src/main/java/net/hostsharing/hsadminng/hs/office/bankaccount/HsOfficeBankAccountEntity.java

@@ -78,6 +78,6 @@ public class HsOfficeBankAccountEntity implements HasUuid, Stringifyable {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("243-hs-office-bankaccount-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/505-bankaccount/5053-hs-office-bankaccount-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/contact/HsOfficeContactEntity.java

@@ -80,6 +80,6 @@ public class HsOfficeContactEntity implements Stringifyable, HasUuid {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("203-hs-office-contact-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/501-contact/5013-hs-office-contact-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/coopassets/HsOfficeCoopAssetsTransactionEntity.java

@@ -113,6 +113,6 @@ public class HsOfficeCoopAssetsTransactionEntity implements Stringifyable, HasUu
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("323-hs-office-coopassets-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/512-coopassets/5123-hs-office-coopassets-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/coopshares/HsOfficeCoopSharesTransactionEntity.java

@@ -109,6 +109,6 @@ public class HsOfficeCoopSharesTransactionEntity implements Stringifyable, HasUu
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("313-hs-office-coopshares-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/511-coopshares/5113-hs-office-coopshares-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/debitor/HsOfficeDebitorEntity.java

@@ -188,6 +188,6 @@ public class HsOfficeDebitorEntity implements HasUuid, Stringifyable {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("273-hs-office-debitor-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/506-debitor/5063-hs-office-debitor-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/membership/HsOfficeMembershipEntity.java

@@ -159,6 +159,6 @@ public class HsOfficeMembershipEntity implements HasUuid, Stringifyable {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("303-hs-office-membership-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/510-membership/5103-hs-office-membership-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/partner/HsOfficePartnerDetailsEntity.java

@@ -90,6 +90,6 @@ public class HsOfficePartnerDetailsEntity implements HasUuid, Stringifyable {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("234-hs-office-partner-details-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/504-partner/5044-hs-office-partner-details-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/partner/HsOfficePartnerEntity.java

@@ -113,6 +113,6 @@ public class HsOfficePartnerEntity implements Stringifyable, HasUuid {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("233-hs-office-partner-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/504-partner/5043-hs-office-partner-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/person/HsOfficePersonEntity.java

@@ -86,6 +86,6 @@ public class HsOfficePersonEntity implements HasUuid, Stringifyable {
 
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("213-hs-office-person-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/502-person/5023-hs-office-person-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/relation/HsOfficeRelationEntity.java

@@ -130,6 +130,6 @@ public class HsOfficeRelationEntity implements HasUuid, Stringifyable {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("223-hs-office-relation-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/503-relation/5033-hs-office-relation-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/hs/office/sepamandate/HsOfficeSepaMandateEntity.java

@@ -141,6 +141,6 @@ public class HsOfficeSepaMandateEntity implements Stringifyable, HasUuid {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("253-hs-office-sepamandate-rbac");
+        rbac().generateWithBaseFileName("5-hs-office/507-sepamandate/5073-hs-office-sepamandate-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/test/cust/TestCustomerEntity.java

@@ -57,6 +57,6 @@ public class TestCustomerEntity implements HasUuid {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("113-test-customer-rbac");
+        rbac().generateWithBaseFileName("2-test/201-test-customer/2013-test-customer-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/test/dom/TestDomainEntity.java

@@ -67,6 +67,6 @@ public class TestDomainEntity implements HasUuid {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("133-test-domain-rbac");
+        rbac().generateWithBaseFileName("2-test/203-test-domain/2033-test-domain-rbac");
     }
 }

src/main/java/net/hostsharing/hsadminng/test/pac/TestPackageEntity.java

@@ -68,6 +68,6 @@ public class TestPackageEntity implements HasUuid {
     }
 
     public static void main(String[] args) throws IOException {
-        rbac().generateWithBaseFileName("123-test-package-rbac");
+        rbac().generateWithBaseFileName("2-test/202-test-package/2023-test-package-rbac");
     }
 }

