upgrade v4.2604.0 to v4.2605.0

[LordofAvernus]

不兼容的变更

• dms-ee#784 数据导出工单接入可配置审批流模板，存量项目需为 data_export 类型创建默认审批模板及步骤。
• dms-ee#813 系统管理员新增业务写权开关，下架「项目总监」预置角色，存量用户需迁移为系统管理员并初始化业务写权限。

版本升级方案

以下脚本以默认元数据库名 sqle、dms 为例，执行时请改为实际配置的库名。建议在维护窗口执行，升级前备份元数据。

1. 数据导出审批流模板（dms-ee#784）

在 sqle 元数据库执行：

START TRANSACTION;

-- 0) 审批流程模板表新增模板类型字段，并给存量模板赋值类型
ALTER TABLE workflow_templates ADD COLUMN workflow_type VARCHAR(64) NOT NULL DEFAULT 'workflow' AFTER name;
UPDATE workflow_templates SET workflow_type = 'workflow' WHERE workflow_type IS NULL OR workflow_type = '';

-- 1) 为每项目创建 data_export 模板
INSERT INTO workflow_templates (
    name,
    `desc`,
    allow_submit_when_less_audit_level,
    project_id,
    workflow_type
)
SELECT DISTINCT
    CONCAT(wt.project_id, '-DataExportWorkflowTemplate') AS name,
    '' AS `desc`,
    '' AS allow_submit_when_less_audit_level,
    wt.project_id,
    'data_export' AS workflow_type
FROM workflow_templates wt
WHERE wt.workflow_type = 'workflow'
  AND wt.deleted_at IS NULL;

-- 2) 为刚创建的 data_export 模板插入两条默认步骤
INSERT INTO workflow_step_templates (
    step_number,
    workflow_template_id,
    type,
    users,
    `desc`,
    approved_by_authorized,
    execute_by_authorized
)
SELECT
    s.step_number,
    t.id,
    s.type,
    '',
    '',
    s.approved_by_authorized,
    s.execute_by_authorized
FROM workflow_templates t
JOIN (
    SELECT 1 AS step_number, 'export_review' AS type, 1 AS approved_by_authorized, NULL AS execute_by_authorized
    UNION ALL
    SELECT 2, 'export_execute', NULL, 1
) s
WHERE t.workflow_type = 'data_export'
  AND t.deleted_at IS NULL;

COMMIT;

2. 系统管理员业务写权与项目总监角色迁移（dms-ee#813）

在 dms 元数据库执行：

-- 用户表新增业务写字段
ALTER TABLE users ADD business_write_permission tinyint(1) DEFAULT 0 NULL;

-- 删除项目总监
DELETE FROM op_permissions WHERE uid = 700001;

-- 开启权限刷新
UPDATE dms_configs SET need_init_op_permissions = 1 WHERE uid = 700100;

-- admin 默认为系统管理员，仅可配置业务写权限
UPDATE user_op_permissions
SET op_permission_uid = 700017
WHERE user_uid = 700200;

-- 对于同时持有 700001 和 700017 的用户，删除 700001 记录，避免违反唯一约束
DELETE FROM user_op_permissions
WHERE op_permission_uid = 700001
  AND user_uid IN (
    SELECT user_uid FROM (
      SELECT user_uid FROM user_op_permissions WHERE op_permission_uid = 700017
    ) AS tmp
  );

-- 对于只持有 700001 的用户，更新为 700017
UPDATE user_op_permissions
SET op_permission_uid = 700017
WHERE op_permission_uid = 700001;

-- 更新系统管理员用户写权限
UPDATE users u
INNER JOIN user_op_permissions uop
  ON u.uid = uop.user_uid
 AND uop.op_permission_uid = '700017'
SET u.business_write_permission = 1
WHERE u.delete_at IS NULL;