@tomei/sso 0.64.0 → 0.65.0

package/__tests__/unit/components/user-system-access/user-system-access.spec.ts

@@ -1,90 +1,90 @@
-import { UserSystemAccess } from '../../../../src/components/user-system-access/user-system-access';
-import { UserSystemAccessRepository } from '../../../../src/components/user-system-access/user-system-access.repository';
-import { ClassError } from '@tomei/general';
-
-describe('UserSystemAccess', () => {
-  let userSystemAccess: UserSystemAccess;
-  const userSystemAccessAttr = {
-    UserSystemAccessId: 1,
-    UserId: 1,
-    SystemCode: 'system1',
-    Status: 'active',
-    CreatedById: 1,
-    CreatedAt: new Date(),
-    UpdatedById: 1,
-    UpdatedAt: new Date(),
-  };
-
-  beforeEach(() => {
-    userSystemAccess = new (UserSystemAccess as any)(userSystemAccessAttr);
-  });
-
-  afterEach(() => {
-    jest.clearAllMocks();
-  });
-
-  describe('constructor', () => {
-    it('should create a new UserSystemAccess instance', () => {
-      expect(userSystemAccess).toBeDefined();
-      expect(userSystemAccess).toBeInstanceOf(UserSystemAccess);
-      expect(userSystemAccess.UserSystemAccessId).toBe(
-        userSystemAccessAttr.UserSystemAccessId
-      );
-      expect(userSystemAccess.UserId).toBe(userSystemAccessAttr.UserId);
-      expect(userSystemAccess.SystemCode).toBe(userSystemAccessAttr.SystemCode);
-      expect(userSystemAccess.Status).toBe(userSystemAccessAttr.Status);
-      expect(userSystemAccess.CreatedById).toBe(
-        userSystemAccessAttr.CreatedById
-      );
-      expect(userSystemAccess.CreatedAt).toBe(userSystemAccessAttr.CreatedAt);
-      expect(userSystemAccess.UpdatedById).toBe(
-        userSystemAccessAttr.UpdatedById
-      );
-      expect(userSystemAccess.UpdatedAt).toBe(userSystemAccessAttr.UpdatedAt);
-    });
-  });
-
-  describe('init', () => {
-    it('should initialize UserSystemAccess with valid UserSystemAccessId', async () => {
-      const findOneMock = jest
-        .spyOn(UserSystemAccessRepository.prototype, 'findOne')
-        .mockResolvedValueOnce({
-          ...userSystemAccessAttr,
-          get: () => userSystemAccessAttr,
-        } as any);
-
-      const result = await UserSystemAccess.init(null, 1);
-
-      expect(findOneMock).toHaveBeenCalledTimes(1);
-      expect(findOneMock).toHaveBeenCalledWith({
-        where: { UserSystemAccessId: 1 },
-        transaction: null,
-      });
-      expect(result).toBeInstanceOf(UserSystemAccess);
-      expect(result.UserSystemAccessId).toBe(
-        userSystemAccessAttr.UserSystemAccessId
-      );
-      expect(result.UserId).toBe(userSystemAccessAttr.UserId);
-      expect(result.SystemCode).toBe(userSystemAccessAttr.SystemCode);
-      expect(result.Status).toBe(userSystemAccessAttr.Status);
-      expect(result.CreatedById).toBe(userSystemAccessAttr.CreatedById);
-      expect(result.CreatedAt).toBe(userSystemAccessAttr.CreatedAt);
-      expect(result.UpdatedById).toBe(userSystemAccessAttr.UpdatedById);
-      expect(result.UpdatedAt).toBe(userSystemAccessAttr.UpdatedAt);
-    });
-
-    it('should throw ClassError when UserSystemAccessId is not found', async () => {
-      jest
-        .spyOn(UserSystemAccessRepository.prototype, 'findOne')
-        .mockResolvedValueOnce(null);
-
-      try {
-        await UserSystemAccess.init(null, 1)
-        expect(false).toBe(true);
-      } catch (error) {
-        expect(error).toBeInstanceOf(ClassError);