src/main/resources/db/changelog/313-hs-office-coopshares-rbac.md

@@ -1,250 +0,0 @@
-### rbac coopSharesTransaction
-
-This code generated was by RbacViewMermaidFlowchartGenerator, do not amend manually.
-
-```mermaid
-%%{init:{'flowchart':{'htmlLabels':false}}}%%
-flowchart TB
-
-subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-    direction TB
-    style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.holderPerson:roles[ ]
-        style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-        role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-        role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-    end
-end
-
-subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-    direction TB
-    style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.anchorPerson:roles[ ]
-        style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-        role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-        role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-    end
-end
-
-subgraph coopSharesTransaction["`**coopSharesTransaction**`"]
-    direction TB
-    style coopSharesTransaction fill:#dd4901,stroke:#274d6e,stroke-width:8px
-
-    subgraph coopSharesTransaction:permissions[ ]
-        style coopSharesTransaction:permissions fill:#dd4901,stroke:white
-
-        perm:coopSharesTransaction:INSERT{{coopSharesTransaction:INSERT}}
-        perm:coopSharesTransaction:UPDATE{{coopSharesTransaction:UPDATE}}
-        perm:coopSharesTransaction:SELECT{{coopSharesTransaction:SELECT}}
-    end
-end
-
-subgraph membership["`**membership**`"]
-    direction TB
-    style membership fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-        direction TB
-        style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.holderPerson:roles[ ]
-            style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-            role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-            role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-        direction TB
-        style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.anchorPerson:roles[ ]
-            style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-            role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-            role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel["`**membership.partnerRel**`"]
-        direction TB
-        style membership.partnerRel fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-        subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-            direction TB
-            style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-            subgraph membership.partnerRel.holderPerson:roles[ ]
-                style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-                role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-                role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-                role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-            end
-        end
-
-        subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-            direction TB
-            style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-            subgraph membership.partnerRel.anchorPerson:roles[ ]
-                style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-                role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-                role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-                role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-            end
-        end
-
-        subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-            direction TB
-            style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-            subgraph membership.partnerRel.contact:roles[ ]
-                style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-                role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-                role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-                role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-            end
-        end
-
-        subgraph membership.partnerRel:roles[ ]
-            style membership.partnerRel:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel:owner[[membership.partnerRel:owner]]
-            role:membership.partnerRel:admin[[membership.partnerRel:admin]]
-            role:membership.partnerRel:agent[[membership.partnerRel:agent]]
-            role:membership.partnerRel:tenant[[membership.partnerRel:tenant]]
-        end
-    end
-
-    subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-        direction TB
-        style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.contact:roles[ ]
-            style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-            role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-            role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-        end
-    end
-
-    subgraph membership:roles[ ]
-        style membership:roles fill:#99bcdb,stroke:white
-
-        role:membership:owner[[membership:owner]]
-        role:membership:admin[[membership:admin]]
-        role:membership:referrer[[membership:referrer]]
-    end
-end
-
-subgraph membership.partnerRel["`**membership.partnerRel**`"]
-    direction TB
-    style membership.partnerRel fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-        direction TB
-        style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.holderPerson:roles[ ]
-            style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-            role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-            role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-        direction TB
-        style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.anchorPerson:roles[ ]
-            style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-            role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-            role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-        direction TB
-        style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.contact:roles[ ]
-            style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-            role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-            role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel:roles[ ]
-        style membership.partnerRel:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel:owner[[membership.partnerRel:owner]]
-        role:membership.partnerRel:admin[[membership.partnerRel:admin]]
-        role:membership.partnerRel:agent[[membership.partnerRel:agent]]
-        role:membership.partnerRel:tenant[[membership.partnerRel:tenant]]
-    end
-end
-
-subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-    direction TB
-    style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.contact:roles[ ]
-        style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-        role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-        role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-    end
-end
-
-%% granting roles to roles
-role:global:admin -.-> role:membership.partnerRel.anchorPerson:owner
-role:membership.partnerRel.anchorPerson:owner -.-> role:membership.partnerRel.anchorPerson:admin
-role:membership.partnerRel.anchorPerson:admin -.-> role:membership.partnerRel.anchorPerson:referrer
-role:global:admin -.-> role:membership.partnerRel.holderPerson:owner
-role:membership.partnerRel.holderPerson:owner -.-> role:membership.partnerRel.holderPerson:admin
-role:membership.partnerRel.holderPerson:admin -.-> role:membership.partnerRel.holderPerson:referrer
-role:global:admin -.-> role:membership.partnerRel.contact:owner
-role:membership.partnerRel.contact:owner -.-> role:membership.partnerRel.contact:admin
-role:membership.partnerRel.contact:admin -.-> role:membership.partnerRel.contact:referrer
-role:global:admin -.-> role:membership.partnerRel:owner
-role:membership.partnerRel:owner -.-> role:membership.partnerRel:admin
-role:membership.partnerRel.anchorPerson:admin -.-> role:membership.partnerRel:admin
-role:membership.partnerRel:admin -.-> role:membership.partnerRel:agent
-role:membership.partnerRel.holderPerson:admin -.-> role:membership.partnerRel:agent
-role:membership.partnerRel:agent -.-> role:membership.partnerRel:tenant
-role:membership.partnerRel.holderPerson:admin -.-> role:membership.partnerRel:tenant
-role:membership.partnerRel.contact:admin -.-> role:membership.partnerRel:tenant
-role:membership.partnerRel:tenant -.-> role:membership.partnerRel.anchorPerson:referrer
-role:membership.partnerRel:tenant -.-> role:membership.partnerRel.holderPerson:referrer
-role:membership.partnerRel:tenant -.-> role:membership.partnerRel.contact:referrer
-role:membership.partnerRel:admin -.-> role:membership:owner
-role:membership:owner -.-> role:membership:admin
-role:membership.partnerRel:agent -.-> role:membership:admin
-role:membership:admin -.-> role:membership:referrer
-role:membership:referrer -.-> role:membership.partnerRel:tenant
-
-%% granting permissions to roles
-role:membership:admin ==> perm:coopSharesTransaction:INSERT
-role:membership:admin ==> perm:coopSharesTransaction:UPDATE
-role:membership:admin ==> perm:coopSharesTransaction:SELECT
-
-```

