id, tenant_id, resource_type, resource_id, resource_scope, principal_type, principal_id, include_child_orgs, approved_org_scope, action_code, source_type, source_id, valid_from, valid_to, max_use_count, used_count, grant_reason, granted_by_type, granted_by_id, revoked_at, revoked_by_type, revoked_by_id, revoke_reason, revision, created_at, updated_at tenant_id = #{tenantId} AND resource_type = 'FILE_VERSION' AND resource_scope = 'SELF' AND principal_type = 'ORG' AND action_code = 'READ' AND source_type = 'WORKFLOW' AND granted_by_type = 'SERVICE' AND granted_by_id = 'dms-approved-read' AND source_id LIKE 'approved-read:%' AND approved_org_scope IS NOT NULL SELECT f_id AS id FROM public.base_organize WHERE f_tenant_id = #{tenantId} AND f_delete_mark IS NULL AND f_enabled_mark = 1 AND f_id IN #{departmentId} SELECT FROM public.dms_file_permissions WHERE AND resource_id = #{versionId,jdbcType=OTHER,typeHandler=jnpf.dmsDatabase.DmsUuidTypeHandler} ORDER BY id FOR UPDATE UPDATE public.dms_file_permissions SET revoked_at = CURRENT_TIMESTAMP, revoked_by_type = 'SERVICE', revoked_by_id = 'dms-approved-read', revoke_reason = '同版本文件审核正式生效，替换本来源查阅授权', revision = revision + 1 WHERE AND id = #{id,jdbcType=OTHER,typeHandler=jnpf.dmsDatabase.DmsUuidTypeHandler} AND revoked_at IS NULL INSERT INTO public.dms_file_permissions (id, tenant_id, resource_type, resource_id, resource_scope, principal_type, principal_id, include_child_orgs, approved_org_scope, action_code, source_type, source_id, valid_from, grant_reason, granted_by_type, granted_by_id) VALUES (uuidv7(), #{p.tenantId}, 'FILE_VERSION', #{p.resourceId,jdbcType=OTHER,typeHandler=jnpf.dmsDatabase.DmsUuidTypeHandler}, 'SELF', 'ORG', #{p.principalId}, #{p.includeChildOrgs}, #{p.approvedOrgScope}, 'READ', 'WORKFLOW', #{p.sourceId}, #{p.validFrom}, #{p.grantReason}, 'SERVICE', 'dms-approved-read') RETURNING