@tomei/sso 0.66.0 → 0.66.1-test.1

package/__tests__/unit/session/session.service.spec.ts

@@ -1,47 +1,47 @@
-import { IUserSession } from '../../../src/interfaces/user-session.interface';
-import { SessionService } from '../../../src/session/session.service';
-require('dotenv').config()
-
-describe('session.service', () => {
-  it('should return session service when instansiated', async () => {
-    const sessionService = await SessionService.init();
-    expect(sessionService).toBeDefined();
-  });
-
-  it('should able to write session data', async () => {
-    const data: IUserSession = {
-      systemLogins: [
-        {
-          id: '1',
-          code: 'EZC',
-          sessionId: 'test1',
-          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
-        },
-      ],
-    };
-    const sessionService = await SessionService.init();
-    await sessionService.setUserSession("1", data)
-    const result = await sessionService.retrieveUserSession("1");
-    expect(result).toEqual(data);
-  });
-
-  it('should able to refresh session data', async () => {
-    const setUserSession = jest.spyOn(SessionService.prototype, 'setUserSession');
-    const retrieveUserSession = jest.spyOn(SessionService.prototype, 'retrieveUserSession');
-    const data: IUserSession = {
-      systemLogins: [
-        {
-          id: '1',
-          code: 'EZC',
-          sessionId: 'test1',
-          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
-        },
-      ],
-    };
-    const sessionService = await SessionService.init();
-    await sessionService.setUserSession("1", data)
-    await sessionService.refreshDuration("1");
-    expect(setUserSession).toHaveBeenCalledTimes(2);
-    expect(retrieveUserSession).toHaveBeenCalledTimes(1);
-  });
-});
+import { IUserSession } from '../../../src/interfaces/user-session.interface';
+import { SessionService } from '../../../src/session/session.service';
+require('dotenv').config()
+
+describe('session.service', () => {
+  it('should return session service when instansiated', async () => {
+    const sessionService = await SessionService.init();
+    expect(sessionService).toBeDefined();
+  });
+
+  it('should able to write session data', async () => {
+    const data: IUserSession = {
+      systemLogins: [
+        {
+          id: '1',
+          code: 'EZC',
+          sessionId: 'test1',
+          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
+        },
+      ],
+    };
+    const sessionService = await SessionService.init();
+    await sessionService.setUserSession("1", data)
+    const result = await sessionService.retrieveUserSession("1");
+    expect(result).toEqual(data);
+  });
+
+  it('should able to refresh session data', async () => {
+    const setUserSession = jest.spyOn(SessionService.prototype, 'setUserSession');
+    const retrieveUserSession = jest.spyOn(SessionService.prototype, 'retrieveUserSession');
+    const data: IUserSession = {
+      systemLogins: [
+        {
+          id: '1',
+          code: 'EZC',
+          sessionId: 'test1',
+          privileges: ['PRIVILEGE1', 'PRIVILEGE2'],
+        },
+      ],
+    };
+    const sessionService = await SessionService.init();
+    await sessionService.setUserSession("1", data)
+    await sessionService.refreshDuration("1");
+    expect(setUserSession).toHaveBeenCalledTimes(2);
+    expect(retrieveUserSession).toHaveBeenCalledTimes(1);
+  });
+});

package/__tests__/unit/system-privilege/system-privilage.spec.ts

@@ -1,91 +1,91 @@
-// import { Privilege } from '../../../src/components/system-privilege/privilege';
-// import { SystemPrivilegeRepository } from '../../../src/components/system-privilege/system-privilege.repository';
-// import { SystemRepository } from '../../../src/components/system/system.repository';
-// describe('SystemPrivilege', () => {
-//   afterEach(async () => {
-//     jest.restoreAllMocks();
-//   });
-//   it('should be able to load single package privileges', async () => {
-//     let privilegeCalled = 0;
-//     const findOrCreateMock = jest
-//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
-//       .mockResolvedValueOnce([{}, true] as any);
-
-//     const systemRepositoryMock = jest
-//       .spyOn(SystemRepository.prototype, 'findOne')
-//       .mockResolvedValueOnce({
-//         id: 175,
-//       } as any);
-
-//     jest.mock('@tomei/mailer/privileges.json', () => {
-//       privilegeCalled++;
-//       return {
-//         Privileges: [
-//           {
-//             Code: 'Privilege1',
-//             Description: 'This is Privilege1',
-//           },
-//         ],
-//       };
-//     });
-