src/main/resources/db/changelog/323-hs-office-coopassets-rbac.md

@@ -1,250 +0,0 @@
-### rbac coopAssetsTransaction
-
-This code generated was by RbacViewMermaidFlowchartGenerator, do not amend manually.
-
-```mermaid
-%%{init:{'flowchart':{'htmlLabels':false}}}%%
-flowchart TB
-
-subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-    direction TB
-    style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.holderPerson:roles[ ]
-        style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-        role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-        role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-    end
-end
-
-subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-    direction TB
-    style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.anchorPerson:roles[ ]
-        style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-        role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-        role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-    end
-end
-
-subgraph coopAssetsTransaction["`**coopAssetsTransaction**`"]
-    direction TB
-    style coopAssetsTransaction fill:#dd4901,stroke:#274d6e,stroke-width:8px
-
-    subgraph coopAssetsTransaction:permissions[ ]
-        style coopAssetsTransaction:permissions fill:#dd4901,stroke:white
-
-        perm:coopAssetsTransaction:INSERT{{coopAssetsTransaction:INSERT}}
-        perm:coopAssetsTransaction:UPDATE{{coopAssetsTransaction:UPDATE}}
-        perm:coopAssetsTransaction:SELECT{{coopAssetsTransaction:SELECT}}
-    end
-end
-
-subgraph membership["`**membership**`"]
-    direction TB
-    style membership fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-        direction TB
-        style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.holderPerson:roles[ ]
-            style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-            role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-            role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-        direction TB
-        style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.anchorPerson:roles[ ]
-            style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-            role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-            role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel["`**membership.partnerRel**`"]
-        direction TB
-        style membership.partnerRel fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-        subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-            direction TB
-            style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-            subgraph membership.partnerRel.holderPerson:roles[ ]
-                style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-                role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-                role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-                role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-            end
-        end
-
-        subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-            direction TB
-            style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-            subgraph membership.partnerRel.anchorPerson:roles[ ]
-                style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-                role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-                role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-                role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-            end
-        end
-
-        subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-            direction TB
-            style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-            subgraph membership.partnerRel.contact:roles[ ]
-                style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-                role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-                role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-                role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-            end
-        end
-
-        subgraph membership.partnerRel:roles[ ]
-            style membership.partnerRel:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel:owner[[membership.partnerRel:owner]]
-            role:membership.partnerRel:admin[[membership.partnerRel:admin]]
-            role:membership.partnerRel:agent[[membership.partnerRel:agent]]
-            role:membership.partnerRel:tenant[[membership.partnerRel:tenant]]
-        end
-    end
-
-    subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-        direction TB
-        style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.contact:roles[ ]
-            style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-            role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-            role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-        end
-    end
-
-    subgraph membership:roles[ ]
-        style membership:roles fill:#99bcdb,stroke:white
-
-        role:membership:owner[[membership:owner]]
-        role:membership:admin[[membership:admin]]
-        role:membership:referrer[[membership:referrer]]
-    end
-end
-
-subgraph membership.partnerRel["`**membership.partnerRel**`"]
-    direction TB
-    style membership.partnerRel fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
-        direction TB
-        style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.holderPerson:roles[ ]
-            style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.holderPerson:owner[[membership.partnerRel.holderPerson:owner]]
-            role:membership.partnerRel.holderPerson:admin[[membership.partnerRel.holderPerson:admin]]
-            role:membership.partnerRel.holderPerson:referrer[[membership.partnerRel.holderPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
-        direction TB
-        style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.anchorPerson:roles[ ]
-            style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.anchorPerson:owner[[membership.partnerRel.anchorPerson:owner]]
-            role:membership.partnerRel.anchorPerson:admin[[membership.partnerRel.anchorPerson:admin]]
-            role:membership.partnerRel.anchorPerson:referrer[[membership.partnerRel.anchorPerson:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-        direction TB
-        style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-        subgraph membership.partnerRel.contact:roles[ ]
-            style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-            role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-            role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-            role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-        end
-    end
-
-    subgraph membership.partnerRel:roles[ ]
-        style membership.partnerRel:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel:owner[[membership.partnerRel:owner]]
-        role:membership.partnerRel:admin[[membership.partnerRel:admin]]
-        role:membership.partnerRel:agent[[membership.partnerRel:agent]]
-        role:membership.partnerRel:tenant[[membership.partnerRel:tenant]]
-    end
-end
-
-subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
-    direction TB
-    style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
-
-    subgraph membership.partnerRel.contact:roles[ ]
-        style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
-
-        role:membership.partnerRel.contact:owner[[membership.partnerRel.contact:owner]]
-        role:membership.partnerRel.contact:admin[[membership.partnerRel.contact:admin]]
-        role:membership.partnerRel.contact:referrer[[membership.partnerRel.contact:referrer]]
-    end
-end
-
-%% granting roles to roles
-role:global:admin -.-> role:membership.partnerRel.anchorPerson:owner
-role:membership.partnerRel.anchorPerson:owner -.-> role:membership.partnerRel.anchorPerson:admin
-role:membership.partnerRel.anchorPerson:admin -.-> role:membership.partnerRel.anchorPerson:referrer
-role:global:admin -.-> role:membership.partnerRel.holderPerson:owner
-role:membership.partnerRel.holderPerson:owner -.-> role:membership.partnerRel.holderPerson:admin
-role:membership.partnerRel.holderPerson:admin -.-> role:membership.partnerRel.holderPerson:referrer
-role:global:admin -.-> role:membership.partnerRel.contact:owner
-role:membership.partnerRel.contact:owner -.-> role:membership.partnerRel.contact:admin
-role:membership.partnerRel.contact:admin -.-> role:membership.partnerRel.contact:referrer
-role:global:admin -.-> role:membership.partnerRel:owner
-role:membership.partnerRel:owner -.-> role:membership.partnerRel:admin
-role:membership.partnerRel.anchorPerson:admin -.-> role:membership.partnerRel:admin
-role:membership.partnerRel:admin -.-> role:membership.partnerRel:agent
-role:membership.partnerRel.holderPerson:admin -.-> role:membership.partnerRel:agent
-role:membership.partnerRel:agent -.-> role:membership.partnerRel:tenant
-role:membership.partnerRel.holderPerson:admin -.-> role:membership.partnerRel:tenant
-role:membership.partnerRel.contact:admin -.-> role:membership.partnerRel:tenant
-role:membership.partnerRel:tenant -.-> role:membership.partnerRel.anchorPerson:referrer
-role:membership.partnerRel:tenant -.-> role:membership.partnerRel.holderPerson:referrer
-role:membership.partnerRel:tenant -.-> role:membership.partnerRel.contact:referrer
-role:membership.partnerRel:admin -.-> role:membership:owner
-role:membership:owner -.-> role:membership:admin
-role:membership.partnerRel:agent -.-> role:membership:admin
-role:membership:admin -.-> role:membership:referrer
-role:membership:referrer -.-> role:membership.partnerRel:tenant
-
-%% granting permissions to roles
-role:membership:admin ==> perm:coopAssetsTransaction:INSERT
-role:membership:admin ==> perm:coopAssetsTransaction:UPDATE
-role:membership:admin ==> perm:coopAssetsTransaction:SELECT
-
-```

