最终设计结论

升鲜宝字段权限不能只做“前端隐藏列”。最终应建设为统一字段安全底座，覆盖列表、详情、表单、新增、修改、审核、反审核、查询、排序、导入导出、打印、PDF/图片生成、分享码外部查看等全链路场景。

最终字段权限 =

租户 + 用户 + 角色 + 部门 + 岗位 + 门店

+ 资源编码 resource_code

+ 场景编码 scene_code

+ 字段编码 field_code

+ 操作类型 operation_type

+ 字段敏感等级 sensitivity_level

+ 默认策略 + 场景策略 + 授权策略 + 显式拒绝策略

tenant_id

+ resource_code

+ scene_code

+ field_code

+ operation_type

+ subject_type

+ subject_id

field_code = costPrice

field_path = detailList[].costPrice

db_table = pms_goods

db_column = cost_price

CREATE TABLE sys_field_resource (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL DEFAULT 0 COMMENT '租户ID，0表示系统级资源',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码，如 pms.goods',

    resource_name VARCHAR(100) NOT NULL COMMENT '资源名称，如 商品档案',

    domain_code VARCHAR(50) NOT NULL COMMENT '领域编码，如 pms/oms/wms/crm/fin',

    module_code VARCHAR(50) DEFAULT NULL COMMENT '模块编码',

    main_table VARCHAR(100) DEFAULT NULL COMMENT '主表名',

    entity_class VARCHAR(255) DEFAULT NULL COMMENT 'Entity类名',

    vo_class VARCHAR(255) DEFAULT NULL COMMENT 'VO类名',

    remark VARCHAR(500) DEFAULT NULL COMMENT '备注',

    status TINYINT NOT NULL DEFAULT 1 COMMENT '状态：0停用，1启用',

    create_by BIGINT DEFAULT NULL COMMENT '创建人',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_by BIGINT DEFAULT NULL COMMENT '更新人',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_tenant_resource (tenant_id, resource_code),

    KEY idx_domain_code (domain_code),

    KEY idx_module_code (module_code)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-字段资源表';

CREATE TABLE sys_field_define (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL DEFAULT 0 COMMENT '租户ID，0表示系统级字段',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码',

    field_code VARCHAR(100) NOT NULL COMMENT '字段编码，如 costPrice',

    field_name VARCHAR(100) NOT NULL COMMENT '字段名称，如 成本价',

    field_path VARCHAR(200) NOT NULL COMMENT '字段路径，支持 detailList[].costPrice',

    db_table VARCHAR(100) DEFAULT NULL COMMENT '数据库表名',

    db_table_alias VARCHAR(50) DEFAULT NULL COMMENT 'SQL表别名',

    db_column VARCHAR(100) DEFAULT NULL COMMENT '数据库字段名，如 cost_price',

    data_type VARCHAR(50) DEFAULT NULL COMMENT '数据类型',

    sensitivity_level TINYINT NOT NULL DEFAULT 1 COMMENT '敏感等级：1普通，2内部，3敏感，4高敏，5极高敏',

    default_read_mode VARCHAR(20) NOT NULL DEFAULT 'PLAIN' COMMENT '默认读取模式',

    default_edit_mode VARCHAR(20) NOT NULL DEFAULT 'EDITABLE' COMMENT '默认编辑模式',

    default_query_mode VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '默认查询模式',

    default_sort_mode VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '默认排序模式',

    default_import_mode VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '默认导入模式',

    default_export_mode VARCHAR(20) NOT NULL DEFAULT 'PLAIN' COMMENT '默认导出模式',

    default_print_mode VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '默认打印模式',

    default_render_mode VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '默认PDF/图片生成模式',

    default_share_mode VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '默认分享模式',

    mask_rule_code VARCHAR(50) DEFAULT NULL COMMENT '默认脱敏规则编码',

    frontend_component VARCHAR(50) DEFAULT NULL COMMENT '前端组件类型',

    sort_no INT NOT NULL DEFAULT 0 COMMENT '排序号',

    remark VARCHAR(500) DEFAULT NULL COMMENT '备注',

    status TINYINT NOT NULL DEFAULT 1 COMMENT '状态：0停用，1启用',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_resource_field (tenant_id, resource_code, field_code),

    KEY idx_resource_code (resource_code),

    KEY idx_sensitivity_level (sensitivity_level),

    KEY idx_db_column (db_table, db_column)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-字段定义表';

