fix: hide locked cloud policy by default (#7614)

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>

pkg/apis/cloudid/cloudpolicy.go

@@ -54,6 +54,9 @@ type CloudpolicyListInput struct {
 	// | system  |  过滤系统权限		|
 	// | custom  |  过滤自定义权限      |
 	PolicyType string `json:"policy_type"`
+
+	// 是否显示Locked的权限
+	Locked *bool `json:"locked"`
 }
 
 type CloudpolicyDetails struct {

pkg/cloudid/models/cloudpolicy.go

@@ -147,6 +147,10 @@ func (manager *SCloudpolicyManager) ListItemFilter(ctx context.Context, q *sqlch
 		q = q.In("id", sq.SubQuery())
 	}
 
+	if query.Locked == nil || !*query.Locked {
+		q = q.IsFalse("locked")
+	}
+
 	return q, nil
 }
 

pkg/mcclient/modules/mod_cloudpolicy.go

@@ -22,7 +22,7 @@ var (
 
 func init() {
 	Cloudpolicies = NewCloudIdManager("cloudpolicy", "cloudpolicies",
-		[]string{},
+		[]string{"id", "name", "description", "domain_id", "domain", "public_scope", "policy_type", "status", "locked"},
 		[]string{})
 
 	register(&Cloudpolicies)