src/main/resources/db/changelog/5-hs-office/511-coopshares/5113-hs-office-coopshares-rbac.md

@@ -0,0 +1,120 @@
+### rbac coopSharesTransaction
+
+This code generated was by RbacViewMermaidFlowchartGenerator, do not amend manually.
+
+```mermaid
+%%{init:{'flowchart':{'htmlLabels':false}}}%%
+flowchart TB
+
+subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
+    direction TB
+    style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel.holderPerson:roles[ ]
+        style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel.holderPerson:OWNER[[membership.partnerRel.holderPerson:OWNER]]
+        role:membership.partnerRel.holderPerson:ADMIN[[membership.partnerRel.holderPerson:ADMIN]]
+        role:membership.partnerRel.holderPerson:REFERRER[[membership.partnerRel.holderPerson:REFERRER]]
+    end
+end
+
+subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
+    direction TB
+    style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel.anchorPerson:roles[ ]
+        style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel.anchorPerson:OWNER[[membership.partnerRel.anchorPerson:OWNER]]
+        role:membership.partnerRel.anchorPerson:ADMIN[[membership.partnerRel.anchorPerson:ADMIN]]
+        role:membership.partnerRel.anchorPerson:REFERRER[[membership.partnerRel.anchorPerson:REFERRER]]
+    end
+end
+
+subgraph coopSharesTransaction["`**coopSharesTransaction**`"]
+    direction TB
+    style coopSharesTransaction fill:#dd4901,stroke:#274d6e,stroke-width:8px
+
+    subgraph coopSharesTransaction:permissions[ ]
+        style coopSharesTransaction:permissions fill:#dd4901,stroke:white
+
+        perm:coopSharesTransaction:INSERT{{coopSharesTransaction:INSERT}}
+        perm:coopSharesTransaction:UPDATE{{coopSharesTransaction:UPDATE}}
+        perm:coopSharesTransaction:SELECT{{coopSharesTransaction:SELECT}}
+    end
+end
+
+subgraph membership["`**membership**`"]
+    direction TB
+    style membership fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership:roles[ ]
+        style membership:roles fill:#99bcdb,stroke:white
+
+        role:membership:OWNER[[membership:OWNER]]
+        role:membership:ADMIN[[membership:ADMIN]]
+        role:membership:REFERRER[[membership:REFERRER]]
+    end
+end
+
+subgraph membership.partnerRel["`**membership.partnerRel**`"]
+    direction TB
+    style membership.partnerRel fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel:roles[ ]
+        style membership.partnerRel:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel:OWNER[[membership.partnerRel:OWNER]]
+        role:membership.partnerRel:ADMIN[[membership.partnerRel:ADMIN]]
+        role:membership.partnerRel:AGENT[[membership.partnerRel:AGENT]]
+        role:membership.partnerRel:TENANT[[membership.partnerRel:TENANT]]
+    end
+end
+
+subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
+    direction TB
+    style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel.contact:roles[ ]
+        style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel.contact:OWNER[[membership.partnerRel.contact:OWNER]]
+        role:membership.partnerRel.contact:ADMIN[[membership.partnerRel.contact:ADMIN]]
+        role:membership.partnerRel.contact:REFERRER[[membership.partnerRel.contact:REFERRER]]
+    end
+end
+
+%% granting roles to roles
+role:global:ADMIN -.-> role:membership.partnerRel.anchorPerson:OWNER
+role:membership.partnerRel.anchorPerson:OWNER -.-> role:membership.partnerRel.anchorPerson:ADMIN
+role:membership.partnerRel.anchorPerson:ADMIN -.-> role:membership.partnerRel.anchorPerson:REFERRER
+role:global:ADMIN -.-> role:membership.partnerRel.holderPerson:OWNER
+role:membership.partnerRel.holderPerson:OWNER -.-> role:membership.partnerRel.holderPerson:ADMIN
+role:membership.partnerRel.holderPerson:ADMIN -.-> role:membership.partnerRel.holderPerson:REFERRER
+role:global:ADMIN -.-> role:membership.partnerRel.contact:OWNER
+role:membership.partnerRel.contact:OWNER -.-> role:membership.partnerRel.contact:ADMIN
+role:membership.partnerRel.contact:ADMIN -.-> role:membership.partnerRel.contact:REFERRER
+role:global:ADMIN -.-> role:membership.partnerRel:OWNER
+role:membership.partnerRel:OWNER -.-> role:membership.partnerRel:ADMIN
+role:membership.partnerRel.anchorPerson:ADMIN -.-> role:membership.partnerRel:ADMIN
+role:membership.partnerRel:ADMIN -.-> role:membership.partnerRel:AGENT
+role:membership.partnerRel.holderPerson:ADMIN -.-> role:membership.partnerRel:AGENT
+role:membership.partnerRel:AGENT -.-> role:membership.partnerRel:TENANT
+role:membership.partnerRel.holderPerson:ADMIN -.-> role:membership.partnerRel:TENANT
+role:membership.partnerRel.contact:ADMIN -.-> role:membership.partnerRel:TENANT
+role:membership.partnerRel:TENANT -.-> role:membership.partnerRel.anchorPerson:REFERRER
+role:membership.partnerRel:TENANT -.-> role:membership.partnerRel.holderPerson:REFERRER
+role:membership.partnerRel:TENANT -.-> role:membership.partnerRel.contact:REFERRER
+role:membership.partnerRel:ADMIN -.-> role:membership:OWNER
+role:membership:OWNER -.-> role:membership:ADMIN
+role:membership.partnerRel:AGENT -.-> role:membership:ADMIN
+role:membership:ADMIN -.-> role:membership:REFERRER
+role:membership:REFERRER -.-> role:membership.partnerRel:TENANT
+
+%% granting permissions to roles
+role:membership:ADMIN ==> perm:coopSharesTransaction:INSERT
+role:membership:ADMIN ==> perm:coopSharesTransaction:UPDATE
+role:membership:ADMIN ==> perm:coopSharesTransaction:SELECT
+
+```