CREATE TABLE sys_field_scene (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL DEFAULT 0 COMMENT '租户ID，0表示系统级场景',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码',

    scene_code VARCHAR(150) NOT NULL COMMENT '场景编码',

    scene_name VARCHAR(100) NOT NULL COMMENT '场景名称',

    scene_type VARCHAR(50) NOT NULL COMMENT '场景类型：LIST/DETAIL/FORM/EXPORT/PRINT/SHARE/API',

    terminal_type VARCHAR(50) NOT NULL DEFAULT 'ADMIN' COMMENT

        '终端：ADMIN/MOBILE/MINIAPP/POS/SHARE',

    biz_action VARCHAR(50) DEFAULT NULL COMMENT '业务动作：VIEW/CREATE/UPDATE/APPROVE/EXPORT',

    remark VARCHAR(500) DEFAULT NULL COMMENT '备注',

    status TINYINT NOT NULL DEFAULT 1 COMMENT '状态：0停用，1启用',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_scene_code (tenant_id, scene_code),

    KEY idx_resource_code (resource_code),

    KEY idx_scene_type (scene_type),

    KEY idx_terminal_type (terminal_type)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-字段场景表';

CREATE TABLE sys_field_scene_field (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL DEFAULT 0 COMMENT '租户ID',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码',

    scene_code VARCHAR(150) NOT NULL COMMENT '场景编码',

    field_code VARCHAR(100) NOT NULL COMMENT '字段编码',

    read_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认读取模式',

    edit_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认编辑模式',

    query_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认查询模式',

    sort_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认排序模式',

    import_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认导入模式',

    export_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认导出模式',

    print_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认打印模式',

    render_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认渲染模式',

    share_mode VARCHAR(20) DEFAULT NULL COMMENT '场景默认分享模式',

    visible_flag TINYINT NOT NULL DEFAULT 1 COMMENT '前端是否显示：0否，1是',

    readonly_flag TINYINT NOT NULL DEFAULT 0 COMMENT '前端是否只读：0否，1是',

    required_flag TINYINT NOT NULL DEFAULT 0 COMMENT '是否必填：0否，1是',

    status TINYINT NOT NULL DEFAULT 1 COMMENT '状态：0停用，1启用',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_scene_field (tenant_id, scene_code, field_code),

    KEY idx_resource_scene (tenant_id, resource_code, scene_code)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-场景字段默认策略表';

CREATE TABLE sys_field_policy (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL COMMENT '租户ID',

    policy_code VARCHAR(100) NOT NULL COMMENT '策略编码',

    policy_name VARCHAR(100) NOT NULL COMMENT '策略名称',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码',

    scene_code VARCHAR(150) NOT NULL COMMENT '场景编码',

    subject_type VARCHAR(30) NOT NULL COMMENT '主体类型：USER/ROLE/DEPT/POST/SHOP/TENANT',

    subject_id BIGINT NOT NULL COMMENT '主体ID',

    effect VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '效果：ALLOW/DENY',

    priority INT NOT NULL DEFAULT 100 COMMENT '优先级，数字越小优先级越高',

    effective_start_time DATETIME DEFAULT NULL COMMENT '生效开始时间',

    effective_end_time DATETIME DEFAULT NULL COMMENT '生效结束时间',

    remark VARCHAR(500) DEFAULT NULL COMMENT '备注',

    status TINYINT NOT NULL DEFAULT 1 COMMENT '状态：0停用，1启用',

    create_by BIGINT DEFAULT NULL COMMENT '创建人',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_by BIGINT DEFAULT NULL COMMENT '更新人',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_policy_subject (tenant_id, resource_code, scene_code, subject_type, subject_id),

    KEY idx_subject (tenant_id, subject_type, subject_id),

    KEY idx_resource_scene (tenant_id, resource_code, scene_code),

    KEY idx_status_time (status, effective_start_time, effective_end_time)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-字段授权策略主表';