-//     await Privilege.loadPrivileges('mailer', 'EZC');
-//     expect(findOrCreateMock).toBeCalledTimes(1);
-//     expect(systemRepositoryMock).toBeCalledTimes(1);
-//     expect(privilegeCalled).toEqual(1);
-//   });
-
-//   it('should be able to load multiple package privileges', async () => {
-//     let privilegeCalled = 0;
-//     const findOrCreateMock = jest
-//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
-//       .mockResolvedValueOnce([{}, true] as any);
-
-//     const systemRepositoryMock = jest
-//       .spyOn(SystemRepository.prototype, 'findOne')
-//       .mockResolvedValueOnce({
-//         id: 175,
-//       } as any);
-
-//     jest.mock(
-//       '@tomei/mailer/privileges.json',
-//       () => {
-//         privilegeCalled++;
-//         return {
-//           Privileges: [
-//             {
-//               Code: 'Privilege1',
-//               Description: 'This is Privilege1',
-//             },
-//           ],
-//         };
-//       },
-//     );
-
-//     jest.mock(
-//       '@tomei/config/privileges.json',
-//       () => {
-//         privilegeCalled++;
-//         return {
-//           Privileges: [
-//             {
-//               Code: 'Privilege2',
-//               Description: 'This is Privilege2',
-//             },
-//           ],
-//         };
-//       },
-//     );
-
-//     await Privilege.loadPrivileges(['mailer', 'config'], 'EZC');
-//     expect(findOrCreateMock).toBeCalledTimes(2);
-//     expect(systemRepositoryMock).toBeCalledTimes(1);
-//     expect(privilegeCalled).toEqual(2);
-//   });
-// });
-
-describe('SystemPrivilege', () => {
-  it('should be true', () => {
-    expect(true).toBe(true);
-  });
-});
+// import { Privilege } from '../../../src/components/system-privilege/privilege';
+// import { SystemPrivilegeRepository } from '../../../src/components/system-privilege/system-privilege.repository';
+// import { SystemRepository } from '../../../src/components/system/system.repository';
+// describe('SystemPrivilege', () => {
+//   afterEach(async () => {
+//     jest.restoreAllMocks();
+//   });
+//   it('should be able to load single package privileges', async () => {
+//     let privilegeCalled = 0;
+//     const findOrCreateMock = jest
+//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
+//       .mockResolvedValueOnce([{}, true] as any);
+
+//     const systemRepositoryMock = jest
+//       .spyOn(SystemRepository.prototype, 'findOne')
+//       .mockResolvedValueOnce({
+//         id: 175,
+//       } as any);
+
+//     jest.mock('@tomei/mailer/privileges.json', () => {
+//       privilegeCalled++;
+//       return {
+//         Privileges: [
+//           {
+//             Code: 'Privilege1',
+//             Description: 'This is Privilege1',
+//           },
+//         ],
+//       };
+//     });
+
+//     await Privilege.loadPrivileges('mailer', 'EZC');
+//     expect(findOrCreateMock).toBeCalledTimes(1);
+//     expect(systemRepositoryMock).toBeCalledTimes(1);
+//     expect(privilegeCalled).toEqual(1);
+//   });
+
+//   it('should be able to load multiple package privileges', async () => {
+//     let privilegeCalled = 0;
+//     const findOrCreateMock = jest
+//       .spyOn(SystemPrivilegeRepository.prototype, 'findOrCreate')
+//       .mockResolvedValueOnce([{}, true] as any);
+
+//     const systemRepositoryMock = jest
+//       .spyOn(SystemRepository.prototype, 'findOne')
+//       .mockResolvedValueOnce({
+//         id: 175,
+//       } as any);
+
+//     jest.mock(
+//       '@tomei/mailer/privileges.json',
+//       () => {
+//         privilegeCalled++;
+//         return {
+//           Privileges: [
+//             {
+//               Code: 'Privilege1',
+//               Description: 'This is Privilege1',
+//             },
+//           ],
+//         };
+//       },
+//     );
+
+//     jest.mock(
+//       '@tomei/config/privileges.json',
+//       () => {
+//         privilegeCalled++;
+//         return {
+//           Privileges: [
+//             {
+//               Code: 'Privilege2',
+//               Description: 'This is Privilege2',
+//             },
+//           ],
+//         };
+//       },
+//     );
+
+//     await Privilege.loadPrivileges(['mailer', 'config'], 'EZC');
+//     expect(findOrCreateMock).toBeCalledTimes(2);
+//     expect(systemRepositoryMock).toBeCalledTimes(1);
+//     expect(privilegeCalled).toEqual(2);
+//   });
+// });
+
+describe('SystemPrivilege', () => {
+  it('should be true', () => {
+    expect(true).toBe(true);
+  });
+});

package/coverage/cobertura-coverage.xml

@@ -0,0 +1,237 @@
+<?xml version="1.0" ?>
+<!DOCTYPE coverage SYSTEM "http://cobertura.sourceforge.net/xml/coverage-04.dtd">
