feat: HR Portal - Complete Multi-Tenant System with Redis Session Storage
Major Features: - ✅ Multi-tenant architecture (tenant isolation) - ✅ Employee CRUD with lifecycle management (onboarding/offboarding) - ✅ Department tree structure with email domain management - ✅ Company info management (single-record editing) - ✅ System functions CRUD (permission management) - ✅ Email account management (multi-account per employee) - ✅ Keycloak SSO integration (auth.lab.taipei) - ✅ Redis session storage (10.1.0.254:6379) - Solves Cookie 4KB limitation - Cross-system session sharing - Sliding expiration (8 hours) - Automatic token refresh Technical Stack: Backend: - FastAPI + SQLAlchemy - PostgreSQL 16 (10.1.0.20:5433) - Keycloak Admin API integration - Docker Mailserver integration (SSH) - Alembic migrations Frontend: - Next.js 14 (App Router) - NextAuth 4 with Keycloak Provider - Redis session storage (ioredis) - Tailwind CSS Infrastructure: - Redis 7 (10.1.0.254:6379) - Session + Cache - Keycloak 26.1.0 (auth.lab.taipei) - Docker Mailserver (10.1.0.254) Architecture Highlights: - Session管理由 Keycloak + Redis 統一控制 - 支援多系統 (HR/WebMail/Calendar/Drive/Office) 共享 session - Token 自動刷新,異質服務整合 - 未來可無縫遷移到雲端 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
49
backend/scripts/README_ADD_COMPANY_INFO.md
Normal file
49
backend/scripts/README_ADD_COMPANY_INFO.md
Normal file
@@ -0,0 +1,49 @@
|
||||
# 修正「公司資料維護」功能代碼 (ID=17)
|
||||
|
||||
## 現況說明
|
||||
|
||||
資料庫中已存在 ID=17 的「公司資料維護」記錄,僅需修正 code 和 module_code 以符合前端路徑。
|
||||
|
||||
### 修正項目:
|
||||
- `code`: `tenant` → `company-info`
|
||||
- `module_code`: `tenant` → `company-info`
|
||||
- `module_functions`: `["Read", "Update"]` → `["View", "Update"]` (統一用詞)
|
||||
|
||||
其他設定 (`upper_function_id=0`, `is_mana=false`) 都是正確的。
|
||||
|
||||
## 執行步驟
|
||||
|
||||
連線到資料庫後執行 `update_func_17.sql`:
|
||||
|
||||
```sql
|
||||
UPDATE system_functions
|
||||
SET
|
||||
code = 'company-info',
|
||||
module_code = 'company-info',
|
||||
module_functions = '["View", "Update"]'::jsonb
|
||||
WHERE id = 17;
|
||||
```
|
||||
|
||||
## 確認修正
|
||||
|
||||
```sql
|
||||
SELECT id, code, module_code, name, module_functions
|
||||
FROM system_functions
|
||||
WHERE id = 17;
|
||||
```
|
||||
|
||||
應該顯示:
|
||||
```
|
||||
id | code | module_code | name | module_functions
|
||||
---+--------------+--------------+--------------+------------------
|
||||
17 | company-info | company-info | 公司資料維護 | ["View","Update"]
|
||||
```
|
||||
|
||||
## 功能說明
|
||||
|
||||
- **前端路徑**: `/company-info`
|
||||
- **後端 API**:
|
||||
- GET `/api/v1/tenants/current` - 取得當前租戶資料
|
||||
- PATCH `/api/v1/tenants/current` - 更新當前租戶資料
|
||||
- **功能定位**: 人資資料維護功能 (is_mana = false)
|
||||
- **權限**: View, Update
|
||||
74
backend/scripts/README_ADD_DEPARTMENTS.md
Normal file
74
backend/scripts/README_ADD_DEPARTMENTS.md
