132 lines
6.2 KiB
PL/PgSQL
132 lines
6.2 KiB
PL/PgSQL
CREATE TABLE users (
|
|
id SERIAL PRIMARY KEY,
|
|
username VARCHAR(255) NOT NULL UNIQUE,
|
|
password VARCHAR(255) NOT NULL,
|
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
|
|
);
|
|
|
|
|
|
-- Function to update the updated_at timestamp
|
|
CREATE OR REPLACE FUNCTION update_updated_at_column()
|
|
RETURNS TRIGGER AS $$
|
|
BEGIN
|
|
NEW.updated_at = CURRENT_TIMESTAMP;
|
|
RETURN NEW;
|
|
END;
|
|
$$ language 'plpgsql';
|
|
|
|
-- Sequence and defined type for users table if not exists
|
|
CREATE SEQUENCE IF NOT EXISTS users_id_seq;
|
|
|
|
-- Update users table with new fields
|
|
ALTER TABLE "public"."users"
|
|
ADD COLUMN IF NOT EXISTS "email" varchar UNIQUE,
|
|
ADD COLUMN IF NOT EXISTS "is_admin" boolean DEFAULT FALSE,
|
|
ADD COLUMN IF NOT EXISTS "is_active" boolean DEFAULT TRUE,
|
|
ADD COLUMN IF NOT EXISTS "last_login" timestamp with time zone,
|
|
ADD COLUMN IF NOT EXISTS "updated_at" timestamp with time zone DEFAULT CURRENT_TIMESTAMP;
|
|
|
|
-- Create permissions table
|
|
CREATE TABLE IF NOT EXISTS "public"."permissions" (
|
|
"id" SERIAL PRIMARY KEY,
|
|
"name" varchar NOT NULL UNIQUE,
|
|
"code" varchar NOT NULL UNIQUE,
|
|
"description" text,
|
|
"category" varchar NOT NULL,
|
|
"created_at" timestamp with time zone DEFAULT CURRENT_TIMESTAMP,
|
|
"updated_at" timestamp with time zone DEFAULT CURRENT_TIMESTAMP
|
|
);
|
|
|
|
-- Create user_permissions junction table
|
|
CREATE TABLE IF NOT EXISTS "public"."user_permissions" (
|
|
"user_id" int4 NOT NULL REFERENCES "public"."users"("id") ON DELETE CASCADE,
|
|
"permission_id" int4 NOT NULL REFERENCES "public"."permissions"("id") ON DELETE CASCADE,
|
|
"created_at" timestamp with time zone DEFAULT CURRENT_TIMESTAMP,
|
|
PRIMARY KEY ("user_id", "permission_id")
|
|
);
|
|
|
|
-- Add triggers for updated_at on users and permissions
|
|
DROP TRIGGER IF EXISTS update_users_updated_at ON users;
|
|
CREATE TRIGGER update_users_updated_at
|
|
BEFORE UPDATE ON users
|
|
FOR EACH ROW
|
|
EXECUTE FUNCTION update_updated_at_column();
|
|
|
|
DROP TRIGGER IF EXISTS update_permissions_updated_at ON permissions;
|
|
CREATE TRIGGER update_permissions_updated_at
|
|
BEFORE UPDATE ON permissions
|
|
FOR EACH ROW
|
|
EXECUTE FUNCTION update_updated_at_column();
|
|
|
|
-- Insert default permissions by page
|
|
-- Core page access permissions
|
|
INSERT INTO permissions (name, code, description, category) VALUES
|
|
('Dashboard Access', 'access:dashboard', 'Can access the Dashboard page', 'Pages'),
|
|
('Products Access', 'access:products', 'Can access the Products page', 'Pages'),
|
|
('Categories Access', 'access:categories', 'Can access the Categories page', 'Pages'),
|
|
('Vendors Access', 'access:vendors', 'Can access the Vendors page', 'Pages'),
|
|
('Analytics Access', 'access:analytics', 'Can access the Analytics page', 'Pages'),
|
|
('Forecasting Access', 'access:forecasting', 'Can access the Forecasting page', 'Pages'),
|
|
('Purchase Orders Access', 'access:purchase_orders', 'Can access the Purchase Orders page', 'Pages'),
|
|
('Import Access', 'access:import', 'Can access the Import page', 'Pages'),
|
|
('Settings Access', 'access:settings', 'Can access the Settings page', 'Pages'),
|
|