-        expect(error.message).toBe('UserSystemAccess not found');
-      }
-    });
-  });
+import { UserSystemAccess } from '../../../../src/components/user-system-access/user-system-access';
+import { UserSystemAccessRepository } from '../../../../src/components/user-system-access/user-system-access.repository';
+import { ClassError } from '@tomei/general';
+
+describe('UserSystemAccess', () => {
+  let userSystemAccess: UserSystemAccess;
+  const userSystemAccessAttr = {
+    UserSystemAccessId: 1,
+    UserId: 1,
+    SystemCode: 'system1',
+    Status: 'active',
+    CreatedById: 1,
+    CreatedAt: new Date(),
+    UpdatedById: 1,
+    UpdatedAt: new Date(),
+  };
+
+  beforeEach(() => {
+    userSystemAccess = new (UserSystemAccess as any)(userSystemAccessAttr);
+  });
+
+  afterEach(() => {
+    jest.clearAllMocks();
+  });
+
+  describe('constructor', () => {
+    it('should create a new UserSystemAccess instance', () => {
+      expect(userSystemAccess).toBeDefined();
+      expect(userSystemAccess).toBeInstanceOf(UserSystemAccess);
+      expect(userSystemAccess.UserSystemAccessId).toBe(
+        userSystemAccessAttr.UserSystemAccessId
+      );
+      expect(userSystemAccess.UserId).toBe(userSystemAccessAttr.UserId);
+      expect(userSystemAccess.SystemCode).toBe(userSystemAccessAttr.SystemCode);
+      expect(userSystemAccess.Status).toBe(userSystemAccessAttr.Status);
+      expect(userSystemAccess.CreatedById).toBe(
+        userSystemAccessAttr.CreatedById
+      );
+      expect(userSystemAccess.CreatedAt).toBe(userSystemAccessAttr.CreatedAt);
+      expect(userSystemAccess.UpdatedById).toBe(
+        userSystemAccessAttr.UpdatedById
+      );
+      expect(userSystemAccess.UpdatedAt).toBe(userSystemAccessAttr.UpdatedAt);
+    });
+  });
+
+  describe('init', () => {
+    it('should initialize UserSystemAccess with valid UserSystemAccessId', async () => {
+      const findOneMock = jest
+        .spyOn(UserSystemAccessRepository.prototype, 'findOne')
+        .mockResolvedValueOnce({
+          ...userSystemAccessAttr,
+          get: () => userSystemAccessAttr,
+        } as any);
+
+      const result = await UserSystemAccess.init(null, 1);
+
+      expect(findOneMock).toHaveBeenCalledTimes(1);
+      expect(findOneMock).toHaveBeenCalledWith({
+        where: { UserSystemAccessId: 1 },
+        transaction: null,
+      });
+      expect(result).toBeInstanceOf(UserSystemAccess);
+      expect(result.UserSystemAccessId).toBe(
+        userSystemAccessAttr.UserSystemAccessId
+      );
+      expect(result.UserId).toBe(userSystemAccessAttr.UserId);
+      expect(result.SystemCode).toBe(userSystemAccessAttr.SystemCode);
+      expect(result.Status).toBe(userSystemAccessAttr.Status);
+      expect(result.CreatedById).toBe(userSystemAccessAttr.CreatedById);
+      expect(result.CreatedAt).toBe(userSystemAccessAttr.CreatedAt);
+      expect(result.UpdatedById).toBe(userSystemAccessAttr.UpdatedById);
+      expect(result.UpdatedAt).toBe(userSystemAccessAttr.UpdatedAt);
+    });
+
+    it('should throw ClassError when UserSystemAccessId is not found', async () => {
+      jest
+        .spyOn(UserSystemAccessRepository.prototype, 'findOne')
+        .mockResolvedValueOnce(null);
+
+      try {
+        await UserSystemAccess.init(null, 1)
+        expect(false).toBe(true);
+      } catch (error) {
+        expect(error).toBeInstanceOf(ClassError);
+        expect(error.message).toBe('UserSystemAccess not found');
+      }
+    });
+  });
 });