+<coverage lines-valid="78" lines-covered="49" line-rate="0.6282" branches-valid="22" branches-covered="13" branch-rate="0.5909" timestamp="1785821349520" complexity="0" version="0.1">
+  <sources>
+    <source>C:\Users\Diaz\Master\Workplaces\Projects\tomei-projects\sso</source>
+  </sources>
+  <packages>
+    <package name="components.password-hash" line-rate="1" branch-rate="1">
+      <classes>
+        <class name="password-hash.service.ts" filename="src\components\password-hash\password-hash.service.ts" line-rate="1" branch-rate="1">
+          <methods>
+            <method name="(anonymous_7)" hits="1" signature="()V">
+              <lines>
+                <line number="5" hits="1"/>
+              </lines>
+            </method>
+            <method name="(anonymous_8)" hits="1" signature="()V">
+              <lines>
+                <line number="7" hits="1"/>
+              </lines>
+            </method>
+            <method name="(anonymous_10)" hits="1" signature="()V">
+              <lines>
+                <line number="11" hits="1"/>
+              </lines>
+            </method>
+          </methods>
+          <lines>
+            <line number="1" hits="1" branch="false"/>
+            <line number="4" hits="1" branch="false"/>
+            <line number="8" hits="1" branch="false"/>
+            <line number="12" hits="1" branch="false"/>
+          </lines>
+        </class>
+      </classes>
+    </package>
+    <package name="redis-client" line-rate="0.6764" branch-rate="0.5454">
+      <classes>
+        <class name="redis.service.ts" filename="src\redis-client\redis.service.ts" line-rate="0.6764" branch-rate="0.5454">
+          <methods>
+            <method name="(anonymous_7)" hits="5" signature="()V">
+              <lines>
+                <line number="5" hits="5"/>
+              </lines>
+            </method>
+            <method name="(anonymous_8)" hits="5" signature="()V">
+              <lines>
+                <line number="7" hits="5"/>
+              </lines>
+            </method>
+            <method name="(anonymous_10)" hits="0" signature="()V">
+              <lines>
+                <line number="23" hits="0"/>
+              </lines>
+            </method>
+            <method name="(anonymous_11)" hits="0" signature="()V">
+              <lines>
+                <line number="26" hits="0"/>
+              </lines>
+            </method>
+            <method name="(anonymous_12)" hits="0" signature="()V">
+              <lines>
+                <line number="27" hits="0"/>
+              </lines>
+            </method>
+            <method name="(anonymous_13)" hits="4" signature="()V">
+              <lines>
+                <line number="39" hits="4"/>
+              </lines>
+            </method>
+            <method name="(anonymous_14)" hits="4" signature="()V">
+              <lines>
+                <line number="40" hits="4"/>
+              </lines>
+            </method>
+            <method name="(anonymous_15)" hits="3" signature="()V">
+              <lines>
+                <line number="52" hits="3"/>
+              </lines>
+            </method>
+            <method name="(anonymous_17)" hits="0" signature="()V">
+              <lines>
+                <line number="60" hits="0"/>
+              </lines>
+            </method>
+            <method name="(anonymous_19)" hits="0" signature="()V">
+              <lines>
+                <line number="68" hits="0"/>
+              </lines>
+            </method>
+          </methods>
+          <lines>
+            <line number="1" hits="2" branch="false"/>
+            <line number="2" hits="2" branch="false"/>
+            <line number="8" hits="5" branch="true" condition-coverage="50% (1/2)"/>
+            <line number="9" hits="5" branch="true" condition-coverage="100% (2/2)"/>
+            <line number="11" hits="2" branch="false"/>
+            <line number="12" hits="2" branch="false"/>
+            <line number="13" hits="2" branch="false"/>
+            <line number="14" hits="2" branch="false"/>
+            <line number="15" hits="2" branch="true" condition-coverage="50% (1/2)"/>
+            <line number="16" hits="2" branch="true" condition-coverage="50% (1/2)"/>
+            <line number="17" hits="2" branch="false"/>
+            <line number="18" hits="2" branch="false"/>
+            <line number="23" hits="2" branch="false"/>
+            <line number="24" hits="0" branch="false"/>
+            <line number="26" hits="2" branch="false"/>
+            <line number="27" hits="2" branch="false"/>
+            <line number="28" hits="0" branch="false"/>