src/main/resources/db/changelog/5-hs-office/511-coopshares/5113-hs-office-coopshares-rbac.sql

@@ -38,8 +38,8 @@ begin
     SELECT * FROM hs_office_membership WHERE uuid = NEW.membershipUuid    INTO newMembership;
     assert newMembership.uuid is not null, format('newMembership must not be null for NEW.membershipUuid = %s', NEW.membershipUuid);
 
-    call grantPermissionToRole(createPermission(NEW.uuid, 'SELECT'), hsOfficeMembershipAdmin(newMembership));
+    call grantPermissionToRole(createPermission(NEW.uuid, 'SELECT'), hsOfficeMembershipADMIN(newMembership));
-    call grantPermissionToRole(createPermission(NEW.uuid, 'UPDATE'), hsOfficeMembershipAdmin(newMembership));
+    call grantPermissionToRole(createPermission(NEW.uuid, 'UPDATE'), hsOfficeMembershipADMIN(newMembership));
 
     call leaveTriggerForObjectUuid(NEW.uuid);
 end; $$;
@@ -81,7 +81,7 @@ do language plpgsql $$
             LOOP
                 call grantPermissionToRole(
                     createPermission(row.uuid, 'INSERT', 'hs_office_coopsharestransaction'),
-                    hsOfficeMembershipAdmin(row));
+                    hsOfficeMembershipADMIN(row));
             END LOOP;
     END;
 $$;
@@ -96,7 +96,7 @@ create or replace function hs_office_coopsharestransaction_hs_office_membership_
 begin
     call grantPermissionToRole(
             createPermission(NEW.uuid, 'INSERT', 'hs_office_coopsharestransaction'),
-            hsOfficeMembershipAdmin(NEW));
+            hsOfficeMembershipADMIN(NEW));
     return NEW;
 end; $$;
 

src/main/resources/db/changelog/5-hs-office/512-coopassets/5123-hs-office-coopassets-rbac.md

