@opengis/fastify-table 2.6.2 → 2.6.3

package/dist/server/migrations/roles.sql

@@ -1,201 +1,201 @@
-create schema if not exists admin;
-create schema if not exists public;
-CREATE EXTENSION if not exists pg_trgm SCHEMA public VERSION "1.5";
-
-
--- Admin Menu
--- DROP TABLE if exists admin.menu;
-CREATE TABLE if not exists admin.menu();
-alter table admin.menu DROP CONSTRAINT if exists admin_menu_id_pkey cascade;
-alter table admin.menu DROP CONSTRAINT if exists admin_menu_name_unique;
-
-alter table admin.menu add column if not exists menu_id text NOT NULL default next_id();
-alter table admin.menu add column if not exists name text;
-alter table admin.menu add column if not exists ord numeric;
-alter table admin.menu add column if not exists enabled boolean NOT NULL DEFAULT true;
-alter table admin.menu add column if not exists uid text;
-alter table admin.menu add column if not exists editor_id text;
-alter table admin.menu add column if not exists editor_date timestamp without time zone;
-alter table admin.menu add column if not exists cdate timestamp without time zone DEFAULT now();
-alter table admin.menu add CONSTRAINT admin_menu_id_pkey PRIMARY KEY (menu_id);
-alter table admin.menu add CONSTRAINT admin_menu_name_unique UNIQUE (name);
-
-COMMENT ON TABLE admin.menu IS 'Пункти меню';
-COMMENT ON COLUMN admin.menu.menu_id IS 'Ідентифікатор пункту меню';
-COMMENT ON COLUMN admin.menu.name IS 'Назва пункту меню';
-COMMENT ON COLUMN admin.menu.ord IS 'Порядковий номер';
-COMMENT ON COLUMN admin.menu.enabled IS 'On / Off';
-
-
-
-
--- Role (Group)
--- drop table if exists admin.roles;
-CREATE TABLE if not exists admin.roles();
-alter table admin.roles DROP CONSTRAINT if exists admin_roles_id_pkey cascade;
-
-ALTER TABLE admin.roles ADD COLUMN if not exists role_id text NOT NULL DEFAULT next_id();
-ALTER TABLE admin.roles ADD COLUMN if not exists name text;
-ALTER TABLE admin.roles ADD COLUMN if not exists enabled boolean;
-ALTER TABLE admin.roles ADD COLUMN if not exists info text;
-ALTER TABLE admin.roles ADD COLUMN if not exists cdate timestamp without time zone DEFAULT date_trunc('seconds'::text, now());
-ALTER TABLE admin.roles ADD COLUMN if not exists uid text;
-ALTER TABLE admin.roles ADD COLUMN if not exists editor_id text;
-ALTER TABLE admin.roles ADD COLUMN if not exists editor_date timestamp without time zone;
-
-ALTER TABLE admin.roles ADD CONSTRAINT admin_roles_id_pkey PRIMARY KEY(role_id);
-
-COMMENT ON TABLE admin.roles IS 'Групи';
-COMMENT ON COLUMN admin.roles.role_id IS 'ID';
-COMMENT ON COLUMN admin.roles.name IS 'Назва групи';
-COMMENT ON COLUMN admin.roles.enabled IS 'On / Off';
-COMMENT ON COLUMN admin.roles.info IS 'Опис групи';
-COMMENT ON COLUMN admin.roles.cdate IS 'Дата створення';
-COMMENT ON COLUMN admin.roles.uid IS 'Хто створив';
-COMMENT ON COLUMN admin.roles.editor_id IS 'Останній редагувач';
-COMMENT ON COLUMN admin.roles.editor_date IS 'Дата останнього редагування';
-
--- Routes (Interfaces)
--- DROP TABLE if exists admin.routes;
-CREATE TABLE if not exists admin.routes();
-alter table admin.routes DROP CONSTRAINT if exists admin_route_id_pkey cascade;
-alter table admin.routes DROP constraint if exists admin_route_menu_id_fkey cascade;
-alter table admin.routes DROP constraint if exists admin_route_alias_query_unique cascade;
-
-alter table admin.routes add column if not exists route_id text;
-alter table admin.routes alter column route_id set not null;
-alter table admin.routes alter column route_id set default next_id();
-alter table admin.routes add column if not exists alias text;
-alter table admin.routes alter column alias drop not null;
--- alter table admin.routes alter column alias set not null;
-alter table admin.routes add column if not exists table_name text;
-alter table admin.routes alter column table_name drop not null;
--- alter table admin.routes alter column table_name set not null;
-alter table admin.routes add column if not exists query text;
-alter table admin.routes add column if not exists actions text[];
-alter table admin.routes add column if not exists access text;
-alter table admin.routes add column if not exists title text;
-alter table admin.routes add column if not exists public boolean;
-alter table admin.routes add column if not exists menu_id text;
-alter table admin.routes add column if not exists uid text;
-alter table admin.routes add column if not exists editor_id text;
-alter table admin.routes add column if not exists editor_date timestamp without time zone;
-alter table admin.routes add column if not exists cdate timestamp without time zone DEFAULT now();
-alter table admin.routes alter column cdate set DEFAULT now();