Normal file
@@ -0,0 +1,74 @@
|
||||
# 新增/修正「部門資料維護」系統功能
|
||||
|
||||
## 功能說明
|
||||
|
||||
部門資料維護功能,支援樹狀組織架構管理。
|
||||
|
||||
## 執行步驟
|
||||
|
||||
### 檢查現況
|
||||
|
||||
先檢查 id=18 的記錄:
|
||||
|
||||
```sql
|
||||
SELECT id, code, name FROM system_functions WHERE id = 18;
|
||||
```
|
||||
|
||||
### 執行 SQL
|
||||
|
||||
執行 `add_departments_function.sql`:
|
||||
|
||||
```bash
|
||||
# 方法一: psql (Linux/Mac)
|
||||
PGPASSWORD=DC1qaz2wsx psql -h 10.1.0.20 -p 5433 -U admin -d hr_portal -f add_departments_function.sql
|
||||
|
||||
# 方法二: 手動執行 SQL
|
||||
# 連線到資料庫後,執行 add_departments_function.sql 中的 SQL
|
||||
```
|
||||
|
||||
腳本會自動判斷:
|
||||
- 如果 id=18 存在且為 `tenant_departments`,會修正為 `departments`
|
||||
- 如果 id=18 不存在,會新增記錄
|
||||
|
||||
### 確認結果
|
||||
|
||||
```sql
|
||||
SELECT id, code, name, function_type, module_code, module_functions
|
||||
FROM system_functions
|
||||
WHERE code = 'departments';
|
||||
```
|
||||
|
||||
應該顯示:
|
||||
```
|
||||
id | code | name | function_type | module_code | module_functions
|
||||
---+-------------+--------------+---------------+-------------+--------------------
|
||||
18 | departments | 部門資料維護 | 2 | departments | ["View","Create","Read","Update","Delete"]
|
||||
```
|
||||
|
||||
## 功能配置
|
||||
|
||||
- **功能代碼**: departments
|
||||
- **功能名稱**: 部門資料維護
|
||||
- **功能類型**: FUNCTION (2)
|
||||
- **上層功能**: 根層 (0) - 人資功能區
|
||||
- **圖示**: 🏢
|
||||
- **操作權限**: View, Create, Read, Update, Delete (完整 CRUD)
|
||||
- **功能定位**: 人資資料維護功能 (is_mana = false)
|
||||
|
||||
## 前後端對應
|
||||
|
||||
- **前端路徑**: `/departments`
|
||||
- **後端 API**:
|
||||
- GET `/api/v1/departments` - 取得部門列表
|
||||
- GET `/api/v1/departments/{id}` - 取得部門詳情
|
||||
- POST `/api/v1/departments` - 新增部門
|
||||
- PUT `/api/v1/departments/{id}` - 更新部門
|
||||
- DELETE `/api/v1/departments/{id}` - 刪除部門
|
||||
- GET `/api/v1/departments/tree` - 取得樹狀結構
|
||||
|
||||
## 特殊說明
|
||||
|
||||
部門採用樹狀結構:
|
||||
- **第一層** (depth=0): 可設定 email_domain
|
||||
- **子層** (depth>=1): 繼承上層的 email_domain
|
||||
- 支援多層級組織架構
|
||||
36
backend/scripts/add_company_info_function.sql
Normal file
36
backend/scripts/add_company_info_function.sql
Normal file
@@ -0,0 +1,36 @@
|
||||
-- 新增「公司資料維護」系統功能
|
||||
-- 日期: 2026-02-23
|
||||
-- 說明: 允許使用者查看和編輯當前租戶的公司基本資料
|
||||
|
||||
INSERT INTO system_functions (
|
||||
code,
|
||||
name,
|
||||
function_type,
|
||||
upper_function_id,
|
||||
"order",
|
||||
function_icon,
|
||||
module_code,
|
||||
module_functions,
|
||||
description,
|
||||
is_mana,
|
||||
is_active,
|
||||
edit_by
|
||||
) VALUES (
|
||||
'company-info',
|
||||
'公司資料維護',
|
||||
2, -- FUNCTION (非 NODE)
|
||||
1, -- 假設掛在「系統管理」(id=1) 節點下
|
||||
15,
|
||||
'🏢',
|
||||
'company-info',
|
||||
'["View", "Update"]'::jsonb,
|
||||
'管理當前租戶的公司基本資料，包含公司名稱、統一編號、聯絡資訊等',
|
||||
true, -- 系統管理功能
|
||||
true, -- 啟用
|
||||
1 -- edit_by
|
||||
);
