113 lines
5.3 KiB
SQL
113 lines
5.3 KiB
SQL
-- ============================================================
|
||
-- 账号与角色迁移前数据体检（只读，可直接粘进 Navicat / phpMyAdmin 执行）
|
||
--
|
||
-- 与 `php artisan lgp:rbac-audit` 等价，供未安装依赖时使用。
|
||
-- 库：cc_new_stash（老业务表 cc_ 与新系统表 nl_ 同库）
|
||
-- ============================================================
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [1] 迁移规模
|
||
-- ------------------------------------------------------------
|
||
SELECT 'cc_user 待迁账号' AS item, COUNT(*) AS cnt FROM cc_user WHERE deleted_at = 0
|
||
UNION ALL SELECT 'cc_role 待迁角色', COUNT(*) FROM cc_role WHERE deleted_at = 0
|
||
UNION ALL SELECT 'cc_department 部门（复用不迁）', COUNT(*) FROM cc_department WHERE deleted_at = 0
|
||
UNION ALL SELECT 'cc_user_role_relation 用户角色关系', COUNT(*) FROM cc_user_role_relation
|
||
UNION ALL SELECT 'cc_role_menu_relation 角色菜单关系', COUNT(*) FROM cc_role_menu_relation
|
||
UNION ALL SELECT 'nl_admin 现有账号', COUNT(*) FROM nl_admin WHERE deleted_at = 0
|
||
UNION ALL SELECT 'nl_role 现有角色', COUNT(*) FROM nl_role WHERE deleted_at = 0;
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [2] 绑定了多个角色的用户
|
||
-- 新库 nl_admin.role_id 是单字段，多绑的必须人工决定取哪个
|
||
-- ------------------------------------------------------------
|
||
SELECT ur.user_id, u.account, u.nick_name,
|
||
COUNT(*) AS role_count,
|
||
GROUP_CONCAT(ur.role_id ORDER BY ur.role_id) AS role_ids
|
||
FROM cc_user_role_relation ur
|
||
JOIN cc_user u ON u.id = ur.user_id
|
||
WHERE u.deleted_at = 0
|
||
GROUP BY ur.user_id, u.account, u.nick_name
|
||
HAVING role_count > 1;
|
||
|
||
-- [2b] 完全没有角色关系的账号（迁过去 role_id=0，看不到任何菜单）
|
||
SELECT u.id, u.account, u.nick_name
|
||
FROM cc_user u
|
||
WHERE u.deleted_at = 0
|
||
AND NOT EXISTS (SELECT 1 FROM cc_user_role_relation ur WHERE ur.user_id = u.id);
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [3] 重复手机号
|
||
-- 新库登录是 WHERE phone = ? LIMIT 1，重复会登录到错误的人
|
||
-- ------------------------------------------------------------
|
||
SELECT phone, COUNT(*) AS c,
|
||
GROUP_CONCAT(id ORDER BY id) AS user_ids,
|
||
GROUP_CONCAT(account ORDER BY id) AS accounts
|
||
FROM cc_user
|
||
WHERE deleted_at = 0
|
||
GROUP BY phone
|
||
HAVING c > 1;
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [4] 手机号长度异常
|
||
-- 新库 nl_admin.phone 是 char(11)，超长会被截断，空值无法登录
|
||
-- ------------------------------------------------------------
|
||
SELECT id, account, nick_name, phone, CHAR_LENGTH(phone) AS len
|
||
FROM cc_user
|
||
WHERE deleted_at = 0
|
||
AND (phone = '' OR CHAR_LENGTH(phone) <> 11);
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [5] 老角色清单（含账号数与菜单数）
|
||
-- 新库 nl_role.value 必填，需为每个角色指定英文标识
|
||
-- ------------------------------------------------------------
|
||
SELECT r.id, r.name, r.`desc`, r.status AS `status_0正常_1禁用`, r.color,
|
||
(SELECT COUNT(*) FROM cc_user_role_relation ur
|
||
JOIN cc_user u ON u.id = ur.user_id
|
||
WHERE ur.role_id = r.id AND u.deleted_at = 0) AS user_count,
|
||
(SELECT COUNT(*) FROM cc_role_menu_relation rm
|
||
WHERE rm.role_id = r.id) AS menu_count
|
||
FROM cc_role r
|
||
WHERE r.deleted_at = 0
|
||
ORDER BY r.id;
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [6] 角色 ID 撞车
|
||
-- nl_role.id=1 是超级管理员且代码里硬判断 role_id===1 全量放行
|
||
-- 老库 id=1 未必是超管，按原 ID 迁会把普通角色提权成超管
|
||
-- ------------------------------------------------------------
|
||
SELECT '老 cc_role' AS src, id, name FROM cc_role WHERE id = 1
|
||
UNION ALL
|
||
SELECT '新 nl_role', id, name FROM nl_role WHERE id = 1;
|
||
|
||
SELECT MAX(id) AS old_role_max_id, MAX(id) + 100 AS suggested_new_max
|
||
FROM cc_role WHERE deleted_at = 0;
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [7] 密码格式
|
||
-- 惰性升级依赖无盐 sha1（40 位 hex），非此格式只能走重置
|
||
-- ------------------------------------------------------------
|
||
SELECT
|
||
SUM(CHAR_LENGTH(password) = 40 AND password REGEXP '^[0-9a-f]{40}$') AS sha1_ok,
|
||
SUM(password = '') AS empty_pwd,
|
||
SUM(password <> '' AND NOT (CHAR_LENGTH(password) = 40 AND password REGEXP '^[0-9a-f]{40}$')) AS other_format
|
||
FROM cc_user
|
||
WHERE deleted_at = 0;
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [8] 部门悬空引用（cc_user.department 指向已不存在的部门）
|
||
-- ------------------------------------------------------------
|
||
SELECT u.id, u.account, u.department
|
||
FROM cc_user u
|
||
WHERE u.deleted_at = 0
|
||
AND u.department > 0
|
||
AND NOT EXISTS (SELECT 1 FROM cc_department d WHERE d.id = u.department AND d.deleted_at = 0);
|
||
|
||
-- ------------------------------------------------------------
|
||
-- [9] account 与 phone 不一致的账号
|
||
-- account 从不参与登录（老 UserService::login 查的是 phone），
|
||
-- 迁移时把原 account 写进 nl_admin.desc 留痕即可，不新增列
|
||
-- ------------------------------------------------------------
|
||
SELECT COUNT(*) AS account_phone_diff
|
||
FROM cc_user
|
||
WHERE deleted_at = 0 AND account <> phone;
|