package/__tests__/unit/redis-client/redis.service.spec.ts

@@ -1,24 +1,24 @@
-import { RedisService } from "../../../src/redis-client/redis.service";
-require('dotenv').config()
-// nneed to figure out how to mock redis
-describe('redis.service', () => {
-
-    afterEach(() => {
-        jest.restoreAllMocks()
-    })
-
-    it('should return redis service when instansiated', async () => {
-        const redisService = await RedisService.init();
-        expect(redisService).toBeDefined();
-    });
-
-    it('should able to write and read redis', async () => {
-        const data = {
-            test: 'test'
-        }
-        const redisService = await RedisService.init();
-        await redisService.set("test", data, 60 * 60 * 24 * 1)
-        const result = await redisService.get("test");
-        expect(result).toEqual(JSON.stringify(data));
-    });
+import { RedisService } from "../../../src/redis-client/redis.service";
+require('dotenv').config()
+// nneed to figure out how to mock redis
+describe('redis.service', () => {
+
+    afterEach(() => {
+        jest.restoreAllMocks()
+    })
+
+    it('should return redis service when instansiated', async () => {
+        const redisService = await RedisService.init();
+        expect(redisService).toBeDefined();
+    });
+
+    it('should able to write and read redis', async () => {
+        const data = {
+            test: 'test'
+        }
+        const redisService = await RedisService.init();
+        await redisService.set("test", data, 60 * 60 * 24 * 1)
+        const result = await redisService.get("test");
+        expect(result).toEqual(JSON.stringify(data));
+    });
 });

package/__tests__/unit/session/session.service.spec.ts

@@ -1,47 +1,47 @@
-import { IUserSession } from '../../../src/interfaces/user-session.interface';
-import { SessionService } from '../../../src/session/session.service';
-require('dotenv').config()
-
-describe('session.service', () => {
-  it('should return session service when instansiated', async () => {
-    const sessionService = await SessionService.init();
-    expect(sessionService).toBeDefined();
-  });
-
-  it('should able to write session data', async () => {
-    const data: IUserSession = {
-      systemLogins: [
-        {
-          id: '1',
-          code: 'EZC',
-          sessionId: 'test1',
-          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
-        },
-      ],
-    };
-    const sessionService = await SessionService.init();
-    await sessionService.setUserSession("1", data)
-    const result = await sessionService.retrieveUserSession("1");
-    expect(result).toEqual(data);
-  });
-
-  it('should able to refresh session data', async () => {
-    const setUserSession = jest.spyOn(SessionService.prototype, 'setUserSession');
-    const retrieveUserSession = jest.spyOn(SessionService.prototype, 'retrieveUserSession');
-    const data: IUserSession = {
-      systemLogins: [
-        {
-          id: '1',
-          code: 'EZC',
-          sessionId: 'test1',
-          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
-        },
-      ],
-    };
-    const sessionService = await SessionService.init();
-    await sessionService.setUserSession("1", data)
-    await sessionService.refreshDuration("1");
-    expect(setUserSession).toHaveBeenCalledTimes(2);
-    expect(retrieveUserSession).toHaveBeenCalledTimes(1);
-  });
-});
+import { IUserSession } from '../../../src/interfaces/user-session.interface';
+import { SessionService } from '../../../src/session/session.service';
+require('dotenv').config()
+
+describe('session.service', () => {
+  it('should return session service when instansiated', async () => {
+    const sessionService = await SessionService.init();
+    expect(sessionService).toBeDefined();
+  });
+
+  it('should able to write session data', async () => {
+    const data: IUserSession = {
+      systemLogins: [
+        {
+          id: '1',
+          code: 'EZC',
+          sessionId: 'test1',
+          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
+        },
+      ],
+    };
+    const sessionService = await SessionService.init();
+    await sessionService.setUserSession("1", data)
+    const result = await sessionService.retrieveUserSession("1");
+    expect(result).toEqual(data);
+  });
+
+  it('should able to refresh session data', async () => {
+    const setUserSession = jest.spyOn(SessionService.prototype, 'setUserSession');
+    const retrieveUserSession = jest.spyOn(SessionService.prototype, 'retrieveUserSession');
+    const data: IUserSession = {
+      systemLogins: [
+        {
+          id: '1',
+          code: 'EZC',
+          sessionId: 'test1',
+          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
+        },
+      ],
+    };
+    const sessionService = await SessionService.init();
+    await sessionService.setUserSession("1", data)
+    await sessionService.refreshDuration("1");
+    expect(setUserSession).toHaveBeenCalledTimes(2);
+    expect(retrieveUserSession).toHaveBeenCalledTimes(1);
+  });
+});