('AI Validation Debug Access', 'access:ai_validation_debug', 'Can access the AI Validation Debug page', 'Pages')
|
|
ON CONFLICT (code) DO NOTHING;
|
|
|
|
-- Granular permissions for Products
|
|
INSERT INTO permissions (name, code, description, category) VALUES
|
|
('View Products', 'view:products', 'Can view product listings', 'Products'),
|
|
('Create Products', 'create:products', 'Can create new products', 'Products'),
|
|
('Edit Products', 'edit:products', 'Can edit product details', 'Products'),
|
|
('Delete Products', 'delete:products', 'Can delete products', 'Products')
|
|
ON CONFLICT (code) DO NOTHING;
|
|
|
|
-- Granular permissions for Categories
|
|
INSERT INTO permissions (name, code, description, category) VALUES
|
|
('View Categories', 'view:categories', 'Can view categories', 'Categories'),
|
|
('Create Categories', 'create:categories', 'Can create new categories', 'Categories'),
|
|
('Edit Categories', 'edit:categories', 'Can edit categories', 'Categories'),
|
|
('Delete Categories', 'delete:categories', 'Can delete categories', 'Categories')
|
|
ON CONFLICT (code) DO NOTHING;
|
|
|
|
-- Granular permissions for Vendors
|
|
INSERT INTO permissions (name, code, description, category) VALUES
|
|
('View Vendors', 'view:vendors', 'Can view vendors', 'Vendors'),
|
|
('Create Vendors', 'create:vendors', 'Can create new vendors', 'Vendors'),
|
|
('Edit Vendors', 'edit:vendors', 'Can edit vendors', 'Vendors'),
|
|
('Delete Vendors', 'delete:vendors', 'Can delete vendors', 'Vendors')
|
|
ON CONFLICT (code) DO NOTHING;
|
|
|
|
-- Granular permissions for Purchase Orders
|
|
INSERT INTO permissions (name, code, description, category) VALUES
|
|
('View Purchase Orders', 'view:purchase_orders', 'Can view purchase orders', 'Purchase Orders'),
|
|
('Create Purchase Orders', 'create:purchase_orders', 'Can create new purchase orders', 'Purchase Orders'),
|
|
('Edit Purchase Orders', 'edit:purchase_orders', 'Can edit purchase orders', 'Purchase Orders'),
|
|
('Delete Purchase Orders', 'delete:purchase_orders', 'Can delete purchase orders', 'Purchase Orders')
|
|
ON CONFLICT (code) DO NOTHING;
|
|
|
|
-- User management permissions
|
|
INSERT INTO permissions (name, code, description, category) VALUES
|
|
('View Users', 'view:users', 'Can view user accounts', 'Users'),
|
|
('Create Users', 'create:users', 'Can create user accounts', 'Users'),
|
|
('Edit Users', 'edit:users', 'Can modify user accounts', 'Users'),
|
|
('Delete Users', 'delete:users', 'Can delete user accounts', 'Users'),
|
|
('Manage Permissions', 'manage:permissions', 'Can assign permissions to users', 'Users')
|
|
ON CONFLICT (code) DO NOTHING;
|
|
|
|
-- System permissions
|
|
INSERT INTO permissions (name, code, description, category) VALUES
|
|
('Run Calculations', 'run:calculations', 'Can trigger system calculations', 'System'),
|
|
('Import Data', 'import:data', 'Can import data into the system', 'System'),
|
|
('System Settings', 'edit:system_settings', 'Can modify system settings', 'System')
|
|
ON CONFLICT (code) DO NOTHING;
|
|
|
|
-- Set any existing users as admin
|
|
UPDATE users SET is_admin = TRUE WHERE is_admin IS NULL;
|
|
|
|
-- Grant all permissions to admin users
|
|
INSERT INTO user_permissions (user_id, permission_id)
|
|
SELECT u.id, p.id
|
|
FROM users u, permissions p
|
|
WHERE u.is_admin = TRUE
|
|
ON CONFLICT DO NOTHING; |