|
||||
|
||||
-- 確認新增結果
|
||||
SELECT id, code, name, function_type, upper_function_id, "order"
|
||||
FROM system_functions
|
||||
WHERE code = 'company-info';
|
||||
65
backend/scripts/add_departments_function.sql
Normal file
65
backend/scripts/add_departments_function.sql
Normal file
@@ -0,0 +1,65 @@
|
||||
-- 新增「部門資料維護」系統功能
|
||||
-- 日期: 2026-02-23
|
||||
|
||||
-- 1. 先查看現有記錄
|
||||
SELECT id, code, name, function_type, upper_function_id, "order", is_mana
|
||||
FROM system_functions
|
||||
WHERE code IN ('departments', 'tenant_departments')
|
||||
ORDER BY id;
|
||||
|
||||
-- 2. 檢查 id=18 是否為部門功能
|
||||
SELECT id, code, name FROM system_functions WHERE id = 18;
|
||||
|
||||
-- 3. 如果 id=18 是 tenant_departments,修正為 departments
|
||||
-- 如果 id=18 不存在,則新增記錄
|
||||
|
||||
-- 方案A: 如果 id=18 已存在,修正它
|
||||
UPDATE system_functions
|
||||
SET
|
||||
code = 'departments',
|
||||
name = '部門資料維護',
|
||||
module_code = 'departments',
|
||||
module_functions = '["View", "Create", "Read", "Update", "Delete"]'::jsonb,
|
||||
description = '管理組織架構與部門資料,支援樹狀結構與郵件網域設定',
|
||||
function_icon = '🏢',
|
||||
is_mana = false,
|
||||
is_active = true,
|
||||
edit_by = 1
|
||||
WHERE id = 18 AND code = 'tenant_departments';
|
||||
|
||||
-- 方案B: 如果 id=18 不存在,新增記錄
|
||||
INSERT INTO system_functions (
|
||||
code,
|
||||
name,
|
||||
function_type,
|
||||
upper_function_id,
|
||||
"order",
|
||||
function_icon,
|
||||
module_code,
|
||||
module_functions,
|
||||
description,
|
||||
is_mana,
|
||||
is_active,
|
||||
edit_by
|
||||
)
|
||||
SELECT
|
||||
'departments',
|
||||
'部門資料維護',
|
||||
2, -- FUNCTION
|
||||
0, -- 根層
|
||||
30,
|
||||
'🏢',
|
||||
'departments',
|
||||
'["View", "Create", "Read", "Update", "Delete"]'::jsonb,
|
||||
'管理組織架構與部門資料,支援樹狀結構與郵件網域設定',
|
||||
false, -- 人資功能,非系統管理
|
||||
true,
|
||||
1
|
||||
WHERE NOT EXISTS (
|
||||
SELECT 1 FROM system_functions WHERE id = 18
|
||||
);
|
||||
|
||||
-- 4. 確認結果
|
||||
SELECT id, code, name, function_type, upper_function_id, "order", module_functions, is_mana
|
||||
FROM system_functions
|
||||
WHERE code = 'departments';
|
||||
18
backend/scripts/update_func_17.sql
Normal file
18
backend/scripts/update_func_17.sql
Normal file
@@ -0,0 +1,18 @@
|
||||
-- 修正 ID=17 「公司資料維護」功能代碼
|
||||
-- 日期: 2026-02-23
|
||||
-- 說明: 僅修正 code 和 module_code 為 company-info,與前端路徑保持一致
|
||||
|
||||
-- 1. 查看當前設定
|
||||
SELECT id, code, module_code, name FROM system_functions WHERE id = 17;
|
||||
|
||||
-- 2. 修正為 company-info
|
||||
UPDATE system_functions
|
||||
SET
|
||||
code = 'company-info',
|
||||
module_code = 'company-info',
|
||||
module_functions = '["View", "Update"]'::jsonb,
|
||||
edit_by = 1
|
||||
WHERE id = 17;
|
||||
|
||||
-- 3. 確認修正結果
|
||||
SELECT id, code, module_code, name, module_functions FROM system_functions WHERE id = 17;
|
||||
Reference in New Issue
Block a user