introduce separate database-schemas base+rbac #103

hsh-michaelhoennig · 2024-09-16T09:44:38+02:00

hsh-michaelhoennig commented

2024-09-16 09:44:38 +02:00

No description provided.

hsh-michaelhoennig added 49 commits 2024-09-16 09:44:38 +02:00

introduce basis schema, yet unused 2a27ab24b5

basis.lastRowCount() 18383b7648

basis.intToVarChar(...) 47926d0d84

basis.randomInRange, basis.jsonb_changes_delta, asis.bigIntHash, basis.tableColumnNames, basis.raiseException, basis.assertTrue 984cf0ef3b

basis.defineContext(...) c2e8be096c

basis.currentTask() d0558bed36

basis.currentRequest(), basis.tx_journal_trigger() f3a07e7081

basis.tx_context, basis.tx_journal, basis.tx_journal_v, asis.create_journal ef80c37ea9

basis.tx_history_txid(), basis.tx_operation, basis.tx_create_historicization(...) b265e57b4b

basis.currentUser(), basis.assumedRoles() d5b708933c

add bin/git-pull-and-run-if-origin-changed ea99d61bf3

rbacuser->rbac.subject, tx_journal_tg, rbac.referenceType, rbac.reference, rbac.create_subject, rbac.find_subject_id, rbac.insert_related_object tc. 1f9ee517e4

fix alias usage in git-pull-and-run-if-origin-changed 8178ad80df

fix alias usage in git-pull-and-run-if-origin-changed 814fef4185

run ./gradlew test not gw-test alias in git-pull-... ee497da019

run ./gradlew test not gw-test alias in git-pull-... b76bd5664d

git-pull-and-run-if-origin-changed: pull every 10s and show commit-ids 3c4139c726

fix trigger order 385dddef4c

fix package name in arch test 588fe7d3b6

less output from git-pull-and-if-origin-changed-run-tests c0702ee183

rbac.assumedRoleUuid 32c88cef21

waiting animation for git-pull-and-if-origin-changed-run-tests 28fb327f01

rbac schema for user-grant 2b951bd308

rename 1051-rbac-subject-grant.sql 129aba0c74

rbac schema in 1055-rbac-views.sql 3d34854052

renaming user to subject in API cb49292871

rbac schema in 1056-rbac-trigger-context.sql 9b80d8ac80

rbac schema in 1057-rbac-role-builder.sql und 1058-rbac-generators.sql 06d8e24e66

rbac.global 1e2390191f

schema basis -> base 8715ae484a

rbac.grants 342102e85c

rbac.permission bcef4e794d

rbac.role b490f2c191

rbac.delete_related_rbac_rules_tf c4fb8eceac

rbac.RoleType bb0869cbd4

rbac.RoleDescriptor, rbac.assumed(), rbac.unassumed() 568c1e9a65

rbac.RbacOp, rbac.RoleDescriptor, rbac.roleDescriptorOf and functions 5166bb5fc9

rbac.globalAdmin(), rbac.globalGuest() 6465a2457c

most remaining from base+rbac a7e3ae79d0

fix rbac.currentSubjects() -> base.currentSubjects() 14866f9539

hs_statistics_v e8a0005b49

rbac.grants_rv + rbac.grants_ev cde0feaa3f

amend rbac generators and re-generate 3d335def18

rename rbac directories 90ab182f70

remove fixme e95ed71593

add rbac. in twiddle sql scripts 9ad92fdaab

fix changeset naming 435d82116d

fix ArchitectureTest rbac sub-packages cfb1a17a2e

fix missing schema prefixes 8b777077a7

hsh-michaelhoennig added 2 commits 2024-09-16 13:59:57 +02:00

Merge remote-tracking branch 'origin/master' into introduce-separate-database-schemas-base-and-rbac e0ac4231ac