-alter table admin.routes add column if not exists enabled boolean;
-alter table admin.routes alter column enabled set NOT NULL;
-alter table admin.routes alter column enabled set DEFAULT true;
-
-alter table admin.routes add CONSTRAINT admin_route_id_pkey PRIMARY KEY (route_id);
-alter table admin.routes add constraint admin_route_menu_id_fkey FOREIGN KEY (menu_id) REFERENCES admin.menu(menu_id);
-
--- alter table admin.routes add CONSTRAINT admin_route_alias_query_unique UNIQUE (alias, query);
-
-COMMENT ON TABLE admin.routes IS 'Список інтерфейсів';
-COMMENT ON COLUMN admin.routes.route_id IS 'Ідентифікатор інтерфейса';
-COMMENT ON COLUMN admin.routes.alias IS 'Назва файлу інтерфейса';
-
-COMMENT ON COLUMN admin.routes.table_name IS 'Таблиця в БД';
-comment on column admin.routes.query is 'Запит до таблиці';
-COMMENT ON COLUMN admin.routes.actions IS 'Дії';
-COMMENT ON COLUMN admin.routes.access IS 'Рівень доступу';
-COMMENT ON COLUMN admin.routes.title IS 'Назва інтерфейсу українською';
-COMMENT ON COLUMN admin.routes.public IS 'Ознака чи для всіх показується';
-COMMENT ON COLUMN admin.routes.enabled IS 'On / Off';
-COMMENT ON COLUMN admin.routes.menu_id IS 'Пункт меню (для collapse)';
-
--- User <> Role (Group)
--- DROP TABLE if exists admin.user_roles;
-
-CREATE TABLE if not exists admin.user_roles();
-ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_role_id_pkey;
-ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_pkey;
-ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_role_id_fkey;
-ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_user_uid_fkey;
-ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_user_uid_role_id_key;
-alter table admin.user_roles drop constraint if exists user_roles_user_uid_fkey;
-alter table admin.user_roles drop constraint if exists user_roles_role_id_fkey;
-alter table admin.user_roles drop constraint if exists admin_user_roles_role_id_fkey;
-
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS ugr_id text NOT NULL DEFAULT next_id();
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS user_uid text NOT NULL;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS role_id text NOT NULL;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS cdate timestamp without time zone DEFAULT date_trunc('seconds'::text, now());
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS uid text;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS editor_id text;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS editor_date timestamp without time zone;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS expiration date;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS access_granted text;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS access_granted_time timestamp without time zone;
-ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS actions text [];
-
-ALTER TABLE admin.user_roles ADD CONSTRAINT admin_user_roles_pkey PRIMARY KEY (ugr_id);
-delete from admin.user_roles where user_uid not in (select uid from admin.users); -- prevent migration errors caused by missing users
-ALTER TABLE admin.user_roles ADD CONSTRAINT user_roles_user_uid_fkey FOREIGN KEY (user_uid) REFERENCES admin.users (uid) MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
-ALTER TABLE admin.user_roles ADD CONSTRAINT admin_user_roles_role_id_fkey FOREIGN KEY (role_id) REFERENCES admin.roles (role_id) MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
-ALTER TABLE admin.user_roles ADD CONSTRAINT admin_user_roles_user_uid_role_id_key UNIQUE (user_uid, role_id);
-
-
-COMMENT ON TABLE admin.user_roles IS 'Відношення користувачів до груп';
-COMMENT ON COLUMN admin.user_roles.user_uid IS 'ID користувача';
-COMMENT ON COLUMN admin.user_roles.role_id IS 'ID групи';
-COMMENT ON COLUMN admin.user_roles.uid IS 'Користувач, який створив запис в БД';
-COMMENT ON COLUMN admin.user_roles.expiration IS 'закінчення терміну дії доступу до групи';
-COMMENT ON COLUMN admin.user_roles.access_granted IS 'Ідентифікатор користувача який надав доступ';
-COMMENT ON COLUMN admin.user_roles.access_granted_time IS 'Час коли надали доступ';
-COMMENT ON COLUMN admin.user_roles.actions IS 'Рівень доступу користувача в межах групи';
-
-CREATE INDEX IF NOT EXISTS admin_user_roles_access_user_uid_idx ON admin.user_roles USING btree (user_uid COLLATE pg_catalog."default");
-CREATE INDEX IF NOT EXISTS admin_user_roles_cdate_btree_idx ON admin.user_roles USING btree (cdate);
-CREATE INDEX IF NOT EXISTS admin_user_roles_editor_date_btree_idx ON admin.user_roles USING btree (editor_date);
-CREATE INDEX IF NOT EXISTS admin_user_roles_user_uid_gin_idx ON admin.user_roles USING gin (user_uid COLLATE pg_catalog."default" public.gin_trgm_ops);