CREATE TABLE sys_field_policy_item (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL COMMENT '租户ID',

    policy_id BIGINT NOT NULL COMMENT '策略主表ID',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码',

    scene_code VARCHAR(150) NOT NULL COMMENT '场景编码',

    field_code VARCHAR(100) NOT NULL COMMENT '字段编码',

    read_mode VARCHAR(20) DEFAULT NULL COMMENT '读取权限',

    edit_mode VARCHAR(20) DEFAULT NULL COMMENT '编辑权限',

    query_mode VARCHAR(20) DEFAULT NULL COMMENT '查询权限',

    sort_mode VARCHAR(20) DEFAULT NULL COMMENT '排序权限',

    import_mode VARCHAR(20) DEFAULT NULL COMMENT '导入权限',

    export_mode VARCHAR(20) DEFAULT NULL COMMENT '导出权限',

    print_mode VARCHAR(20) DEFAULT NULL COMMENT '打印权限',

    render_mode VARCHAR(20) DEFAULT NULL COMMENT 'PDF/图片生成权限',

    share_mode VARCHAR(20) DEFAULT NULL COMMENT '分享权限',

    mask_rule_code VARCHAR(50) DEFAULT NULL COMMENT '脱敏规则',

    condition_json JSON DEFAULT NULL COMMENT '条件表达式',

    effect VARCHAR(20) NOT NULL DEFAULT 'ALLOW' COMMENT '效果：ALLOW/DENY',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_policy_field (tenant_id, policy_id, field_code),

    KEY idx_resource_scene_field (tenant_id, resource_code, scene_code, field_code),

    KEY idx_field_code (field_code)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-字段授权策略明细表';

CREATE TABLE sys_field_mask_rule (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL DEFAULT 0 COMMENT '租户ID，0表示系统级规则',

    rule_code VARCHAR(50) NOT NULL COMMENT '规则编码，如 MOBILE/ID_CARD/BANK_CARD',

    rule_name VARCHAR(100) NOT NULL COMMENT '规则名称',

    rule_type VARCHAR(50) NOT NULL COMMENT '规则类型：MOBILE/EMAIL/ID_CARD/BANK_CARD/ADDRESS/CUSTOM',

    rule_config JSON DEFAULT NULL COMMENT '规则配置JSON',

    example_before VARCHAR(200) DEFAULT NULL COMMENT '脱敏前示例',

    example_after VARCHAR(200) DEFAULT NULL COMMENT '脱敏后示例',

    remark VARCHAR(500) DEFAULT NULL COMMENT '备注',

    status TINYINT NOT NULL DEFAULT 1 COMMENT '状态：0停用，1启用',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_rule_code (tenant_id, rule_code)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-脱敏规则表';

CREATE TABLE sys_field_permission_log (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL COMMENT '租户ID',

    user_id BIGINT NOT NULL COMMENT '操作用户ID',

    username VARCHAR(100) DEFAULT NULL COMMENT '用户名',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码',

    scene_code VARCHAR(150) NOT NULL COMMENT '场景编码',

    field_code VARCHAR(100) NOT NULL COMMENT '字段编码',

    operation_type VARCHAR(50) NOT NULL COMMENT '动作类型：READ/UPDATE/QUERY/EXPORT/PRINT/SHARE',

    permission_result VARCHAR(50) NOT NULL COMMENT '权限结果：PLAIN/MASK/HIDE/FORBIDDEN',

    request_uri VARCHAR(500) DEFAULT NULL COMMENT '请求URI',

    request_method VARCHAR(20) DEFAULT NULL COMMENT '请求方法',

    request_param JSON DEFAULT NULL COMMENT '请求参数',

    ip VARCHAR(50) DEFAULT NULL COMMENT 'IP地址',

    user_agent VARCHAR(500) DEFAULT NULL COMMENT 'User-Agent',

    risk_level TINYINT NOT NULL DEFAULT 1 COMMENT '风险等级：1低，2中，3高，4严重',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    KEY idx_user_time (tenant_id, user_id, create_time),

    KEY idx_resource_scene (tenant_id, resource_code, scene_code),

    KEY idx_field_action (field_code, operation_type),

    KEY idx_risk_level (risk_level)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-命中日志表';

CREATE TABLE sys_field_policy_change_log (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL COMMENT '租户ID',

    operator_id BIGINT NOT NULL COMMENT '操作人ID',

    operator_name VARCHAR(100) DEFAULT NULL COMMENT '操作人名称',

    change_type VARCHAR(30) NOT NULL COMMENT 'CREATE/UPDATE/DELETE/ENABLE/DISABLE',

    resource_code VARCHAR(100) DEFAULT NULL COMMENT '资源编码',

    scene_code VARCHAR(150) DEFAULT NULL COMMENT '场景编码',

    policy_id BIGINT DEFAULT NULL COMMENT '策略ID',

    before_json JSON DEFAULT NULL COMMENT '变更前JSON',

    after_json JSON DEFAULT NULL COMMENT '变更后JSON',

    ip VARCHAR(50) DEFAULT NULL COMMENT 'IP地址',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    KEY idx_operator_time (tenant_id, operator_id, create_time),

