feat(saas): implement marketplace and tenant onboarding

Tiku.Api/Controllers/TenantContentDirectController.cs

@@ -12,7 +12,6 @@ using Tiku.Domain.Content;
 namespace Tiku.Api.Controllers;
 
 [ApiController]
-[Authorize(Policy = BackendPermissions.TenantContentManage)]
 [Produces("application/json")]
 [Route("api/tenant-content")]
 public sealed class TenantContentDirectController(
@@ -22,7 +21,9 @@ public sealed class TenantContentDirectController(
     ITenantContext currentTenant) : ControllerBase
 {
     [HttpPost("questions")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantContentManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.PrivateQuestionBank)]
     [EndpointSummary("创建题目及首个版本")]
     [ProducesResponseType<ContentManagementResult<QuestionManagementItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<QuestionManagementItem>>> CreateQuestion(
@@ -33,7 +34,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPatch("questions")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantContentManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.PrivateQuestionBank)]
     [EndpointSummary("更新题目并可选择创建新版本")]
     [ProducesResponseType<ContentManagementResult<QuestionManagementItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<QuestionManagementItem>>> UpdateQuestion(
@@ -44,6 +47,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("vocabulary-units")]
+    [Authorize(Policy = BackendPermissions.TenantVocabularyManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Vocabulary)]
     [EndpointSummary("查询管理侧词汇单元")]
     [ProducesResponseType<CatalogList<VocabularyUnit>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<VocabularyUnit>>> GetVocabularyUnits(
@@ -54,6 +59,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("vocabulary-units")]
+    [Authorize(Policy = BackendPermissions.TenantVocabularyManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Vocabulary)]
     [EndpointSummary("新增或更新词汇单元")]
     [ProducesResponseType<ContentManagementResult<VocabularyUnit>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<VocabularyUnit>>> UpsertVocabularyUnit(
@@ -64,7 +71,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("vocabulary-words")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantVocabularyManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Vocabulary)]
     [EndpointSummary("查询管理侧词汇")]
     [ProducesResponseType<CatalogList<VocabularyWord>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<VocabularyWord>>> GetVocabularyWords(
@@ -75,7 +84,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("vocabulary-words")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantVocabularyManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Vocabulary)]
     [EndpointSummary("新增或更新词汇")]
     [ProducesResponseType<ContentManagementResult<VocabularyWord>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<VocabularyWord>>> UpsertVocabularyWord(
@@ -86,6 +97,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("handbook-subjects")]
+    [Authorize(Policy = BackendPermissions.TenantHandbookManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Handbook)]
     [EndpointSummary("查询管理侧知识手册科目")]
     [ProducesResponseType<CatalogList<HandbookSubject>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<HandbookSubject>>> GetHandbookSubjects(
@@ -96,6 +109,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("handbook-subjects")]
+    [Authorize(Policy = BackendPermissions.TenantHandbookManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Handbook)]
     [EndpointSummary("新增或更新知识手册科目")]
     [ProducesResponseType<ContentManagementResult<HandbookSubject>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<HandbookSubject>>> UpsertHandbookSubject(
@@ -106,7 +121,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("handbook-chapters")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantHandbookManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Handbook)]
     [EndpointSummary("查询管理侧知识手册章节")]
     [ProducesResponseType<CatalogList<HandbookChapter>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<HandbookChapter>>> GetHandbookChapters(
@@ -117,7 +134,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("handbook-chapters")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantHandbookManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Handbook)]
     [EndpointSummary("新增或更新知识手册章节")]
     [ProducesResponseType<ContentManagementResult<HandbookChapter>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<HandbookChapter>>> UpsertHandbookChapter(
@@ -128,7 +147,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("handbook-entries")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantHandbookManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Handbook)]
     [EndpointSummary("查询管理侧知识手册条目")]
     [ProducesResponseType<CatalogList<HandbookEntry>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<HandbookEntry>>> GetHandbookEntries(
@@ -139,7 +160,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("handbook-entries")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantHandbookManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Handbook)]
     [EndpointSummary("新增或更新知识手册条目")]
     [ProducesResponseType<ContentManagementResult<HandbookEntry>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<HandbookEntry>>> UpsertHandbookEntry(
@@ -150,6 +173,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("scoreline/schools")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("查询管理侧分数线院校")]
     [ProducesResponseType<CatalogList<School>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<School>>> GetSchools(
@@ -160,6 +185,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("scoreline/schools")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("新增或更新分数线院校")]
     [ProducesResponseType<ContentManagementResult<School>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<School>>> UpsertSchool(
@@ -170,6 +197,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("scoreline/majors")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("查询管理侧分数线专业")]
     [ProducesResponseType<CatalogList<Major>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<Major>>> GetMajors(
@@ -180,6 +209,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("scoreline/majors")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("新增或更新分数线专业")]
     [ProducesResponseType<ContentManagementResult<Major>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<Major>>> UpsertMajor(