-CREATE INDEX IF NOT EXISTS admin_user_roles_role_id_idx ON admin.user_roles USING btree (role_id COLLATE pg_catalog."default");
-
-
--- Route (Interface) <> User / Role (Group)
--- drop table if exists admin.role_access;
-drop table if exists admin.access;
-
-CREATE TABLE if not exists admin.role_access();
-alter table admin.role_access DROP CONSTRAINT if exists admin_access_id_pkey;
-alter table admin.role_access DROP CONSTRAINT if exists admin_role_access_id_pkey;
-alter table admin.role_access DROP CONSTRAINT if exists admin_access_role_id_fkey;
-alter table admin.role_access DROP CONSTRAINT if exists admin_access_route_id_uid_unique;
-alter table admin.role_access DROP CONSTRAINT if exists admin_access_route_id_fkey;
-
-alter table admin.role_access add column if not exists access_id text NOT NULL DEFAULT next_id();
-alter table admin.role_access add column if not exists route_id text NOT NULL;
-alter table admin.role_access add column if not exists role_id text;
-alter table admin.role_access add column if not exists user_uid text;
-alter table admin.role_access add column if not exists scope text;
-alter table admin.role_access add column if not exists actions text[];
-ALTER TABLE admin.role_access ADD COLUMN IF NOT EXISTS access_granted text;
-ALTER TABLE admin.role_access ADD COLUMN IF NOT EXISTS access_granted_time timestamp without time zone;
-alter table admin.role_access add column if not exists cdate timestamp without time zone NOT NULL DEFAULT date_trunc('seconds'::text, now());
-alter table admin.role_access add column if not exists uid text;
-alter table admin.role_access add column if not exists editor_id text;
-alter table admin.role_access add column if not exists editor_date timestamp without time zone;
-
-alter table admin.role_access add CONSTRAINT admin_role_access_id_pkey PRIMARY KEY (access_id);
-alter table admin.role_access add CONSTRAINT admin_access_role_id_fkey FOREIGN KEY (role_id) REFERENCES admin.roles (role_id);
-alter table admin.role_access add CONSTRAINT admin_access_route_id_uid_unique UNIQUE (route_id, user_uid, role_id);
-alter table admin.role_access add constraint admin_access_route_id_fkey FOREIGN KEY (route_id) REFERENCES admin.routes(route_id);
-
-
-COMMENT ON TABLE admin.role_access IS 'Налаштування прав. Відношення груп / окремих користувачів до шаблонів';
-COMMENT ON COLUMN admin.role_access.route_id IS 'ID шаблона';
-COMMENT ON COLUMN admin.role_access.role_id IS 'ID групи';
-COMMENT ON COLUMN admin.role_access.user_uid IS 'ID користувача';
-COMMENT ON COLUMN admin.role_access.scope IS 'Обмеження виведення (власні, відповідальний, всі)';
-COMMENT ON COLUMN admin.role_access.actions IS 'Доступні дії';
-COMMENT ON COLUMN admin.role_access.access_granted IS 'Ідентифікатор користувача який надав доступ';
-COMMENT ON COLUMN admin.role_access.access_granted_time IS 'Час коли надали доступ';
-
-CREATE INDEX if not exists admin_access_route_id_idx ON admin.role_access USING btree (route_id COLLATE pg_catalog."default");
-CREATE INDEX if not exists admin_access_role_id_idx ON admin.role_access USING btree (role_id COLLATE pg_catalog."default");
-
-alter table admin.role_access add column if not exists resource_id text;
-COMMENT ON COLUMN admin.role_access.resource_id IS 'ID ресурсу';
-alter table admin.role_access alter column route_id drop not null;
-
-
+create schema if not exists admin;
+create schema if not exists public;
+CREATE EXTENSION if not exists pg_trgm SCHEMA public VERSION "1.5";
+
+
+-- Admin Menu
+-- DROP TABLE if exists admin.menu;
+CREATE TABLE if not exists admin.menu();
+alter table admin.menu DROP CONSTRAINT if exists admin_menu_id_pkey cascade;
+alter table admin.menu DROP CONSTRAINT if exists admin_menu_name_unique;
+
+alter table admin.menu add column if not exists menu_id text NOT NULL default next_id();
+alter table admin.menu add column if not exists name text;
+alter table admin.menu add column if not exists ord numeric;
+alter table admin.menu add column if not exists enabled boolean NOT NULL DEFAULT true;
+alter table admin.menu add column if not exists uid text;
+alter table admin.menu add column if not exists editor_id text;
+alter table admin.menu add column if not exists editor_date timestamp without time zone;
+alter table admin.menu add column if not exists cdate timestamp without time zone DEFAULT now();
+alter table admin.menu add CONSTRAINT admin_menu_id_pkey PRIMARY KEY (menu_id);
+alter table admin.menu add CONSTRAINT admin_menu_name_unique UNIQUE (name);
+
+COMMENT ON TABLE admin.menu IS 'Пункти меню';
+COMMENT ON COLUMN admin.menu.menu_id IS 'Ідентифікатор пункту меню';