# Conflicts:
#	src/test/java/net/hostsharing/hsadminng/hs/migration/BaseOfficeDataImport.java

use schema for hs-hosting-asset-legacy-id fd7a63867a

hsh-marcsandlus reviewed 2024-09-16 14:16:53 +02:00

src/main/resources/db/changelog/1-rbac/1080-rbac-global.sql Outdated

						
				@ -163,2 +160,2 @@

				        perform createRbacUser('selfregistered-user-drew@hostsharing.org');

				        perform createRbacUser('selfregistered-test-user@hostsharing.org');

				        admins = rbac.findRoleId(rbac.globalAdmin());

				        call rbac.grantRoleToUserUnchecked(admins, admins, rbac.create_subject('superuser-alex@hostsharing.net'));

hsh-marcsandlus commented

2024-09-16 14:16:53 +02:00

müsste das nicht grantRoleToSubjectUnchecked heißen

hsh-michaelhoennig marked this conversation as resolved

hsh-marcsandlus reviewed 2024-09-16 14:37:47 +02:00

src/main/resources/db/changelog/5-hs-office/510-membership/5103-hs-office-membership-rbac.sql Outdated

						
				@ -11,3 +11,3 @@

				-- ============================================================================

				--changeset hs-office-membership-rbac-ROLE-DESCRIPTORS:1 endDelimiter:--//

				--changeset RbacRoleDescirptorsGenerator:hs-office-membership-rbac-ROLE-DESCRIPTORS endDelimiter:--//

hsh-marcsandlus commented

2024-09-16 14:37:47 +02:00

typo

hsh-michaelhoennig marked this conversation as resolved

hsh-michaelhoennig added 1 commit 2024-09-16 14:50:59 +02:00

grantRoleToUserUnchecked -> grantRoleToSubjectUnchecked ec2640b3c7

hsh-marcsandlus reviewed 2024-09-16 14:54:10 +02:00

doc/adr/2022-07-18.row-level-security-mechanism.md Outdated

						
				@ -39,3 +39,3 @@

				Very flexible access, programmatic, rules could be implemented.

				The role-hierarchy and permissions for currently logged-in users user could be cached in the backend.

				The role-hierarchy and permissions for currently logged-in sujects could be cached in the backend.

hsh-marcsandlus commented

2024-09-16 14:54:10 +02:00

typo

hsh-michaelhoennig marked this conversation as resolved

hsh-marcsandlus reviewed 2024-09-16 14:55:50 +02:00

src/main/resources/db/changelog/2-test/201-test-customer/2013-test-customer-rbac.sql

						
				@ -99,1 +97,3 @@

				                        globalADMIN());

				                call rbac.grantPermissionToRole(

				                        rbac.createPermission(row.uuid, 'INSERT', 'test_customer'),

				                        rbac.globalADMIN());

hsh-marcsandlus commented

2024-09-16 14:55:50 +02:00

globalAdmin statt globalADMIN?

hsh-michaelhoennig commented

2024-09-16 15:04:18 +02:00

ist nicht case-sensitiv, und da der Teil 'ADMIN' sich auf den Enum-Wert ADMIN von rbac.RoleType bezieht, ist sogar globalADMIN() passender - PostgreSQL speichert es als "globaladmin", da geht also die Groß-/Kleinschreibung ganz verloren, ich lasse das erst einmal so, vor allem weil ich sonst massig Merge-Probleme mit dem nächsten Branch habe

hsh-marcsandlus approved these changes 2024-09-16 14:55:54 +02:00

hsh-michaelhoennig added 1 commit 2024-09-16 14:56:00 +02:00

fix typo: RbacRoleDescriptorsGenerator 86232f1939

hsh-michaelhoennig added 1 commit 2024-09-16 15:35:46 +02:00

fix typo: logged-in sujects 763c743372

hsh-michaelhoennig merged commit 1eed0e9b21 into master

2024-09-16 15:36:38 +02:00

hsh-michaelhoennig deleted branch introduce-separate-database-schemas-base-and-rbac

2024-09-16 15:36:38 +02:00

hsh-michaelhoennig referenced this issue from a commit

2024-09-16 15:36:39 +02:00

introduce separate database-schemas base+rbac (#103)

Sign in to join this conversation.

No reviewers

No Label

No Milestone

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: hostsharing/hs.hsadmin.ng#103