@@ -190,6 +221,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("scoreline/fields")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("查询管理侧分数线字段")]
     [ProducesResponseType<CatalogList<ScorelineField>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<ScorelineField>>> GetScorelineFields(
@@ -200,6 +233,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("scoreline/fields")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("新增或更新动态分数线字段")]
     [ProducesResponseType<ContentManagementResult<ScorelineField>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<ScorelineField>>> UpsertScorelineField(
@@ -210,6 +245,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("scoreline/records")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("查询管理侧分数线记录")]
     [ProducesResponseType<CatalogList<ScorelineRecord>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<ScorelineRecord>>> GetScorelineRecords(
@@ -220,6 +257,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("scoreline/records")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("新增或更新分数线记录")]
     [ProducesResponseType<ContentManagementResult<ScorelineRecord>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<ScorelineRecord>>> UpsertScorelineRecord(
@@ -230,6 +269,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("scoreline/years")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("查询分数线年份")]
     [ProducesResponseType<CatalogList<int>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<int>>> GetScorelineYears(
@@ -240,6 +281,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("scoreline/trend")]
+    [Authorize(Policy = BackendPermissions.TenantScorelineManage)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Scoreline)]
     [EndpointSummary("查询分数线趋势摘要")]
     [ProducesResponseType<CatalogList<ScorelineTrendItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<ScorelineTrendItem>>> GetScorelineTrend(
@@ -250,7 +293,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("videos")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantVideoManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Video)]
     [EndpointSummary("查询租户视频解析")]
     [ProducesResponseType<CatalogList<VideoManagementItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<VideoManagementItem>>> GetVideos(
@@ -261,7 +306,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("videos")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantVideoManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Video)]
     [EndpointSummary("新增或更新视频解析")]
     [ProducesResponseType<ContentManagementResult<VideoManagementItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<VideoManagementItem>>> UpsertVideo(
@@ -272,7 +319,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPost("question-videos")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantVideoManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.Video)]
     [EndpointSummary("绑定题目与解析视频")]
     [ProducesResponseType<ContentManagementResult<QuestionVideoManagementItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<QuestionVideoManagementItem>>> BindQuestionVideo(
@@ -283,7 +332,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("operations/{kind}")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantSiteContentManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.SiteContent)]
     [EndpointSummary("查询运营内容")]
     [ProducesResponseType<CatalogList<OperationContentItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<OperationContentItem>>> GetOperationContent(
@@ -295,7 +346,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPut("operations/{kind}")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantSiteContentManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeature(SaasFeatureCatalog.SiteContent)]
     [EndpointSummary("新增或更新运营内容")]
     [ProducesResponseType<ContentManagementResult<OperationContentItem>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentManagementResult<OperationContentItem>>> UpsertOperationContent(
@@ -307,7 +360,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPost("imports/preview/{importType}")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantJobManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeatureFromRoute("importType")]
     [EndpointSummary("预览内容导入数据")]
     [ProducesResponseType<SimpleImportResult>(StatusCodes.Status200OK)]
     public async Task<ActionResult<SimpleImportResult>> PreviewImport(
@@ -319,7 +374,9 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPost("imports/{importType}")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantJobManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
+    [Tiku.Api.Security.RequireSaasFeatureFromRoute("importType")]
     [EndpointSummary("执行或排队内容导入")]
     [ProducesResponseType<SimpleImportResult>(StatusCodes.Status200OK)]
     [ProducesResponseType<BackgroundJobItem>(StatusCodes.Status202Accepted)]
@@ -359,7 +416,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("imports/detail")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantJobManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
     [EndpointSummary("查询内容导入任务详情")]
     [ProducesResponseType<ContentImportJobDetail>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ContentImportJobDetail>> GetImportDetail(
@@ -370,7 +428,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("imports/issues")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantJobManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
     [EndpointSummary("查询内容导入问题明细")]
     [ProducesResponseType<CatalogList<ContentImportIssueModel>>(StatusCodes.Status200OK)]
     public async Task<ActionResult<CatalogList<ContentImportIssueModel>>> GetImportIssues(
@@ -381,7 +440,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpPost("imports/post-check")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantJobManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
     [EndpointSummary("执行内容导入后完整性检查")]
     [ProducesResponseType<ImportPostCheckResult>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ImportPostCheckResult>> RunImportPostCheck(
@@ -392,7 +452,8 @@ public sealed class TenantContentDirectController(
     }
 
     [HttpGet("imports/post-check")]
-    [Authorize(Policy = TikuPolicies.TenantContentManageAllScope)]
+    [Authorize(Policy = BackendPermissions.TenantJobManage)]
+    [Authorize(Policy = TikuPolicies.TenantAllDataScope)]
     [EndpointSummary("查询内容导入后检查状态")]
     [ProducesResponseType<ImportPostCheckResult>(StatusCodes.Status200OK)]
     public async Task<ActionResult<ImportPostCheckResult>> GetImportPostCheck(