+COMMENT ON COLUMN admin.menu.name IS 'Назва пункту меню';
+COMMENT ON COLUMN admin.menu.ord IS 'Порядковий номер';
+COMMENT ON COLUMN admin.menu.enabled IS 'On / Off';
+
+
+
+
+-- Role (Group)
+-- drop table if exists admin.roles;
+CREATE TABLE if not exists admin.roles();
+alter table admin.roles DROP CONSTRAINT if exists admin_roles_id_pkey cascade;
+
+ALTER TABLE admin.roles ADD COLUMN if not exists role_id text NOT NULL DEFAULT next_id();
+ALTER TABLE admin.roles ADD COLUMN if not exists name text;
+ALTER TABLE admin.roles ADD COLUMN if not exists enabled boolean;
+ALTER TABLE admin.roles ADD COLUMN if not exists info text;
+ALTER TABLE admin.roles ADD COLUMN if not exists cdate timestamp without time zone DEFAULT date_trunc('seconds'::text, now());
+ALTER TABLE admin.roles ADD COLUMN if not exists uid text;
+ALTER TABLE admin.roles ADD COLUMN if not exists editor_id text;
+ALTER TABLE admin.roles ADD COLUMN if not exists editor_date timestamp without time zone;
+
+ALTER TABLE admin.roles ADD CONSTRAINT admin_roles_id_pkey PRIMARY KEY(role_id);
+
+COMMENT ON TABLE admin.roles IS 'Групи';
+COMMENT ON COLUMN admin.roles.role_id IS 'ID';
+COMMENT ON COLUMN admin.roles.name IS 'Назва групи';
+COMMENT ON COLUMN admin.roles.enabled IS 'On / Off';
+COMMENT ON COLUMN admin.roles.info IS 'Опис групи';
+COMMENT ON COLUMN admin.roles.cdate IS 'Дата створення';
+COMMENT ON COLUMN admin.roles.uid IS 'Хто створив';
+COMMENT ON COLUMN admin.roles.editor_id IS 'Останній редагувач';
+COMMENT ON COLUMN admin.roles.editor_date IS 'Дата останнього редагування';
+
+-- Routes (Interfaces)
+-- DROP TABLE if exists admin.routes;
+CREATE TABLE if not exists admin.routes();
+alter table admin.routes DROP CONSTRAINT if exists admin_route_id_pkey cascade;
+alter table admin.routes DROP constraint if exists admin_route_menu_id_fkey cascade;
+alter table admin.routes DROP constraint if exists admin_route_alias_query_unique cascade;
+
+alter table admin.routes add column if not exists route_id text;
+alter table admin.routes alter column route_id set not null;
+alter table admin.routes alter column route_id set default next_id();
+alter table admin.routes add column if not exists alias text;
+alter table admin.routes alter column alias drop not null;
+-- alter table admin.routes alter column alias set not null;
+alter table admin.routes add column if not exists table_name text;
+alter table admin.routes alter column table_name drop not null;
+-- alter table admin.routes alter column table_name set not null;
+alter table admin.routes add column if not exists query text;
+alter table admin.routes add column if not exists actions text[];
+alter table admin.routes add column if not exists access text;
+alter table admin.routes add column if not exists title text;
+alter table admin.routes add column if not exists public boolean;
+alter table admin.routes add column if not exists menu_id text;
+alter table admin.routes add column if not exists uid text;
+alter table admin.routes add column if not exists editor_id text;
+alter table admin.routes add column if not exists editor_date timestamp without time zone;
+alter table admin.routes add column if not exists cdate timestamp without time zone DEFAULT now();
+alter table admin.routes alter column cdate set DEFAULT now();
+alter table admin.routes add column if not exists enabled boolean;
+alter table admin.routes alter column enabled set NOT NULL;
+alter table admin.routes alter column enabled set DEFAULT true;
+
+alter table admin.routes add CONSTRAINT admin_route_id_pkey PRIMARY KEY (route_id);
+alter table admin.routes add constraint admin_route_menu_id_fkey FOREIGN KEY (menu_id) REFERENCES admin.menu(menu_id);
+
+-- alter table admin.routes add CONSTRAINT admin_route_alias_query_unique UNIQUE (alias, query);
+
+COMMENT ON TABLE admin.routes IS 'Список інтерфейсів';
+COMMENT ON COLUMN admin.routes.route_id IS 'Ідентифікатор інтерфейса';
+COMMENT ON COLUMN admin.routes.alias IS 'Назва файлу інтерфейса';
+
+COMMENT ON COLUMN admin.routes.table_name IS 'Таблиця в БД';
+comment on column admin.routes.query is 'Запит до таблиці';
+COMMENT ON COLUMN admin.routes.actions IS 'Дії';
+COMMENT ON COLUMN admin.routes.access IS 'Рівень доступу';
+COMMENT ON COLUMN admin.routes.title IS 'Назва інтерфейсу українською';
+COMMENT ON COLUMN admin.routes.public IS 'Ознака чи для всіх показується';
+COMMENT ON COLUMN admin.routes.enabled IS 'On / Off';
+COMMENT ON COLUMN admin.routes.menu_id IS 'Пункт меню (для collapse)';
+
+-- User <> Role (Group)
+-- DROP TABLE if exists admin.user_roles;
+
+CREATE TABLE if not exists admin.user_roles();
+ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_role_id_pkey;
+ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_pkey;
+ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_role_id_fkey;
+ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_user_uid_fkey;
+ALTER TABLE admin.user_roles DROP CONSTRAINT IF EXISTS admin_user_roles_user_uid_role_id_key;
+alter table admin.user_roles drop constraint if exists user_roles_user_uid_fkey;
+alter table admin.user_roles drop constraint if exists user_roles_role_id_fkey;
+alter table admin.user_roles drop constraint if exists admin_user_roles_role_id_fkey;
+
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS ugr_id text NOT NULL DEFAULT next_id();
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS user_uid text NOT NULL;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS role_id text NOT NULL;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS cdate timestamp without time zone DEFAULT date_trunc('seconds'::text, now());
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS uid text;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS editor_id text;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS editor_date timestamp without time zone;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS expiration date;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS access_granted text;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS access_granted_time timestamp without time zone;
+ALTER TABLE admin.user_roles ADD COLUMN IF NOT EXISTS actions text [];
+
+ALTER TABLE admin.user_roles ADD CONSTRAINT admin_user_roles_pkey PRIMARY KEY (ugr_id);
+delete from admin.user_roles where user_uid not in (select uid from admin.users); -- prevent migration errors caused by missing users
+ALTER TABLE admin.user_roles ADD CONSTRAINT user_roles_user_uid_fkey FOREIGN KEY (user_uid) REFERENCES admin.users (uid) MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
+ALTER TABLE admin.user_roles ADD CONSTRAINT admin_user_roles_role_id_fkey FOREIGN KEY (role_id) REFERENCES admin.roles (role_id) MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
+ALTER TABLE admin.user_roles ADD CONSTRAINT admin_user_roles_user_uid_role_id_key UNIQUE (user_uid, role_id);
+
+
+COMMENT ON TABLE admin.user_roles IS 'Відношення користувачів до груп';
+COMMENT ON COLUMN admin.user_roles.user_uid IS 'ID користувача';
+COMMENT ON COLUMN admin.user_roles.role_id IS 'ID групи';
+COMMENT ON COLUMN admin.user_roles.uid IS 'Користувач, який створив запис в БД';
+COMMENT ON COLUMN admin.user_roles.expiration IS 'закінчення терміну дії доступу до групи';
+COMMENT ON COLUMN admin.user_roles.access_granted IS 'Ідентифікатор користувача який надав доступ';
+COMMENT ON COLUMN admin.user_roles.access_granted_time IS 'Час коли надали доступ';
+COMMENT ON COLUMN admin.user_roles.actions IS 'Рівень доступу користувача в межах групи';
+
+CREATE INDEX IF NOT EXISTS admin_user_roles_access_user_uid_idx ON admin.user_roles USING btree (user_uid COLLATE pg_catalog."default");
+CREATE INDEX IF NOT EXISTS admin_user_roles_cdate_btree_idx ON admin.user_roles USING btree (cdate);
+CREATE INDEX IF NOT EXISTS admin_user_roles_editor_date_btree_idx ON admin.user_roles USING btree (editor_date);
+CREATE INDEX IF NOT EXISTS admin_user_roles_user_uid_gin_idx ON admin.user_roles USING gin (user_uid COLLATE pg_catalog."default" public.gin_trgm_ops);
+CREATE INDEX IF NOT EXISTS admin_user_roles_role_id_idx ON admin.user_roles USING btree (role_id COLLATE pg_catalog."default");
+
+
+-- Route (Interface) <> User / Role (Group)
+-- drop table if exists admin.role_access;
+drop table if exists admin.access;
+
+CREATE TABLE if not exists admin.role_access();
+alter table admin.role_access DROP CONSTRAINT if exists admin_access_id_pkey;
+alter table admin.role_access DROP CONSTRAINT if exists admin_role_access_id_pkey;
+alter table admin.role_access DROP CONSTRAINT if exists admin_access_role_id_fkey;
+alter table admin.role_access DROP CONSTRAINT if exists admin_access_route_id_uid_unique;
+alter table admin.role_access DROP CONSTRAINT if exists admin_access_route_id_fkey;
+
+alter table admin.role_access add column if not exists access_id text NOT NULL DEFAULT next_id();
+alter table admin.role_access add column if not exists route_id text NOT NULL;
+alter table admin.role_access add column if not exists role_id text;
+alter table admin.role_access add column if not exists user_uid text;
+alter table admin.role_access add column if not exists scope text;
+alter table admin.role_access add column if not exists actions text[];
+ALTER TABLE admin.role_access ADD COLUMN IF NOT EXISTS access_granted text;