package/__tests__/unit/system-privilege/system-privilage.spec.ts

@@ -1,91 +1,91 @@
-// import { Privilege } from '../../../src/components/system-privilege/privilege';
-// import { SystemPrivilegeRepository } from '../../../src/components/system-privilege/system-privilege.repository';
-// import { SystemRepository } from '../../../src/components/system/system.repository';
-// describe('SystemPrivilege', () => {
-//   afterEach(async () => {
-//     jest.restoreAllMocks();
-//   });
-//   it('should be able to load single package privileges', async () => {
-//     let privilegeCalled = 0;
-//     const findOrCreateMock = jest
-//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
-//       .mockResolvedValueOnce([{}, true] as any);
-
-//     const systemRepositoryMock = jest
-//       .spyOn(SystemRepository.prototype, 'findOne')
-//       .mockResolvedValueOnce({
-//         id: 175,
-//       } as any);
-
-//     jest.mock('@tomei/mailer/privileges.json', () => {
-//       privilegeCalled++;
-//       return {
-//         Privileges: [
-//           {
-//             Code: 'Privilege1',
-//             Description: 'This is Privilege1',
-//           },
-//         ],
-//       };
-//     });
-
-//     await Privilege.loadPrivileges('mailer', 'EZC');
-//     expect(findOrCreateMock).toBeCalledTimes(1);
-//     expect(systemRepositoryMock).toBeCalledTimes(1);
-//     expect(privilegeCalled).toEqual(1);
-//   });
-
-//   it('should be able to load multiple package privileges', async () => {
-//     let privilegeCalled = 0;
-//     const findOrCreateMock = jest
-//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
-//       .mockResolvedValueOnce([{}, true] as any);
-
-//     const systemRepositoryMock = jest
-//       .spyOn(SystemRepository.prototype, 'findOne')
-//       .mockResolvedValueOnce({
-//         id: 175,
-//       } as any);
-
-//     jest.mock(
-//       '@tomei/mailer/privileges.json',
-//       () => {
-//         privilegeCalled++;
-//         return {
-//           Privileges: [
-//             {
-//               Code: 'Privilege1',
-//               Description: 'This is Privilege1',
-//             },
-//           ],
-//         };
-//       },
-//     );
-
-//     jest.mock(
-//       '@tomei/config/privileges.json',
-//       () => {
-//         privilegeCalled++;
-//         return {
-//           Privileges: [
-//             {
-//               Code: 'Privilege2',
-//               Description: 'This is Privilege2',
-//             },
-//           ],
-//         };
-//       },
-//     );
-
-//     await Privilege.loadPrivileges(['mailer', 'config'], 'EZC');
-//     expect(findOrCreateMock).toBeCalledTimes(2);
-//     expect(systemRepositoryMock).toBeCalledTimes(1);
-//     expect(privilegeCalled).toEqual(2);
-//   });
-// });
-
-describe('SystemPrivilege', () => {
-  it('should be true', () => {
-    expect(true).toBe(true);
-  });
-});
+// import { Privilege } from '../../../src/components/system-privilege/privilege';
+// import { SystemPrivilegeRepository } from '../../../src/components/system-privilege/system-privilege.repository';
+// import { SystemRepository } from '../../../src/components/system/system.repository';
+// describe('SystemPrivilege', () => {
+//   afterEach(async () => {
+//     jest.restoreAllMocks();
+//   });
+//   it('should be able to load single package privileges', async () => {
+//     let privilegeCalled = 0;
+//     const findOrCreateMock = jest
+//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
+//       .mockResolvedValueOnce([{}, true] as any);
+
+//     const systemRepositoryMock = jest
+//       .spyOn(SystemRepository.prototype, 'findOne')
+//       .mockResolvedValueOnce({
+//         id: 175,
+//       } as any);
+
+//     jest.mock('@tomei/mailer/privileges.json', () => {
+//       privilegeCalled++;
+//       return {
+//         Privileges: [
+//           {
+//             Code: 'Privilege1',
+//             Description: 'This is Privilege1',
+//           },
+//         ],
+//       };
+//     });
+
+//     await Privilege.loadPrivileges('mailer', 'EZC');
+//     expect(findOrCreateMock).toBeCalledTimes(1);
+//     expect(systemRepositoryMock).toBeCalledTimes(1);
+//     expect(privilegeCalled).toEqual(1);
+//   });
+
+//   it('should be able to load multiple package privileges', async () => {
+//     let privilegeCalled = 0;
+//     const findOrCreateMock = jest
+//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
+//       .mockResolvedValueOnce([{}, true] as any);
+
+//     const systemRepositoryMock = jest
+//       .spyOn(SystemRepository.prototype, 'findOne')
+//       .mockResolvedValueOnce({
+//         id: 175,
+//       } as any);
+
+//     jest.mock(
+//       '@tomei/mailer/privileges.json',
+//       () => {
+//         privilegeCalled++;
+//         return {
+//           Privileges: [
+//             {
+//               Code: 'Privilege1',
+//               Description: 'This is Privilege1',
+//             },
+//           ],
+//         };
+//       },
+//     );
+
+//     jest.mock(
+//       '@tomei/config/privileges.json',
+//       () => {
+//         privilegeCalled++;
+//         return {
+//           Privileges: [
+//             {
+//               Code: 'Privilege2',
+//               Description: 'This is Privilege2',
+//             },
+//           ],
+//         };
+//       },
+//     );
+
+//     await Privilege.loadPrivileges(['mailer', 'config'], 'EZC');
+//     expect(findOrCreateMock).toBeCalledTimes(2);
+//     expect(systemRepositoryMock).toBeCalledTimes(1);
+//     expect(privilegeCalled).toEqual(2);
+//   });
+// });
+
+describe('SystemPrivilege', () => {
+  it('should be true', () => {
+    expect(true).toBe(true);
+  });
+});