+            <line number="31" hits="2" branch="false"/>
+            <line number="34" hits="0" branch="false"/>
+            <line number="36" hits="5" branch="false"/>
+            <line number="40" hits="4" branch="false"/>
+            <line number="44" hits="4" branch="false"/>
+            <line number="45" hits="4" branch="true" condition-coverage="50% (1/2)"/>
+            <line number="46" hits="4" branch="false"/>
+            <line number="48" hits="0" branch="false"/>
+            <line number="53" hits="3" branch="false"/>
+            <line number="54" hits="3" branch="false"/>
+            <line number="56" hits="0" branch="false"/>
+            <line number="61" hits="0" branch="false"/>
+            <line number="62" hits="0" branch="false"/>
+            <line number="64" hits="0" branch="false"/>
+            <line number="69" hits="0" branch="false"/>
+            <line number="70" hits="0" branch="false"/>
+            <line number="72" hits="0" branch="false"/>
+          </lines>
+        </class>
+      </classes>
+    </package>
+    <package name="session" line-rate="0.55" branch-rate="0.6363">
+      <classes>
+        <class name="session.service.ts" filename="src\session\session.service.ts" line-rate="0.55" branch-rate="0.6363">
+          <methods>
+            <method name="(anonymous_7)" hits="3" signature="()V">
+              <lines>
+                <line number="9" hits="3"/>
+              </lines>
+            </method>
+            <method name="(anonymous_8)" hits="3" signature="()V">
+              <lines>
+                <line number="11" hits="3"/>
+              </lines>
+            </method>
+            <method name="(anonymous_10)" hits="3" signature="()V">
+              <lines>
+                <line number="22" hits="3"/>
+              </lines>
+            </method>
+            <method name="(anonymous_11)" hits="3" signature="()V">
+              <lines>
+                <line number="23" hits="3"/>
+              </lines>
+            </method>
+            <method name="(anonymous_12)" hits="2" signature="()V">
+              <lines>
+                <line number="36" hits="2"/>
+              </lines>
+            </method>
+            <method name="(anonymous_13)" hits="2" signature="()V">
+              <lines>
+                <line number="37" hits="2"/>
+              </lines>
+            </method>
+            <method name="(anonymous_14)" hits="1" signature="()V">
+              <lines>
+                <line number="53" hits="1"/>
+              </lines>
+            </method>
+            <method name="(anonymous_15)" hits="1" signature="()V">
+              <lines>
+                <line number="54" hits="1"/>
+              </lines>
+            </method>
+            <method name="(anonymous_16)" hits="0" signature="()V">
+              <lines>
+                <line number="66" hits="0"/>
+              </lines>
+            </method>
+            <method name="(anonymous_18)" hits="0" signature="()V">
+              <lines>
+                <line number="79" hits="0"/>
+              </lines>
+            </method>
+            <method name="(anonymous_20)" hits="0" signature="()V">
+              <lines>
+                <line number="88" hits="0"/>
+              </lines>
+            </method>
+          </methods>
+          <lines>
+            <line number="1" hits="1" branch="false"/>
+            <line number="5" hits="1" branch="false"/>
+            <line number="7" hits="3" branch="false"/>
+            <line number="12" hits="3" branch="false"/>
+            <line number="13" hits="3" branch="false"/>
+            <line number="14" hits="3" branch="true" condition-coverage="50% (1/2)"/>
+            <line number="15" hits="3" branch="false"/>
+            <line number="16" hits="0" branch="true" condition-coverage="0% (0/2)"/>
+            <line number="17" hits="0" branch="false"/>
+            <line number="19" hits="3" branch="false"/>
+            <line number="23" hits="3" branch="false"/>
+            <line number="28" hits="3" branch="false"/>
+            <line number="29" hits="3" branch="false"/>
+            <line number="30" hits="3" branch="false"/>
+            <line number="32" hits="0" branch="false"/>
+            <line number="37" hits="2" branch="false"/>
+            <line number="40" hits="2" branch="false"/>
+            <line number="41" hits="2" branch="false"/>
+            <line number="42" hits="2" branch="false"/>
+            <line number="43" hits="2" branch="true" condition-coverage="50% (1/2)"/>
+            <line number="44" hits="0" branch="false"/>
