermChecker::new_entry(skynet.default_id[PermManagePluginID], PERM_READ),
+                checker: PermChecker::new_entry(manage_id, PERM_READ),
                 csrf: CSRFType::Header,
             },
             Router {
                 path: format!("/plugins/{ID}/tasks/{{tid}}/stop"),
                 method: Method::Post,
                 route: RouterType::Http(ID, String::from("api::stop")),
-                checker: PermChecker::new_entry(skynet.default_id[PermManagePluginID], PERM_WRITE),
+                checker: PermChecker::new_entry(manage_id, PERM_WRITE),
                 csrf: CSRFType::Header,
             },
         ]);