@nocobase/app-template-default 1.0.0-beta.73 → 1.0.0-beta.75

package/client/lib/navigation-transform.ts

@@ -1,8 +1,36 @@
+import { groupFoundationNavigation } from '@nocobase/app-plugin-foundation/client';
 import type { RouteNavigationItem } from '../routing/route-navigation.js';
 
 /** Application-owned navigation customization, applied after permission filtering. */
 export function transformNavigation(
   items: RouteNavigationItem[],
 ): RouteNavigationItem[] {
-  return items;
+  return groupFoundationNavigation(collapsePermissionNavigation(items));
+}
+
+/** One sidebar entry opens the first readable tab; original routes and guards remain unchanged. */
+export function collapsePermissionNavigation(
+  items: RouteNavigationItem[],
+): RouteNavigationItem[] {
+  return items.map((item) => {
+    if (item.route.name !== 'permissionManagement')
+      return {
+        ...item,
+        children: collapsePermissionNavigation([...item.children]),
+      };
+    const first = item.children[0];
+    if (!first) return item;
+    return {
+      route: {
+        ...first.route,
+        name: item.route.name,
+        navigation: item.route.navigation,
+      },
+      children: [],
+      activeRouteKeys: item.children.map(
+        (child) =>
+          `${child.route.packageName}:${child.route.path}:${child.route.id}`,
+      ),
+    };
+  });
 }

package/client/locales/system/settings-en-US.ts

@@ -1,8 +1,78 @@
 const settings = {
+  permissionManagement: 'Permission management',
+  defaultAccess: {
+    noResourcesShort: 'No configurable objects available',
+    scopeInvalid:
+      'Choose a valid data scope or complete its filter conditions.',
+
+    deleteChanged:
+      'This rule changed or was removed. The list was refreshed; review it before deleting.',
+    filterDescription:
+      'Apply conditions to this rule draft, then save the rule to make them effective.',
+    fieldLabels: { name: 'Name', id: 'ID' },
+    delete: 'Delete',
+    title: 'Default data scopes',
+    description:
+      'Adds data access for users with operation permission, combined with role-granted scopes and subject to restriction rules.',
+    manage: 'Manage default data scopes',
+    new: 'New default scope',
+    edit: 'Default scope details',
+    resource: 'Business object',
+    chooseResource: 'Choose a business object',
+    action: 'Operation',
+    scope: 'Data scope',
+    scopes: 'Operations and data scopes',
+    none: 'No default scope',
+    all: 'All records',
+    custom: 'Custom filter',
+    records: 'Selected records ({{count}})',
+    retained: 'Retain existing configuration',
+    search: 'Search business objects or keys',
+    empty: 'No default data scopes',
+    emptyHint:
+      'Create a rule to configure baseline access for a business object.',
+    readOnlyEmpty: 'Ask an administrator to configure baseline data access.',
+    noResources:
+      'Every available business object already has a default rule, or no configurable objects are registered.',
+    unsupported:
+      'This rule includes configuration absent from the current plugin catalog. It is preserved and shown read-only.',
+    changed:
+      'This rule changed or was removed while you were editing. Reload it before saving. Your draft has not been saved.',
+    duplicate:
+      'This key or business object already has a default rule. Use a different key or edit the existing rule.',
+    invalid:
+      'The configuration is not accepted. Check the business object, operation and data scope.',
+    keyRequired: 'Enter a key other than options, subjects or records.',
+    resourceRequired: 'Choose a business object.',
+    reload: 'Reload rule',
+    saved: 'Saved default scope “{{name}}”',
+    deleted: 'Deleted default scope “{{name}}”',
+    deleteTitle: 'Delete default scope “{{name}}”?',
+    deleteHint:
+      'This removes the baseline access supplied by this rule. Existing role grants and other rules remain. This cannot be undone.',
+    back: 'Back to default scopes',
+    open: 'View / edit',
+  },
+  scopeHintFor: 'About the data range for {{name}}',
+  scopeExplanation:
+    'Each range applies to its corresponding data. The operation must also pass its authorization checks.',
+  noAdditionalScopeHint:
+    'This action grants no additional record access here. Default access, sharing and restriction rules still determine actual access.',
+  systemToolsHint:
+    'Manage system configuration and tools. Review the capabilities each action includes before granting access.',
+  userAccountsHint:
+    'Manage user information, account security and role assignments. Review each permission separately.',
+  businessOperationsHint:
+    'Choose the operations this role can perform and the data each operation can use.',
+  pageAccessHint:
+    'Controls which pages this role can open. Data and actions on each page require their own permissions.',
+  roleAssignment: 'Role assignment',
+  accountSecurity: 'Account security',
+  userInformation: 'User information',
   unnamedPage: 'Unnamed page ({{path}})',
   revokeRoles: 'Revoke roles',
   keyConflict: 'This role key is already in use.',
-  userPermissions: 'User management',
+  userPermissions: 'Users and accounts',
   readUsers: 'View users',
   createUsers: 'Create users',
   updateUsers: 'Edit users',
@@ -34,6 +104,7 @@ const settings = {
   username: 'Username',
   email: 'Email',
   password: 'Initial password',
+  roleType: 'Role type',
   roleName: 'Role name',
   key: 'Key',
   status: 'Status',
@@ -95,10 +166,11 @@ const settings = {
   noPermissions: 'No permissions to configure',
   permissionCategories: 'Permission categories',
   selectAllPermissions: 'All',
+  dataRanges: 'Data ranges ({{count}})',
   selectVisiblePermissions: 'Select visible permissions in {{name}}',
   permissionSummary: '{{enabled}} of {{total}} enabled',
   preservedRecordScope: 'Keep existing configuration',
-  noRecordScope: 'No records (not authorized)',
+  noRecordScope: 'No additional record access',
   permissionFilter: {
     limit: 'Up to 20 conditions',
     configure: 'Conditions',