@@ -0,0 +1,120 @@
+### rbac coopAssetsTransaction
+
+This code generated was by RbacViewMermaidFlowchartGenerator, do not amend manually.
+
+```mermaid
+%%{init:{'flowchart':{'htmlLabels':false}}}%%
+flowchart TB
+
+subgraph membership.partnerRel.holderPerson["`**membership.partnerRel.holderPerson**`"]
+    direction TB
+    style membership.partnerRel.holderPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel.holderPerson:roles[ ]
+        style membership.partnerRel.holderPerson:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel.holderPerson:OWNER[[membership.partnerRel.holderPerson:OWNER]]
+        role:membership.partnerRel.holderPerson:ADMIN[[membership.partnerRel.holderPerson:ADMIN]]
+        role:membership.partnerRel.holderPerson:REFERRER[[membership.partnerRel.holderPerson:REFERRER]]
+    end
+end
+
+subgraph membership.partnerRel.anchorPerson["`**membership.partnerRel.anchorPerson**`"]
+    direction TB
+    style membership.partnerRel.anchorPerson fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel.anchorPerson:roles[ ]
+        style membership.partnerRel.anchorPerson:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel.anchorPerson:OWNER[[membership.partnerRel.anchorPerson:OWNER]]
+        role:membership.partnerRel.anchorPerson:ADMIN[[membership.partnerRel.anchorPerson:ADMIN]]
+        role:membership.partnerRel.anchorPerson:REFERRER[[membership.partnerRel.anchorPerson:REFERRER]]
+    end
+end
+
+subgraph coopAssetsTransaction["`**coopAssetsTransaction**`"]
+    direction TB
+    style coopAssetsTransaction fill:#dd4901,stroke:#274d6e,stroke-width:8px
+
+    subgraph coopAssetsTransaction:permissions[ ]
+        style coopAssetsTransaction:permissions fill:#dd4901,stroke:white
+
+        perm:coopAssetsTransaction:INSERT{{coopAssetsTransaction:INSERT}}
+        perm:coopAssetsTransaction:UPDATE{{coopAssetsTransaction:UPDATE}}
+        perm:coopAssetsTransaction:SELECT{{coopAssetsTransaction:SELECT}}
+    end
+end
+
+subgraph membership["`**membership**`"]
+    direction TB
+    style membership fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership:roles[ ]
+        style membership:roles fill:#99bcdb,stroke:white
+
+        role:membership:OWNER[[membership:OWNER]]
+        role:membership:ADMIN[[membership:ADMIN]]
+        role:membership:REFERRER[[membership:REFERRER]]
+    end
+end
+
+subgraph membership.partnerRel["`**membership.partnerRel**`"]
+    direction TB
+    style membership.partnerRel fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel:roles[ ]
+        style membership.partnerRel:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel:OWNER[[membership.partnerRel:OWNER]]
+        role:membership.partnerRel:ADMIN[[membership.partnerRel:ADMIN]]
+        role:membership.partnerRel:AGENT[[membership.partnerRel:AGENT]]
+        role:membership.partnerRel:TENANT[[membership.partnerRel:TENANT]]
+    end
+end
+
+subgraph membership.partnerRel.contact["`**membership.partnerRel.contact**`"]
+    direction TB
+    style membership.partnerRel.contact fill:#99bcdb,stroke:#274d6e,stroke-width:8px
+
+    subgraph membership.partnerRel.contact:roles[ ]
+        style membership.partnerRel.contact:roles fill:#99bcdb,stroke:white
+
+        role:membership.partnerRel.contact:OWNER[[membership.partnerRel.contact:OWNER]]
+        role:membership.partnerRel.contact:ADMIN[[membership.partnerRel.contact:ADMIN]]
+        role:membership.partnerRel.contact:REFERRER[[membership.partnerRel.contact:REFERRER]]
+    end
+end
+
+%% granting roles to roles
+role:global:ADMIN -.-> role:membership.partnerRel.anchorPerson:OWNER
+role:membership.partnerRel.anchorPerson:OWNER -.-> role:membership.partnerRel.anchorPerson:ADMIN
+role:membership.partnerRel.anchorPerson:ADMIN -.-> role:membership.partnerRel.anchorPerson:REFERRER
+role:global:ADMIN -.-> role:membership.partnerRel.holderPerson:OWNER
+role:membership.partnerRel.holderPerson:OWNER -.-> role:membership.partnerRel.holderPerson:ADMIN
+role:membership.partnerRel.holderPerson:ADMIN -.-> role:membership.partnerRel.holderPerson:REFERRER
+role:global:ADMIN -.-> role:membership.partnerRel.contact:OWNER
+role:membership.partnerRel.contact:OWNER -.-> role:membership.partnerRel.contact:ADMIN
+role:membership.partnerRel.contact:ADMIN -.-> role:membership.partnerRel.contact:REFERRER
+role:global:ADMIN -.-> role:membership.partnerRel:OWNER
+role:membership.partnerRel:OWNER -.-> role:membership.partnerRel:ADMIN
+role:membership.partnerRel.anchorPerson:ADMIN -.-> role:membership.partnerRel:ADMIN
+role:membership.partnerRel:ADMIN -.-> role:membership.partnerRel:AGENT
+role:membership.partnerRel.holderPerson:ADMIN -.-> role:membership.partnerRel:AGENT
+role:membership.partnerRel:AGENT -.-> role:membership.partnerRel:TENANT
+role:membership.partnerRel.holderPerson:ADMIN -.-> role:membership.partnerRel:TENANT
+role:membership.partnerRel.contact:ADMIN -.-> role:membership.partnerRel:TENANT
+role:membership.partnerRel:TENANT -.-> role:membership.partnerRel.anchorPerson:REFERRER
+role:membership.partnerRel:TENANT -.-> role:membership.partnerRel.holderPerson:REFERRER
+role:membership.partnerRel:TENANT -.-> role:membership.partnerRel.contact:REFERRER
+role:membership.partnerRel:ADMIN -.-> role:membership:OWNER
+role:membership:OWNER -.-> role:membership:ADMIN
+role:membership.partnerRel:AGENT -.-> role:membership:ADMIN
+role:membership:ADMIN -.-> role:membership:REFERRER
+role:membership:REFERRER -.-> role:membership.partnerRel:TENANT
+
+%% granting permissions to roles
+role:membership:ADMIN ==> perm:coopAssetsTransaction:INSERT
+role:membership:ADMIN ==> perm:coopAssetsTransaction:UPDATE
+role:membership:ADMIN ==> perm:coopAssetsTransaction:SELECT
+
+```

src/main/resources/db/changelog/5-hs-office/512-coopassets/5123-hs-office-coopassets-rbac.sql

@@ -38,8 +38,8 @@ begin
     SELECT * FROM hs_office_membership WHERE uuid = NEW.membershipUuid    INTO newMembership;
     assert newMembership.uuid is not null, format('newMembership must not be null for NEW.membershipUuid = %s', NEW.membershipUuid);
 
-    call grantPermissionToRole(createPermission(NEW.uuid, 'SELECT'), hsOfficeMembershipAdmin(newMembership));
+    call grantPermissionToRole(createPermission(NEW.uuid, 'SELECT'), hsOfficeMembershipADMIN(newMembership));
-    call grantPermissionToRole(createPermission(NEW.uuid, 'UPDATE'), hsOfficeMembershipAdmin(newMembership));
+    call grantPermissionToRole(createPermission(NEW.uuid, 'UPDATE'), hsOfficeMembershipADMIN(newMembership));
 
