water/server/plugin/saiadmin/db/20260827_add_agent_destroy_permission.sql

-- 代理删除（禁用）接口权限，可重复执行。

INSERT INTO `sa_system_menu` (
    `parent_id`, `name`, `code`, `slug`, `type`, `path`, `component`, `method`, `icon`, `sort`,
    `link_url`, `is_iframe`, `is_keep_alive`, `is_hidden`, `is_fixed_tab`, `is_full_page`,
    `generate_id`, `generate_key`, `status`, `remark`, `created_by`, `updated_by`, `create_time`, `update_time`, `delete_time`
)
SELECT agent_menu.`id`, '删除代理', 'AgentDestroy', 'core:agent:destroy', 3,
       NULL, NULL, 'POST', NULL, 86,
       NULL, 2, 2, 2, 2, 2, 0, NULL, 1,
       '禁用无下级账号、商户和设备关联的代理', 1, 1, NOW(), NOW(), NULL
FROM `sa_system_menu` agent_menu
WHERE agent_menu.`code` = 'Agent' AND agent_menu.`delete_time` IS NULL
  AND NOT EXISTS (SELECT 1 FROM `sa_system_menu` WHERE `slug` = 'core:agent:destroy' AND `delete_time` IS NULL);

UPDATE `sa_system_menu`
SET `name` = '删除代理', `method` = 'POST', `remark` = '禁用无下级账号、商户和设备关联的代理', `update_time` = NOW()
WHERE `slug` = 'core:agent:destroy' AND `delete_time` IS NULL;

-- 已有代理列表权限的角色自动获得删除权限。
INSERT INTO `sa_system_role_menu` (`role_id`, `menu_id`)
SELECT DISTINCT source_role.`role_id`, target_menu.`id`
FROM `sa_system_role_menu` source_role
INNER JOIN `sa_system_menu` source_menu
        ON source_menu.`id` = source_role.`menu_id`
       AND source_menu.`code` IN ('MyAgent', 'SubordinateAgent')
       AND source_menu.`delete_time` IS NULL
INNER JOIN `sa_system_menu` target_menu
        ON target_menu.`slug` = 'core:agent:destroy'
       AND target_menu.`delete_time` IS NULL
LEFT JOIN `sa_system_role_menu` existing_role
       ON existing_role.`role_id` = source_role.`role_id`
      AND existing_role.`menu_id` = target_menu.`id`
WHERE existing_role.`id` IS NULL;