+            <line number="47" hits="2" branch="false"/>
+            <line number="49" hits="0" branch="false"/>
+            <line number="54" hits="1" branch="false"/>
+            <line number="58" hits="1" branch="false"/>
+            <line number="59" hits="1" branch="false"/>
+            <line number="60" hits="1" branch="false"/>
+            <line number="62" hits="0" branch="false"/>
+            <line number="71" hits="0" branch="false"/>
+            <line number="72" hits="0" branch="false"/>
+            <line number="73" hits="0" branch="false"/>
+            <line number="75" hits="0" branch="false"/>
+            <line number="80" hits="0" branch="false"/>
+            <line number="81" hits="0" branch="false"/>
+            <line number="82" hits="0" branch="false"/>
+            <line number="84" hits="0" branch="false"/>
+            <line number="89" hits="0" branch="false"/>
+            <line number="90" hits="0" branch="false"/>
+            <line number="91" hits="0" branch="false"/>
+            <line number="93" hits="0" branch="false"/>
+          </lines>
+        </class>
+      </classes>
+    </package>
+  </packages>
+</coverage>

package/coverage/test-report.xml

@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<testExecutions version="1">
+  <file path="C:\Users\Diaz\Master\Workplaces\Projects\tomei-projects\sso\__tests__\unit\components\login-user\login.spec.ts">
+    <testCase name="LoginUser init should initialize LoginUser with valid userId" duration="134"/>
+    <testCase name="LoginUser init should throw an error when user is not found" duration="39"/>
+    <testCase name="LoginUser shouldReleaseLock should return true if autoReleaseYN is &quot;Y&quot; and time difference is greater than minuteToAutoRelease" duration="3"/>
+    <testCase name="LoginUser shouldReleaseLock should return false if autoReleaseYN is &quot;Y&quot; and time difference is less than or equal to minuteToAutoRelease" duration="2"/>
+    <testCase name="LoginUser shouldReleaseLock should return false if autoReleaseYN is &quot;N&quot;" duration="2"/>
+    <testCase name="LoginUser releaseLock should release the lock for a user" duration="2"/>
+    <testCase name="LoginUser checkUserInfoDuplicated should throw an error if duplicate user info is found" duration="109"/>
+    <testCase name="LoginUser checkUserInfoDuplicated should not throw an error if duplicate user info is not found" duration="1"/>
+    <testCase name="LoginUser generateDefaultPassword should generate a default password with the specified length" duration="3"/>
+    <testCase name="LoginUser generateDefaultPassword should generate a default password with at least one capital letter" duration="1"/>
+    <testCase name="LoginUser generateDefaultPassword should generate a default password with at least one number" duration="1"/>
+    <testCase name="LoginUser generateDefaultPassword should generate a default password with at least one special character" duration="1"/>
+    <testCase name="LoginUser generateDefaultPassword should generate a default password without any non-acceptable characters" duration="1"/>
+    <testCase name="LoginUser setPassword should set the password for the user" duration="312"/>
+    <testCase name="LoginUser setPassword should throw an error if the password does not meet the security requirements" duration="48"/>
+    <testCase name="LoginUser incrementFailedLoginAttemptCount should increment FailedLoginAttemptCount and update user status" duration="8"/>
+    <testCase name="LoginUser incrementFailedLoginAttemptCount should throw an error if maxFailedLoginAttempts or autoReleaseYN is missing" duration="6"/>
+    <testCase name="LoginUser incrementFailedLoginAttemptCount should lock the user account if the failed login attempts exceed the maximum allowed" duration="5"/>
+    <testCase name="LoginUser incrementFailedLoginAttemptCount should permanently lock the user account if the failed login attempts exceed the maximum allowed and autoReleaseYN is N" duration="7"/>
+    <testCase name="LoginUser combineSystemAccess should combine user and group system access and remove duplicates" duration="5"/>
+    <testCase name="LoginUser checkPrivileges should return true if user has the specified privilege" duration="10"/>
+    <testCase name="LoginUser checkPrivileges should return false if user does not have the specified privilege" duration="5"/>
+    <testCase name="LoginUser checkPrivileges should throw an error if ObjectId is not set" duration="9"/>
+    <testCase name="LoginUser getObjectPrivileges should return an array of privileges" duration="5"/>
+    <testCase name="LoginUser getObjectPrivileges should throw an error if an exception occurs" duration="8"/>