     call leaveTriggerForObjectUuid(NEW.uuid);
 end; $$;
@@ -81,7 +81,7 @@ do language plpgsql $$
             LOOP
                 call grantPermissionToRole(
                     createPermission(row.uuid, 'INSERT', 'hs_office_coopassetstransaction'),
-                    hsOfficeMembershipAdmin(row));
+                    hsOfficeMembershipADMIN(row));
             END LOOP;
     END;
 $$;
@@ -96,7 +96,7 @@ create or replace function hs_office_coopassetstransaction_hs_office_membership_
 begin
     call grantPermissionToRole(
             createPermission(NEW.uuid, 'INSERT', 'hs_office_coopassetstransaction'),
-            hsOfficeMembershipAdmin(NEW));
+            hsOfficeMembershipADMIN(NEW));
     return NEW;
 end; $$;
 

src/main/resources/db/changelog/db.changelog-master.yaml

@@ -1,129 +1,129 @@
 databaseChangeLog:
     - include:
-        file: db/changelog/001-last-row-count.sql
+        file: db/changelog/0-basis/001-last-row-count.sql
     - include:
-        file: db/changelog/002-int-to-var.sql
+        file: db/changelog/0-basis/002-int-to-var.sql
     - include:
-        file: db/changelog/003-random-in-range.sql
+        file: db/changelog/0-basis/003-random-in-range.sql
     - include:
-        file: db/changelog/004-jsonb-changes-delta.sql
+        file: db/changelog/0-basis/004-jsonb-changes-delta.sql
     - include:
-        file: db/changelog/005-uuid-ossp-extension.sql
+        file: db/changelog/0-basis/005-uuid-ossp-extension.sql
     - include:
-        file: db/changelog/006-numeric-hash-functions.sql
+        file: db/changelog/0-basis/006-numeric-hash-functions.sql
     - include:
-        file: db/changelog/007-table-columns.sql
+        file: db/changelog/0-basis/007-table-columns.sql
     - include:
-        file: db/changelog/009-check-environment.sql
+        file: db/changelog/0-basis/009-check-environment.sql
     - include:
-        file: db/changelog/010-context.sql
+        file: db/changelog/0-basis/010-context.sql
     - include:
-        file: db/changelog/020-audit-log.sql
+        file: db/changelog/0-basis/020-audit-log.sql
     - include:
-        file: db/changelog/050-rbac-base.sql
+        file: db/changelog/1-rbac/1050-rbac-base.sql
     - include:
-        file: db/changelog/051-rbac-user-grant.sql
+        file: db/changelog/1-rbac/1051-rbac-user-grant.sql
     - include:
-        file: db/changelog/054-rbac-context.sql
+        file: db/changelog/1-rbac/1054-rbac-context.sql
     - include:
-        file: db/changelog/055-rbac-views.sql
+        file: db/changelog/1-rbac/1055-rbac-views.sql
     - include:
-        file: db/changelog/056-rbac-trigger-context.sql
+        file: db/changelog/1-rbac/1056-rbac-trigger-context.sql
     - include:
-        file: db/changelog/057-rbac-role-builder.sql
+        file: db/changelog/1-rbac/1057-rbac-role-builder.sql
     - include:
-        file: db/changelog/058-rbac-generators.sql
+        file: db/changelog/1-rbac/1058-rbac-generators.sql
     - include:
-        file: db/changelog/059-rbac-statistics.sql
+        file: db/changelog/1-rbac/1059-rbac-statistics.sql
     - include:
-        file: db/changelog/080-rbac-global.sql
+        file: db/changelog/1-rbac/1080-rbac-global.sql
     - include:
-        file: db/changelog/110-test-customer.sql
+        file: db/changelog/2-test/201-test-customer/2010-test-customer.sql
     - include:
-        file: db/changelog/113-test-customer-rbac.sql
+        file: db/changelog/2-test/201-test-customer/2013-test-customer-rbac.sql
     - include:
-        file: db/changelog/118-test-customer-test-data.sql
+        file: db/changelog/2-test/201-test-customer/2018-test-customer-test-data.sql
     - include:
-        file: db/changelog/120-test-package.sql
+        file: db/changelog/2-test/202-test-package/2020-test-package.sql
     - include:
-        file: db/changelog/123-test-package-rbac.sql
+        file: db/changelog/2-test/202-test-package/2023-test-package-rbac.sql
     - include:
-        file: db/changelog/128-test-package-test-data.sql
+        file: db/changelog/2-test/202-test-package/2028-test-package-test-data.sql
     - include:
-        file: db/changelog/130-test-domain.sql
+        file: db/changelog/2-test/203-test-domain/2030-test-domain.sql
     - include:
-        file: db/changelog/133-test-domain-rbac.sql
+        file: db/changelog/2-test/203-test-domain/2033-test-domain-rbac.sql
     - include:
-        file: db/changelog/138-test-domain-test-data.sql
+        file: db/changelog/2-test/203-test-domain/2038-test-domain-test-data.sql
     - include:
-        file: db/changelog/200-hs-office-contact.sql
+        file: db/changelog/5-hs-office/501-contact/5010-hs-office-contact.sql
     - include:
-        file: db/changelog/203-hs-office-contact-rbac.sql
+        file: db/changelog/5-hs-office/501-contact/5013-hs-office-contact-rbac.sql
     - include:
-        file: db/changelog/206-hs-office-contact-migration.sql
+        file: db/changelog/5-hs-office/501-contact/5016-hs-office-contact-migration.sql
     - include:
-        file: db/changelog/208-hs-office-contact-test-data.sql
+        file: db/changelog/5-hs-office/501-contact/5018-hs-office-contact-test-data.sql
     - include:
-        file: db/changelog/210-hs-office-person.sql