    KEY idx_policy_id (policy_id),

    KEY idx_resource_scene (resource_code, scene_code)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-策略变更日志表';

CREATE TABLE sys_field_cache_version (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL COMMENT '租户ID',

    version_no BIGINT NOT NULL DEFAULT 1 COMMENT '当前版本号',

    last_refresh_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '最后刷新时间',

    remark VARCHAR(500) DEFAULT NULL COMMENT '备注',

    UNIQUE KEY uk_tenant_id (tenant_id)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-缓存版本表';

CREATE TABLE sys_field_api_bind (

    id BIGINT NOT NULL PRIMARY KEY COMMENT '主键ID',

    tenant_id BIGINT NOT NULL DEFAULT 0 COMMENT '租户ID，0表示系统级绑定',

    request_uri VARCHAR(500) NOT NULL COMMENT '接口URI，支持精确匹配或Ant模式',

    request_method VARCHAR(20) NOT NULL COMMENT 'GET/POST/PUT/DELETE',

    resource_code VARCHAR(100) NOT NULL COMMENT '资源编码',

    scene_code VARCHAR(150) NOT NULL COMMENT '场景编码',

    operation_type VARCHAR(50) NOT NULL COMMENT 'READ/CREATE/UPDATE/QUERY/EXPORT/PRINT/SHARE',

    match_type VARCHAR(20) NOT NULL DEFAULT 'EXACT' COMMENT 'EXACT/ANT/REGEX',

    remark VARCHAR(500) DEFAULT NULL COMMENT '备注',

    status TINYINT NOT NULL DEFAULT 1 COMMENT '状态：0停用，1启用',

    create_time DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',

    update_time DATETIME DEFAULT NULL ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',

    deleted TINYINT NOT NULL DEFAULT 0 COMMENT '逻辑删除：0否，1是',

    UNIQUE KEY uk_api_bind (tenant_id, request_uri, request_method, operation_type),

    KEY idx_resource_scene (tenant_id, resource_code, scene_code)

) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='统一字段权限-接口资源场景绑定表';

com.sxb.system.fieldpermission

├── annotation

│   ├── SxbFieldPermission.java

│   ├── SxbFieldWriteCheck.java

│   └── SxbFieldExportCheck.java

├── api

│   ├── FieldResourceController.java

│   ├── FieldDefineController.java

│   ├── FieldSceneController.java

│   ├── FieldPolicyController.java

│   └── FieldSchemaController.java

├── application

│   ├── FieldPermissionAppService.java

│   ├── FieldPolicyAppService.java

│   ├── FieldSchemaAppService.java

│   └── FieldAuditAppService.java

├── domain

│   ├── engine

│   │   ├── FieldPermissionEngine.java

│   │   ├── FieldPolicyMatchEngine.java

│   │   ├── FieldPolicyMergeEngine.java

│   │   ├── FieldMaskEngine.java

│   │   └── FieldPermissionCacheService.java

│   ├── model

│   │   ├── FieldPermissionContext.java

│   │   ├── FieldPermissionSnapshot.java

│   │   ├── FieldPermissionItem.java

│   │   └── FieldMaskResult.java

│   └── enums

│       ├── FieldOperationTypeEnum.java

│       ├── FieldReadModeEnum.java

│       ├── FieldEditModeEnum.java

│       ├── FieldQueryModeEnum.java

│       ├── FieldExportModeEnum.java

│       └── FieldSensitivityLevelEnum.java

├── infrastructure

│   ├── entity

│   ├── mapper

│   ├── repository

│   └── cache

└── support

    ├── FieldPermissionAspect.java

    ├── FieldPermissionResponseAdvice.java

    ├── FieldWriteCheckAspect.java

    ├── FieldQueryGuard.java

    ├── FieldExportGuard.java

    ├── FieldPrintGuard.java

    └── FieldShareGuard.java

public interface FieldPermissionEngine {

    FieldPermissionSnapshot calculate(FieldPermissionContext context);

    <T> T filterReadResult(T data, FieldPermissionContext context);

    <T> List<T> filterReadList(List<T> dataList, FieldPermissionContext context);

    void checkCreateFields(Object dto, FieldPermissionContext context);

    void checkUpdateFields(Object dto, FieldPermissionContext context);

    void checkQueryFields(QueryRequest queryRequest, FieldPermissionContext context);

    void checkSortFields(QueryRequest queryRequest, FieldPermissionContext context);