+    <testCase name="LoginUser getUserPersonalPrivileges should return an array of privileges" duration="4"/>
+    <testCase name="LoginUser getUserPersonalPrivileges should throw an error if an error occurs" duration="4"/>
+    <testCase name="LoginUser getInheritedSystemAccess should return group system access with its parent group system access if applicable" duration="32"/>
+  </file>
+</testExecutions>

package/create-sso-user.sql

@@ -1,40 +1,40 @@
-
--- example to create sso-user
-CREATE USER 'sso_user'@'environment' IDENTIFIED BY 'password';
-
--- example to grant neccesary access to run migration
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_authorization_codes TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_bearer_tokens TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_building_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_buildings  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_cities TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_companies  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_countries TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_departments  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_grouproleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemaccess  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_oauth_tokens  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_sequelize_meta  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staff_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staffs  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_states  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_system_accesses  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemroleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systems  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_updated_history  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_user_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usergroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_users  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_UserUserGroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production._prisma_migrations  TO 'sso_user'@'localhost' WITH GRANT OPTION;
-
-
--- Grant user to create, alter, drop, references on the database (required for creating shadow tables)
+
+-- example to create sso-user
+CREATE USER 'sso_user'@'environment' IDENTIFIED BY 'password';
+
+-- example to grant neccesary access to run migration
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_authorization_codes TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_bearer_tokens TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_building_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_buildings  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_cities TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_companies  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_countries TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_departments  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_grouproleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemaccess  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_groupsystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_oauth_tokens  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_sequelize_meta  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staff_types  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_staffs  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_states  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_system_accesses  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systemroleprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_systems  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_updated_history  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_user_roles  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usergroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_users  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemprivilege  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_usersystemrole  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production.sso_UserUserGroup  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+GRANT CREATE, ALTER, DROP, INSERT, UPDATE, DELETE, SELECT, REFERENCES on production._prisma_migrations  TO 'sso_user'@'localhost' WITH GRANT OPTION;
+
+
+-- Grant user to create, alter, drop, references on the database (required for creating shadow tables)
 GRANT CREATE, ALTER, DROP, REFERENCES ON shadow_database.* TO 'sso_user'@'localhost' WITH GRANT OPTION;