+        file: db/changelog/5-hs-office/502-person/5020-hs-office-person.sql
     - include:
-        file: db/changelog/213-hs-office-person-rbac.sql
+        file: db/changelog/5-hs-office/502-person/5023-hs-office-person-rbac.sql
     - include:
-        file: db/changelog/218-hs-office-person-test-data.sql
+        file: db/changelog/5-hs-office/502-person/5028-hs-office-person-test-data.sql
     - include:
-        file: db/changelog/220-hs-office-relation.sql
+        file: db/changelog/5-hs-office/503-relation/5030-hs-office-relation.sql
     - include:
-        file: db/changelog/223-hs-office-relation-rbac.sql
+        file: db/changelog/5-hs-office/503-relation/5033-hs-office-relation-rbac.sql
     - include:
-        file: db/changelog/228-hs-office-relation-test-data.sql
+        file: db/changelog/5-hs-office/503-relation/5038-hs-office-relation-test-data.sql
     - include:
-        file: db/changelog/230-hs-office-partner.sql
+        file: db/changelog/5-hs-office/504-partner/5040-hs-office-partner.sql
     - include:
-        file: db/changelog/233-hs-office-partner-rbac.sql
+        file: db/changelog/5-hs-office/504-partner/5043-hs-office-partner-rbac.sql
     - include:
-        file: db/changelog/234-hs-office-partner-details-rbac.sql
+        file: db/changelog/5-hs-office/504-partner/5044-hs-office-partner-details-rbac.sql
     - include:
-        file: db/changelog/236-hs-office-partner-migration.sql
+        file: db/changelog/5-hs-office/504-partner/5046-hs-office-partner-migration.sql
     - include:
-        file: db/changelog/238-hs-office-partner-test-data.sql
+        file: db/changelog/5-hs-office/504-partner/5048-hs-office-partner-test-data.sql
     - include:
-        file: db/changelog/240-hs-office-bankaccount.sql
+        file: db/changelog/5-hs-office/505-bankaccount/5050-hs-office-bankaccount.sql
     - include:
-        file: db/changelog/243-hs-office-bankaccount-rbac.sql
+        file: db/changelog/5-hs-office/505-bankaccount/5053-hs-office-bankaccount-rbac.sql
     - include:
-          file: db/changelog/248-hs-office-bankaccount-test-data.sql
+          file: db/changelog/5-hs-office/505-bankaccount/5058-hs-office-bankaccount-test-data.sql
     - include:
-        file: db/changelog/270-hs-office-debitor.sql
+        file: db/changelog/5-hs-office/506-debitor/5060-hs-office-debitor.sql
     - include:
-        file: db/changelog/273-hs-office-debitor-rbac.sql
+        file: db/changelog/5-hs-office/506-debitor/5063-hs-office-debitor-rbac.sql
     - include:
-        file: db/changelog/278-hs-office-debitor-test-data.sql
+        file: db/changelog/5-hs-office/506-debitor/5068-hs-office-debitor-test-data.sql
     - include:
-        file: db/changelog/250-hs-office-sepamandate.sql
+        file: db/changelog/5-hs-office/507-sepamandate/5070-hs-office-sepamandate.sql
     - include:
-        file: db/changelog/253-hs-office-sepamandate-rbac.sql
+        file: db/changelog/5-hs-office/507-sepamandate/5073-hs-office-sepamandate-rbac.sql
     - include:
-          file: db/changelog/256-hs-office-sepamandate-migration.sql
+        file: db/changelog/5-hs-office/507-sepamandate/5076-hs-office-sepamandate-migration.sql
     - include:
-        file: db/changelog/258-hs-office-sepamandate-test-data.sql
+        file: db/changelog/5-hs-office/507-sepamandate/5078-hs-office-sepamandate-test-data.sql
     - include:
-        file: db/changelog/300-hs-office-membership.sql
+        file: db/changelog/5-hs-office/510-membership/5100-hs-office-membership.sql
     - include:
-        file: db/changelog/303-hs-office-membership-rbac.sql
+        file: db/changelog/5-hs-office/510-membership/5103-hs-office-membership-rbac.sql
     - include:
-        file: db/changelog/308-hs-office-membership-test-data.sql
+        file: db/changelog/5-hs-office/510-membership/5108-hs-office-membership-test-data.sql
     - include:
-        file: db/changelog/310-hs-office-coopshares.sql
+        file: db/changelog/5-hs-office/511-coopshares/5110-hs-office-coopshares.sql
     - include:
-        file: db/changelog/313-hs-office-coopshares-rbac.sql
+        file: db/changelog/5-hs-office/511-coopshares/5113-hs-office-coopshares-rbac.sql
     - include:
-          file: db/changelog/316-hs-office-coopshares-migration.sql
+        file: db/changelog/5-hs-office/511-coopshares/5116-hs-office-coopshares-migration.sql
     - include:
-        file: db/changelog/318-hs-office-coopshares-test-data.sql
+        file: db/changelog/5-hs-office/511-coopshares/5118-hs-office-coopshares-test-data.sql
     - include:
-          file: db/changelog/320-hs-office-coopassets.sql
+        file: db/changelog/5-hs-office/512-coopassets/5120-hs-office-coopassets.sql
     - include:
-          file: db/changelog/323-hs-office-coopassets-rbac.sql
+        file: db/changelog/5-hs-office/512-coopassets/5123-hs-office-coopassets-rbac.sql
     - include:
-          file: db/changelog/326-hs-office-coopassets-migration.sql
+        file: db/changelog/5-hs-office/512-coopassets/5126-hs-office-coopassets-migration.sql
     - include:
-          file: db/changelog/328-hs-office-coopassets-test-data.sql
+        file: db/changelog/5-hs-office/512-coopassets/5128-hs-office-coopassets-test-data.sql