feat: enforce signature-scoped drainage authorization before SMS submission

2026-09-10 13:29:04 +08:00
parent 5bcdbb2a03
commit 0c3f820cc9
35 changed files with 2769 additions and 791 deletions
@@ -539,7 +539,7 @@ function qualityByMessageDimensionSql(day: BusinessDay, dimensionType: 'applicat
      JOIN "Tenant" tenant ON tenant.id = message."tenantId"
      ${applicationJoin}
      LEFT JOIN "SmsSignature" signature ON signature.id = message."signatureId"
-      LEFT JOIN "SmsDrainageInfo" drainage ON drainage.id = message."drainageInfoId"
+      LEFT JOIN "SmsDrainageInfo" drainage ON ${dimensionType === 'drainage' ? Prisma.sql`(CASE WHEN message."drainageGate" IS NULL THEN drainage.id = message."drainageInfoId" ELSE EXISTS (SELECT 1 FROM jsonb_array_elements(COALESCE(message."drainageGate"->'targets', '[]'::jsonb)) target WHERE target->'materialIds' ? drainage.id) END)` : Prisma.sql`drainage.id = message."drainageInfoId"`}
      WHERE message."queuedAt" >= ${day.startAt}
        AND message."queuedAt" < ${day.endAt}
    ), thresholds AS (