Redesign addVisitor four-phase flow: - Phase1: ALWAYS query person detail (orgIds for policy lookup) - Phase2: candidate = caller floors or org floorList - Phase3: ALWAYS check policy; intersect candidate with allow - Phase4: empty set validation Fixes UC-02 bypass: policy was entirely skipped when caller provided floorIds. Now policy always constrains. Bump v2.0.19
2.1 KiB
cw-elevator-application v2.0.6 发布索引
本版本功能升级说明已单独成文,**仅覆盖「租户访客固定访问楼层」**及配套数据库 DDL,见:
cw-elevator-application-v2.0.6-版本升级说明书
对甲交付(业务表述与排期):
一键构建与发布目录
在仓库根目录、JDK 8 下执行:
export JAVA_HOME=/usr/lib/jvm/java-8-openjdk-amd64
./scripts/release-cw-elevator-application.sh 2.0.6
输出:maven-cw-elevator-application/releases/cw-elevator-application-V2.0.6.<YYYYMMDD>/(目录名含构建日期,与 cw-elevator-application-V1.0.0.20211103 命名风格一致;可用环境变量 RELEASE_DATE_LABEL 指定日期),含 cw-elevator-application-2.0.6.jar、ddl/、发布根目录下的 bootstrap.properties / application*.properties(与星中心/V1 同层摆放,无额外 config/ 子目录)、start.sh / stop.sh / cw-elevator-application.service(路径占位符需现场替换)、run.sh、common-java.sh、collect_elevator_runtime_evidence.sh(根目录,现场只读证据采集)、版本升级说明书.md、甲方与实施类 Markdown、BUILD_MANIFEST.txt;默认另生成 releases/cw-elevator-application-V2.0.6.<YYYYMMDD>.zip(设 RELEASE_MAKE_ZIP=0 可跳过)。
Git 与大文件
maven-cw-elevator-application/.gitignore 忽略 **releases/**/*.jar**;DDL 与说明书可提交;可执行 JAR 请通过制品库或制品服务器分发。