+ALTER TABLE admin.role_access ADD COLUMN IF NOT EXISTS access_granted_time timestamp without time zone;
+alter table admin.role_access add column if not exists cdate timestamp without time zone NOT NULL DEFAULT date_trunc('seconds'::text, now());
+alter table admin.role_access add column if not exists uid text;
+alter table admin.role_access add column if not exists editor_id text;
+alter table admin.role_access add column if not exists editor_date timestamp without time zone;
+
+alter table admin.role_access add CONSTRAINT admin_role_access_id_pkey PRIMARY KEY (access_id);
+alter table admin.role_access add CONSTRAINT admin_access_role_id_fkey FOREIGN KEY (role_id) REFERENCES admin.roles (role_id);
+alter table admin.role_access add CONSTRAINT admin_access_route_id_uid_unique UNIQUE (route_id, user_uid, role_id);
+alter table admin.role_access add constraint admin_access_route_id_fkey FOREIGN KEY (route_id) REFERENCES admin.routes(route_id);
+
+
+COMMENT ON TABLE admin.role_access IS 'Налаштування прав. Відношення груп / окремих користувачів до шаблонів';
+COMMENT ON COLUMN admin.role_access.route_id IS 'ID шаблона';
+COMMENT ON COLUMN admin.role_access.role_id IS 'ID групи';
+COMMENT ON COLUMN admin.role_access.user_uid IS 'ID користувача';
+COMMENT ON COLUMN admin.role_access.scope IS 'Обмеження виведення (власні, відповідальний, всі)';
+COMMENT ON COLUMN admin.role_access.actions IS 'Доступні дії';
+COMMENT ON COLUMN admin.role_access.access_granted IS 'Ідентифікатор користувача який надав доступ';
+COMMENT ON COLUMN admin.role_access.access_granted_time IS 'Час коли надали доступ';
+
+CREATE INDEX if not exists admin_access_route_id_idx ON admin.role_access USING btree (route_id COLLATE pg_catalog."default");
+CREATE INDEX if not exists admin_access_role_id_idx ON admin.role_access USING btree (role_id COLLATE pg_catalog."default");
+
+alter table admin.role_access add column if not exists resource_id text;
+COMMENT ON COLUMN admin.role_access.resource_id IS 'ID ресурсу';
+alter table admin.role_access alter column route_id drop not null;
+
+

package/dist/server/migrations/template.sql

@@ -1,44 +1,44 @@
-create schema if not exists admin;
-
--- DROP TABLE is exists admin.templates;
-CREATE TABLE if not exists admin.templates();
-ALTER TABLE admin.templates add column if not exists template_id text NOT NULL DEFAULT next_id();
-ALTER TABLE admin.templates DROP CONSTRAINT if exists admin_templates_template_id_pkey cascade;
-ALTER TABLE admin.templates DROP CONSTRAINT if exists admin_templates_name_type_unique;
-
-ALTER TABLE admin.templates add column if not exists name text;
-ALTER TABLE admin.templates add column if not exists title text;
-ALTER TABLE admin.templates add column if not exists type text;
-ALTER TABLE admin.templates add column if not exists category text;
-ALTER TABLE admin.templates add column if not exists route_id text;
-ALTER TABLE admin.templates add column if not exists is_active boolean;
-ALTER TABLE admin.templates alter column is_active   set default true;
-ALTER TABLE admin.templates add column if not exists body text;
-ALTER TABLE admin.templates add column if not exists description text;
-ALTER TABLE admin.templates add column if not exists placeholders json;
-ALTER TABLE admin.templates add column if not exists version numeric;
-
-ALTER TABLE admin.templates add column if not exists created_by text;
-ALTER TABLE admin.templates add column if not exists created_at timestamp without time zone;
-ALTER TABLE admin.templates alter column created_at set DEFAULT date_trunc('seconds'::text, now());
-ALTER TABLE admin.templates add column if not exists updated_by text;
-ALTER TABLE admin.templates add column if not exists updated_at timestamp without time zone;
-ALTER TABLE admin.templates alter column updated_at set DEFAULT date_trunc('seconds'::text, now());
-
-ALTER TABLE admin.templates add CONSTRAINT admin_templates_template_id_pkey PRIMARY KEY (template_id);
-ALTER TABLE admin.templates add CONSTRAINT admin_templates_name_type_unique UNIQUE (name, type);
-
-COMMENT ON TABLE admin.templates IS 'Шаблони для друку';
-
-COMMENT ON COLUMN admin.templates.created_by IS 'ID користувача';
-
-COMMENT ON COLUMN admin.templates.name IS 'Систамна назва шаблону';
-COMMENT ON COLUMN admin.templates.title IS 'Назва шаблону українською';
-COMMENT ON COLUMN admin.templates.type IS 'Тип вихідних даних шаблону (demo/user)';
-COMMENT ON COLUMN admin.templates.category IS 'Категорія або тип документа';
-COMMENT ON COLUMN admin.templates.route_id IS 'ID інтерфейсу';
-COMMENT ON COLUMN admin.templates.is_active IS 'Чи доступний шаблон для використання';
-COMMENT ON COLUMN admin.templates.body IS 'Body HTML';