package/client/locales/system/settings-zh-CN.ts

@@ -1,8 +1,70 @@
 const settings = {
+  permissionManagement: '权限管理',
+  defaultAccess: {
+    noResourcesShort: '暂无可配置的业务对象',
+    scopeInvalid: '请重新选择有效的数据范围或完善筛选条件。',
+
+    deleteChanged: '此规则已被修改或删除，列表已刷新，请重新确认后再删除。',
+    filterDescription: '将条件应用到当前规则草稿，保存规则后生效。',
+    fieldLabels: { name: '名称', id: '标识' },
+    delete: '删除',
+    title: '默认数据范围',
+    description:
+      '为已有操作权限的用户补充数据范围，与角色授权范围合并，最终仍受限制规则约束。',
+    manage: '管理默认数据范围',
+    new: '新建默认范围',
+    edit: '默认范围详情',
+    resource: '业务对象',
+    chooseResource: '请选择业务对象',
+    action: '操作',
+    scope: '数据范围',
+    scopes: '操作与数据范围',
+    none: '不设置默认范围',
+    all: '所有记录',
+    custom: '自定义筛选',
+    records: '指定记录（{{count}} 条）',
+    retained: '保留现有配置',
+    search: '搜索业务对象或标识',
+    empty: '暂无默认数据范围',
+    emptyHint: '新建规则，为业务对象配置基础数据访问范围。',
+    readOnlyEmpty: '请联系管理员配置基础数据访问范围。',
+    noResources: '可用业务对象均已配置默认规则，或当前没有可配置的业务对象。',
+    unsupported:
+      '此规则包含当前插件目录中不存在的配置，已保留原值并以只读方式展示。',
+    changed:
+      '此规则在编辑期间已被修改或删除，请重新加载后再保存。当前草稿未保存。',
+    duplicate: '此标识或业务对象已有默认规则，请更换标识或编辑已有规则。',
+    invalid: '配置未通过校验，请检查业务对象、操作和数据范围。',
+    keyRequired: '请填写标识，不能使用 options、subjects 或 records。',
+    resourceRequired: '请选择业务对象。',
+    reload: '重新加载规则',
+    saved: '已保存默认范围“{{name}}”',
+    deleted: '已删除默认范围“{{name}}”',
+    deleteTitle: '删除默认范围“{{name}}”？',
+    deleteHint:
+      '删除后，此规则提供的基础访问范围将失效；已有角色授权和其他规则保留。此操作无法撤销。',
+    back: '返回默认数据范围',
+    open: '查看或编辑',
+  },
+  scopeHintFor: '关于“{{name}}”的数据范围',
+  scopeExplanation:
+    '每项范围分别约束对应数据，实际操作还需通过相应的权限检查。',
+  noAdditionalScopeHint:
+    '此操作在这里不额外授予数据访问权限，实际可访问范围仍取决于默认数据范围、共享与限制规则。',
+  systemToolsHint: '管理系统配置与工具，授权前请确认每项操作包含的能力。',
+  userAccountsHint:
+    '管理用户资料、账号安全和角色分配，请逐项确认需要授予的权限。',
+  businessOperationsHint:
+    '设置此角色可以执行的业务操作，以及每项操作可使用的数据范围。',
+  pageAccessHint:
+    '控制此角色可以进入哪些页面。页面中的数据和操作仍需单独授权。',
+  roleAssignment: '角色分配',
+  accountSecurity: '账号安全',
+  userInformation: '用户资料',
   unnamedPage: '未命名页面（{{path}}）',
   revokeRoles: '撤销角色',
   keyConflict: '此角色标识已被使用。',
-  userPermissions: '用户管理',
+  userPermissions: '用户与账号',
   readUsers: '查看用户',
   createUsers: '创建用户',
   updateUsers: '编辑用户',
@@ -34,6 +96,7 @@ const settings = {
   username: '用户名',
   email: '邮箱',
   password: '初始密码',
+  roleType: '角色类型',
   roleName: '角色名称',
   key: '标识',
   status: '状态',
@@ -92,9 +155,10 @@ const settings = {
   noPermissions: '暂无可配置权限',
   permissionCategories: '权限分类',
   selectAllPermissions: '全选',
+  dataRanges: '数据范围（{{count}}）',
   selectVisiblePermissions: '选择“{{name}}”中显示的权限',
   permissionSummary: '已授权 {{enabled}} / {{total}}',
-  noRecordScope: '不允许访问数据',
+  noRecordScope: '不额外授权数据范围',
   preservedRecordScope: '保留现有配置',
   permissionFilter: {
     limit: '最多支持 20 个条件',