    List<ExportField> filterExportFields(List<ExportField> fields, FieldPermissionContext

        context);

    Map<String, Object> filterPrintData(Map<String, Object> data, FieldPermissionContext

        context);

    Map<String, Object> filterShareData(Map<String, Object> data, FieldPermissionContext

        context);

}

@Data

public class FieldPermissionContext {

    private Long tenantId;

    private Long userId;

    private String username;

    private List<Long> roleIds;

    private List<Long> deptIds;

    private List<Long> postIds;

    private Long shopId;

    private String terminalType;

    private String resourceCode;

    private String sceneCode;

    private FieldOperationTypeEnum operationType;

    private String requestUri;

    private String requestMethod;

    private Boolean superAdmin;

    private Map<String, Object> bizContext;

}

@Data

public class FieldPermissionSnapshot {

    private Long tenantId;

    private Long userId;

    private String resourceCode;

    private String sceneCode;

    private String operationType;

    private Long versionNo;

    private Map<String, FieldPermissionItem> fieldMap;

}

@Data

public class FieldPermissionItem {

    private String fieldCode;

    private String fieldName;

    private String fieldPath;

    private Integer sensitivityLevel;

    private String readMode;

    private String editMode;

    private String queryMode;

    private String sortMode;

    private String importMode;

    private String exportMode;

    private String printMode;

    private String renderMode;

    private String shareMode;

    private String maskRuleCode;

    private Boolean visible;

    private Boolean editable;

    private Boolean queryable;

    private Boolean exportable;

    private Boolean printable;

    private Boolean shareable;

}

@Target(ElementType.METHOD)

@Retention(RetentionPolicy.RUNTIME)

public @interface SxbFieldPermission {

    String resourceCode();

    String sceneCode();

    FieldOperationTypeEnum operationType() default FieldOperationTypeEnum.READ;

}

@SxbFieldPermission(

    resourceCode = "pms.goods",

    sceneCode = "admin.sales.order.create.selectGoods",

    operationType = FieldOperationTypeEnum.READ

)

@GetMapping("/goods/select")

public List<GoodsSelectVO> selectGoods(GoodsSelectQueryDTO queryDTO) {

    return goodsService.selectGoods(queryDTO);

}

Controller 返回 VO / List / Page

    ↓

ResponseBodyAdvice 拦截

    ↓

读取 SxbFieldPermission 或 sys_field_api_bind

    ↓

构建 FieldPermissionContext

    ↓

FieldPermissionEngine.calculate()

    ↓

对字段执行 PLAIN / MASK / HIDE / FORBIDDEN

    ↓

返回前端安全结果

@Target(ElementType.METHOD)

@Retention(RetentionPolicy.RUNTIME)

public @interface SxbFieldWriteCheck {

    String resourceCode();

    String sceneCode();

    FieldOperationTypeEnum operationType();

}

@SxbFieldWriteCheck(

    resourceCode = "crm.customer",

    sceneCode = "admin.crm.customer.update",

    operationType = FieldOperationTypeEnum.UPDATE

)

@PostMapping("/update")

public Boolean update(@RequestBody CustomerUpdateDTO dto) {

    return customerService.update(dto);

}

编辑校验关键点

修改接口不能只判断 DTO 中是否存在字段，还要对比数据库原值。无权限字段如果没有发生变更可放行，如果发生变更必须拒绝。

前端提交查询条件

    ↓

QueryFacade 解析 queryFields / sortFields / selectFields

    ↓

FieldPermissionEngine.checkQueryFields()

    ↓

FieldPermissionEngine.checkSortFields()

    ↓

无权限字段直接拒绝

    ↓

构建安全 SQL

FieldPermissionContext context = new FieldPermissionContext();

context.setTenantId(tenantId);

context.setUserId(0L);

context.setTerminalType("SHARE");

context.setResourceCode("oms.deliveryBill");

context.setSceneCode("share.customer.delivery.view");

context.setOperationType(FieldOperationTypeEnum.SHARE);

GET /api/system/field-permission/schema

Request:

{

  "resourceCode": "pms.goods",

  "sceneCode": "admin.sales.order.create.selectGoods"

}

Response:

