baseline: 批次A-D 成果 + membership 半成品（测试红）

2026-09-11 23:11:35 +08:00
commit b3f3095d53
311 changed files with 40540 additions and 0 deletions
@@ -0,0 +1,82 @@
+# Generated by Django 5.2.12 on 2026-09-11 13:06
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+def backfill_legacy_memberships(apps, schema_editor):
+    """Keep existing installs usable while making tenant access explicit.
+
+    Existing superusers retain operator access to every active tenant. Other
+    users get the configured/default tenant, and the historical demo account
+    also gets the demo tenant needed by the public demo token flow.
+    """
+    Tenant = apps.get_model('core', 'Tenant')
+    Membership = apps.get_model('core', 'TenantMembership')
+    User = apps.get_model(settings.AUTH_USER_MODEL.split('.')[0], settings.AUTH_USER_MODEL.split('.')[1])
+
+    default = Tenant.objects.filter(code='default', is_active=True).first()
+    demo = Tenant.objects.filter(code='demo', is_active=True).first()
+    for user in User.objects.all().iterator():
+        tenants = list(Tenant.objects.filter(is_active=True)) if user.is_superuser else ([default] if default else [])
+        if user.username == 'demo' and demo is not None:
+            tenants.append(demo)
+        for tenant in {t.pk: t for t in tenants if t is not None}.values():
+            Membership.objects.get_or_create(
+                user_id=user.pk, tenant_id=tenant.pk,
+                defaults={'role': 'owner' if user.is_superuser else 'member', 'is_active': True},
+            )
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('core', '0001_initial'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='TenantMembership',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('role', models.CharField(choices=[('owner', '所有者'), ('admin', '管理员'), ('member', '成员')], default='member', max_length=16)),
+                ('is_active', models.BooleanField(default=True)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+                ('tenant', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='memberships', to='core.tenant')),
+                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='tenant_memberships', to=settings.AUTH_USER_MODEL)),
+            ],
+            options={
+                'db_table': 'core_tenant_membership',
+                'indexes': [models.Index(fields=['user', 'is_active'], name='core_tenant_user_id_51dd63_idx'), models.Index(fields=['tenant', 'is_active'], name='core_tenant_tenant__f85f17_idx')],
+                'constraints': [models.UniqueConstraint(fields=('user', 'tenant'), name='core_membership_user_tenant_uniq')],
+            },
+        ),
+        migrations.RunPython(backfill_legacy_memberships, migrations.RunPython.noop),
+    ]
+
+
+def backfill_legacy_memberships(apps, schema_editor):
+    """Keep existing installs usable while making tenant access explicit.
+
+    Existing superusers retain operator access to every active tenant. Other
+    users get the configured/default tenant, and the historical demo account
+    also gets the demo tenant needed by the public demo token flow.
+    """
+    Tenant = apps.get_model('core', 'Tenant')
+    Membership = apps.get_model('core', 'TenantMembership')
+    User = apps.get_model(settings.AUTH_USER_MODEL.split('.')[0], settings.AUTH_USER_MODEL.split('.')[1])
+
+    default = Tenant.objects.filter(code='default', is_active=True).first()
+    demo = Tenant.objects.filter(code='demo', is_active=True).first()
+    for user in User.objects.all().iterator():
+        tenants = list(Tenant.objects.filter(is_active=True)) if user.is_superuser else ([default] if default else [])
+        if user.username == 'demo' and demo is not None:
+            tenants.append(demo)
+        for tenant in {t.pk: t for t in tenants if t is not None}.values():
+            Membership.objects.get_or_create(
+                user_id=user.pk, tenant_id=tenant.pk,
+                defaults={'role': 'owner' if user.is_superuser else 'member', 'is_active': True},
+            )