-COMMENT ON COLUMN admin.templates.description IS 'Короткий опис шаблону';
-COMMENT ON COLUMN admin.templates.placeholders IS 'Список змінних, які можна вставляти';
+create schema if not exists admin;
+
+-- DROP TABLE is exists admin.templates;
+CREATE TABLE if not exists admin.templates();
+ALTER TABLE admin.templates add column if not exists template_id text NOT NULL DEFAULT next_id();
+ALTER TABLE admin.templates DROP CONSTRAINT if exists admin_templates_template_id_pkey cascade;
+ALTER TABLE admin.templates DROP CONSTRAINT if exists admin_templates_name_type_unique;
+
+ALTER TABLE admin.templates add column if not exists name text;
+ALTER TABLE admin.templates add column if not exists title text;
+ALTER TABLE admin.templates add column if not exists type text;
+ALTER TABLE admin.templates add column if not exists category text;
+ALTER TABLE admin.templates add column if not exists route_id text;
+ALTER TABLE admin.templates add column if not exists is_active boolean;
+ALTER TABLE admin.templates alter column is_active   set default true;
+ALTER TABLE admin.templates add column if not exists body text;
+ALTER TABLE admin.templates add column if not exists description text;
+ALTER TABLE admin.templates add column if not exists placeholders json;
+ALTER TABLE admin.templates add column if not exists version numeric;
+
+ALTER TABLE admin.templates add column if not exists created_by text;
+ALTER TABLE admin.templates add column if not exists created_at timestamp without time zone;
+ALTER TABLE admin.templates alter column created_at set DEFAULT date_trunc('seconds'::text, now());
+ALTER TABLE admin.templates add column if not exists updated_by text;
+ALTER TABLE admin.templates add column if not exists updated_at timestamp without time zone;
+ALTER TABLE admin.templates alter column updated_at set DEFAULT date_trunc('seconds'::text, now());
+
+ALTER TABLE admin.templates add CONSTRAINT admin_templates_template_id_pkey PRIMARY KEY (template_id);
+ALTER TABLE admin.templates add CONSTRAINT admin_templates_name_type_unique UNIQUE (name, type);
+
+COMMENT ON TABLE admin.templates IS 'Шаблони для друку';
+
+COMMENT ON COLUMN admin.templates.created_by IS 'ID користувача';
+
+COMMENT ON COLUMN admin.templates.name IS 'Систамна назва шаблону';
+COMMENT ON COLUMN admin.templates.title IS 'Назва шаблону українською';
+COMMENT ON COLUMN admin.templates.type IS 'Тип вихідних даних шаблону (demo/user)';
+COMMENT ON COLUMN admin.templates.category IS 'Категорія або тип документа';
+COMMENT ON COLUMN admin.templates.route_id IS 'ID інтерфейсу';
+COMMENT ON COLUMN admin.templates.is_active IS 'Чи доступний шаблон для використання';
+COMMENT ON COLUMN admin.templates.body IS 'Body HTML';
+COMMENT ON COLUMN admin.templates.description IS 'Короткий опис шаблону';
+COMMENT ON COLUMN admin.templates.placeholders IS 'Список змінних, які можна вставляти';
 COMMENT ON COLUMN admin.templates.version IS 'Версія шаблону';

package/dist/server/plugins/access/funcs/getUserPermissions.js

@@ -1,11 +1,11 @@
 import pgClients from "../../pg/pgClients.js";
 import { resourcesList } from "./getResources.js";
-const q = `select resource_id as name,
-        array_intersect(coalesce(a.actions, array['read']), coalesce(c.actions, array['create', 'read', 'update', 'delete'])) as actions,
-        b.name as role
-from admin.role_access a
-left join admin.roles b on a.role_id=b.role_id and b.enabled
-left join admin.user_roles c on a.role_id=c.role_id
+const q = `select resource_id as name,
+        array_intersect(coalesce(a.actions, array['read']), coalesce(c.actions, array['create', 'read', 'update', 'delete'])) as actions,
+        b.name as role
+from admin.role_access a
+left join admin.roles b on a.role_id=b.role_id and b.enabled
+left join admin.user_roles c on a.role_id=c.role_id
 where resource_id is not null and $1 in (a.user_uid, c.user_uid)`;
 export default async function getUserPermissions({ uid, resource, table, userType, }, pg = pgClients.client) {
     if (!uid)
@@ -15,7 +15,7 @@ export default async function getUserPermissions({ uid, resource, table, userTyp
     }
     // ? in case pg.pk not set yet
     const pks = await pg
-        .query(`SELECT json_object_agg(conrelid::regclass, (SELECT attname FROM pg_attribute WHERE attrelid = c.conrelid AND attnum = c.conkey[1]) ) 
+        .query(`SELECT json_object_agg(conrelid::regclass, (SELECT attname FROM pg_attribute WHERE attrelid = c.conrelid AND attnum = c.conkey[1]) ) 
       FROM pg_constraint c WHERE contype = 'p' AND connamespace::regnamespace::text = 'admin'`)
         .then((el) => el.rows?.[0]?.json_object_agg || {});
     const permissions = pks["admin.role_access"] &&

