851e585b9b
Add ISC license headers to all .go, .ts, .tsx, and .sql files using each file's git history to determine the correct copyright year or year range. Trademarked icons (brand logos, vendor logos, compliance framework logos) are excluded. Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
59 lines
2.3 KiB
SQL
59 lines
2.3 KiB
SQL
-- Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
|
|
--
|
|
-- Permission to use, copy, modify, and/or distribute this software for any
|
|
-- purpose with or without fee is hereby granted, provided that the above
|
|
-- copyright notice and this permission notice appear in all copies.
|
|
--
|
|
-- THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
-- REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
-- AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
-- INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
-- LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
-- OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
-- PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
-- Create authorization tables for the new authz service
|
|
-- This migration creates the new authz tables while keeping the existing users_organizations table
|
|
-- for backward compatibility during the transition
|
|
|
|
-- Create role enum
|
|
CREATE TYPE authz_role AS ENUM ('OWNER', 'ADMIN', 'MEMBER', 'VIEWER');
|
|
|
|
-- Create authz_memberships table with id as primary key
|
|
CREATE TABLE authz_memberships (
|
|
id TEXT PRIMARY KEY,
|
|
tenant_id TEXT NOT NULL,
|
|
user_id TEXT NOT NULL,
|
|
organization_id TEXT NOT NULL,
|
|
role authz_role NOT NULL,
|
|
created_at TIMESTAMP NOT NULL,
|
|
updated_at TIMESTAMP NOT NULL,
|
|
UNIQUE (user_id, organization_id)
|
|
);
|
|
|
|
-- Create authz_invitations table
|
|
CREATE TABLE authz_invitations (
|
|
id TEXT PRIMARY KEY,
|
|
tenant_id TEXT NOT NULL,
|
|
organization_id TEXT NOT NULL,
|
|
email TEXT NOT NULL,
|
|
full_name TEXT NOT NULL,
|
|
role authz_role NOT NULL,
|
|
expires_at TIMESTAMP NOT NULL,
|
|
accepted_at TIMESTAMP,
|
|
created_at TIMESTAMP NOT NULL
|
|
);
|
|
|
|
-- Copy data from users_organizations to authz_memberships
|
|
INSERT INTO authz_memberships (tenant_id, id, user_id, organization_id, role, created_at, updated_at)
|
|
SELECT
|
|
organizations.tenant_id,
|
|
generate_gid(decode_base64_unpadded(organizations.tenant_id), 39) as id,
|
|
users_organizations.user_id,
|
|
users_organizations.organization_id,
|
|
'MEMBER'::authz_role as role, -- Default role for existing memberships
|
|
users_organizations.created_at,
|
|
users_organizations.created_at as updated_at
|
|
FROM users_organizations
|
|
JOIN organizations ON users_organizations.organization_id = organizations.id;
|