{

  "resourceCode": "pms.goods",

  "sceneCode": "admin.sales.order.create.selectGoods",

  "versionNo": 12,

  "fields": [

    {

      "fieldCode": "goodsName",

      "fieldName": "商品名称",

      "visible": true,

      "editable": false,

      "queryable": true,

      "sortable": true,

      "exportable": true,

      "printable": true,

      "shareable": true,

      "mask": false,

      "component": "input",

      "sortNo": 10

    },

    {

      "fieldCode": "costPrice",

      "fieldName": "成本价",

      "visible": false,

      "editable": false,

      "queryable": false,

      "sortable": false,

      "exportable": false,

      "printable": false,

      "shareable": false,

      "mask": false,

      "component": "amount",

      "sortNo": 90

    }

  ]

}

useFieldPermission(resourceCode, sceneCode)

返回能力：

{

  fieldMap,

  canVisible,

  canEdit,

  canQuery,

  canExport,

  canPrint,

  filterColumns,

  filterFormItems,

  filterQueryItems,

  filterExportFields

}

系统设置

└── 权限中心

    ├── 菜单权限

    ├── 按钮权限

    ├── 数据权限

    ├── 字段权限

    │   ├── 字段资源管理

    │   ├── 字段定义管理

    │   ├── 字段场景管理

    │   ├── 字段授权管理

    │   └── 脱敏规则管理

    └── 权限审计日志

脱敏原则

脱敏不是简单字符串替换。必须根据字段类型、字段长度、终端类型、场景类型决定脱敏策略。例如司机可临时拨打客户电话，但页面仍可显示脱敏号码；财务可查看完整客户手机号，但导出时仍可配置脱敏。

管理员修改字段权限

    ↓

保存 sys_field_policy / sys_field_policy_item

    ↓

写入 sys_field_policy_change_log

    ↓

sys_field_cache_version.version_no + 1

    ↓

发布 Redis Topic

    ↓

各服务清理 Caffeine 本地缓存

    ↓

下一次请求重新计算权限

field.permission.enabled=true

field.permission.schema.enabled=true

field.permission.read-filter.enabled=false

field.permission.write-check.enabled=false

field.permission.query-check.enabled=false

field.permission.export-check.enabled=false

field.permission.print-check.enabled=false

field.permission.share-check.enabled=false

-- 脱敏规则初始化

INSERT INTO sys_field_mask_rule

(id, tenant_id, rule_code, rule_name, rule_type, rule_config, example_before, example_after,

    status)

VALUES

(1, 0, 'MOBILE', '手机号脱敏', 'MOBILE', JSON_OBJECT('prefix',3,'suffix',4), '13812345678',

    '138****5678', 1),

(2, 0, 'EMAIL', '邮箱脱敏', 'EMAIL', JSON_OBJECT('prefix',1), 'abc@test.com', 'a***@test.com', 1),

(3, 0, 'ID_CARD', '身份证脱敏', 'ID_CARD', JSON_OBJECT('prefix',4,'suffix',4), '330102199001011234',

    '3301**********1234', 1),

(4, 0, 'BANK_CARD', '银行卡脱敏', 'BANK_CARD', JSON_OBJECT('suffix',4), '6222021234567890123', '****

    **** **** 0123', 1);

-- 商品资源初始化

INSERT INTO sys_field_resource

(id, tenant_id, resource_code, resource_name, domain_code, module_code, main_table, vo_class,

    status)

VALUES

(1001, 0, 'pms.goods', '商品档案', 'pms', 'goods', 'pms_goods', 'com.sxb.pms.vo.GoodsVO', 1);

-- 商品高敏字段示例

INSERT INTO sys_field_define

(id, tenant_id, resource_code, field_code, field_name, field_path, db_table, db_column,

 data_type, sensitivity_level, default_read_mode, default_export_mode, default_share_mode,

     status)

VALUES

(1101, 0, 'pms.goods', 'costPrice', '成本价', 'costPrice', 'pms_goods', 'cost_price',

 'decimal', 4, 'HIDE', 'FORBIDDEN', 'FORBIDDEN', 1),

(1102, 0, 'pms.goods', 'grossProfitRate', '毛利率', 'grossProfitRate', 'pms_goods',

    'gross_profit_rate',

 'decimal', 4, 'HIDE', 'FORBIDDEN', 'FORBIDDEN', 1);

最终推荐方案

升鲜宝统一字段权限应作为系统级基础能力建设，而不是单个模块的补丁。最终落地形态是：字段资源中心 + 字段定义中心 + 业务场景中心 + 授权策略中心 + 脱敏中心 + 字段权限引擎 + 前端 Schema + 后端全链路强校验 + 审计告警。