package/dist/server/plugins/auth/funcs/authorizeUser.js

@@ -83,10 +83,10 @@ export default async function authorizeUser(user, req, authType = "creds-user",
         twofaEnabled &&
         !req.session?.secondFactorPassed) {
         const verified = await pg
-            .query(`select
-          enabled and social_auth_url is not null as verified
-        from admin.users_social_auth
-        where uid = $1
+            .query(`select
+          enabled and social_auth_url is not null as verified
+        from admin.users_social_auth
+        where uid = $1
         and social_auth_type = $2`, [user.uid, "TOTP"])
             .then((el) => el.rows?.[0]?.verified || false);
         const redirect2fa = `${config.auth?.link?.["2fa"]?.login || "/2factor"}?redirect=${redirectUrl.startsWith("/") ? redirectUrl : "/"}`;

package/dist/server/plugins/auth/funcs/getQuery.js

@@ -1,24 +1,24 @@
-const insertSocialSQL = `insert into admin.users_social_auth(uid, phone, user_name, sur_name, email, social_auth_id, 
-social_auth_type, social_auth_date, social_auth_obj, city, enabled)
-select $9, $1, $2, $3, $4, $5,
-$6, now(), $7, $8, true
-on conflict(social_auth_id,email) do update set
-  phone=excluded.phone, user_name=excluded.user_name,
-  sur_name=excluded.sur_name, email=excluded.email, social_auth_id=excluded.social_auth_id,
-  social_auth_type=excluded.social_auth_type, social_auth_date=excluded.social_auth_date,
+const insertSocialSQL = `insert into admin.users_social_auth(uid, phone, user_name, sur_name, email, social_auth_id, 
+social_auth_type, social_auth_date, social_auth_obj, city, enabled)
+select $9, $1, $2, $3, $4, $5,
+$6, now(), $7, $8, true
+on conflict(social_auth_id,email) do update set
+  phone=excluded.phone, user_name=excluded.user_name,
+  sur_name=excluded.sur_name, email=excluded.email, social_auth_id=excluded.social_auth_id,
+  social_auth_type=excluded.social_auth_type, social_auth_date=excluded.social_auth_date,
   social_auth_obj=excluded.social_auth_obj, city=excluded.city, enabled=excluded.enabled`;
-const insertUserSQL = `insert into admin.users (enabled, phone, user_name, sur_name, father_name, email, user_rnokpp)
-values(true, $1, $2, $3, $4, $5, $6)
-on conflict (user_rnokpp) do update set
-  phone=excluded.phone,
-  user_name=excluded.user_name,
-  sur_name=excluded.sur_name,
-  father_name=excluded.father_name,
-  email=excluded.email
+const insertUserSQL = `insert into admin.users (enabled, phone, user_name, sur_name, father_name, email, user_rnokpp)
+values(true, $1, $2, $3, $4, $5, $6)
+on conflict (user_rnokpp) do update set
+  phone=excluded.phone,
+  user_name=excluded.user_name,
+  sur_name=excluded.sur_name,
+  father_name=excluded.father_name,
+  email=excluded.email
 returning uid`;
-const updateUserSQL = `update admin.users set 
-phone=$1, user_name=$2, sur_name=$3,
-father_name=coalesce($4, father_name), email=$5, social_auth_id=$6,
+const updateUserSQL = `update admin.users set 
+phone=$1, user_name=$2, sur_name=$3,
+father_name=coalesce($4, father_name), email=$5, social_auth_id=$6,
 social_auth_type=$7 where uid=$8 returning uid`;
 const deleteSocialIdSQL = `delete from admin.users_social_auth where social_auth_id=$1 or email=$2`;
 import config from "../../../../config.js";
@@ -121,7 +121,7 @@ export default async function getQuery({ pg, data, }) {
         client.release();
     }
     const result = await pg
-        .query(`select * from admin.users where uid =(select uid from admin.users_social_auth 
+        .query(`select * from admin.users where uid =(select uid from admin.users_social_auth 
   where ${id ? "social_auth_id=$1" : "email=$1"} limit 1)`, [id || email])
         .then((el) => el.rows?.[0] || {});
     return { ...result, isNewUser: !(userId || socialUserId) };

package/dist/server/plugins/auth/index.js

@@ -7,8 +7,8 @@ import config from "../../../config.js";
 import getRedis from "../redis/funcs/getRedis.js";
 import { ForbiddenError } from "../../../errors.js";
 const { prefix = "/api" } = config;
-const { secret } = config.auth || {};
-if (!secret) {
+const { auth } = config || {};
+if (!auth?.secret && process.platform !== 'win32') {
     throw new Error("environment variable auth.secret not set");
 }
 const fastifyPassport = new Authenticator();
@@ -127,7 +127,7 @@ function plugin(fastify) {
         parseOptions: config?.auth?.cookieOptions || { secure: false },
     });
     fastify.register(session, {
-        secret: secret,
+        secret: auth?.secret || 'fastify-session-redis-store-secret',
         cookieName: "session_auth",
         cookie: config?.auth?.cookieOptions || { secure: false },
         store: new RedisStore({