package/create-sso-user.sql

@@ -1,40 +1,40 @@
-
--- example to create sso-user
-CREATE USER 'sso_user'@'environment' IDENTIFIED BY 'password';
-
--- example to grant neccesary access to run migration
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_authorization_codes TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_bearer_tokens TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_building_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_buildings  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_cities TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_companies  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_countries TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_departments  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_grouproleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemaccess  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_oauth_tokens  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_sequelize_meta  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staff_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staffs  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_states  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_system_accesses  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemroleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systems  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_updated_history  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_user_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usergroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_users  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_UserUserGroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production._prisma_migrations  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-
-
--- Grant user to create, alter, drop, references on the database (required for creating shadow tables)
+
+-- example to create sso-user
+CREATE USER 'sso_user'@'environment' IDENTIFIED BY 'password';
+
+-- example to grant neccesary access to run migration
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_authorization_codes TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_bearer_tokens TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_building_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_buildings  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_cities TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_companies  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_countries TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_departments  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_grouproleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemaccess  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_oauth_tokens  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_sequelize_meta  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staff_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staffs  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_states  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_system_accesses  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemroleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systems  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_updated_history  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_user_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usergroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_users  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_UserUserGroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production._prisma_migrations  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+
+
+-- Grant user to create, alter, drop, references on the database (required for creating shadow tables)
 GRANT CREATE, ALTER, DROP, REFERENCES ON shadow_database.* TO 'sso_user'@'localhost' WITH GRANT OPTION;

package/dist/src/components/login-user/user.js

@@ -1229,7 +1229,7 @@ class User extends general_1.UserBase {
                 transaction: dbTransaction,
             });
             let systemAccesses = dataSystemAccesses;
-            if (group.InheritParentPrivilegeYN === 'Y' && group.ParentGroupCode) {
+            if (group.InheritParentSystemAccessYN === 'Y' && group.ParentGroupCode) {
                 const GroupCode = group.ParentGroupCode;
                 const parentGroup = yield User._GroupRepo.findByPk(GroupCode, dbTransaction);
                 const dataParentSystemAccesses = yield User.getInheritedSystemAccess(dbTransaction, parentGroup);