code cleanup in partner sql files
This commit is contained in:
parent
d13f0cbcdf
commit
21a4519743
@ -6,7 +6,7 @@
|
|||||||
|
|
||||||
create table if not exists hs_office_partner
|
create table if not exists hs_office_partner
|
||||||
(
|
(
|
||||||
uuid uuid unique references RbacObject (uuid) initially deferred, -- on delete cascade
|
uuid uuid unique references RbacObject (uuid) initially deferred,
|
||||||
personUuid uuid not null references hs_office_person(uuid),
|
personUuid uuid not null references hs_office_person(uuid),
|
||||||
contactUuid uuid not null references hs_office_contact(uuid),
|
contactUuid uuid not null references hs_office_contact(uuid),
|
||||||
registrationOffice varchar(96),
|
registrationOffice varchar(96),
|
||||||
|
@ -50,7 +50,7 @@ begin
|
|||||||
beneathRole(globalAdmin())
|
beneathRole(globalAdmin())
|
||||||
);
|
);
|
||||||
|
|
||||||
-- the admin role with full access for the global admins
|
-- the admin role with full access for owner
|
||||||
adminRole = createRole(
|
adminRole = createRole(
|
||||||
hsOfficePartnerAdmin(NEW),
|
hsOfficePartnerAdmin(NEW),
|
||||||
grantingPermissions(forObjectUuid => NEW.uuid, permitOps => array ['edit']),
|
grantingPermissions(forObjectUuid => NEW.uuid, permitOps => array ['edit']),
|
||||||
@ -61,8 +61,13 @@ begin
|
|||||||
perform createRole(
|
perform createRole(
|
||||||
hsOfficePartnerTenant,
|
hsOfficePartnerTenant,
|
||||||
grantingPermissions(forObjectUuid => NEW.uuid, permitOps => array ['view']),
|
grantingPermissions(forObjectUuid => NEW.uuid, permitOps => array ['view']),
|
||||||
beneathRoles(array[hsOfficePartnerAdmin(NEW), hsOfficePersonAdmin(newPerson), hsOfficeContactAdmin(newContact)]),
|
beneathRoles(array[
|
||||||
withSubRoles(array[hsOfficePersonTenant(newPerson), hsOfficeContactTenant(newContact)])
|
hsOfficePartnerAdmin(NEW),
|
||||||
|
hsOfficePersonAdmin(newPerson),
|
||||||
|
hsOfficeContactAdmin(newContact)]),
|
||||||
|
withSubRoles(array[
|
||||||
|
hsOfficePersonTenant(newPerson),
|
||||||
|
hsOfficeContactTenant(newContact)])
|
||||||
);
|
);
|
||||||
|
|
||||||
elsif TG_OP = 'UPDATE' then
|
elsif TG_OP = 'UPDATE' then
|
||||||
@ -142,7 +147,7 @@ call generateRbacRestrictedView('hs_office_partner',
|
|||||||
|
|
||||||
|
|
||||||
-- ============================================================================
|
-- ============================================================================
|
||||||
--changeset hs-office-partner-rbac-NEW-CONTACT:1 endDelimiter:--//
|
--changeset hs-office-partner-rbac-NEW-PARTNER:1 endDelimiter:--//
|
||||||
-- ----------------------------------------------------------------------------
|
-- ----------------------------------------------------------------------------
|
||||||
/*
|
/*
|
||||||
Creates a global permission for new-partner and assigns it to the hostsharing admins role.
|
Creates a global permission for new-partner and assigns it to the hostsharing admins role.
|
||||||
|
Loading…
Reference in New Issue
Block a user