DeforaNetworks/corteza
DeforaNetworks/corteza
3
0
Fork 0
Code

Remove namespace & permission provisioning from old migration files

Browse Source
This commit is contained in:
Denis Arh 2019-09-26 15:23:59 +02:00
parent b892dbfd38
commit 792c2aa62d
5 changed files with 2 additions and 79 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
compose/db/mysql/static.go
View File

File diff suppressed because one or more lines are too long

3
compose/db/schema/mysql/20190428080000.namespace-refs.up.sql
View File

@ -1,6 +1,3 @@
INSERT IGNORE INTO compose_namespace (id, name, slug, enabled, meta)
VALUES (88714882739863655, 'Crust CRM', 'crm', true, '{}');
ALTER TABLE `compose_attachment`
ADD `rel_namespace` BIGINT UNSIGNED NOT NULL AFTER `id`,
ADD INDEX (`rel_namespace`);

2
system/db/mysql/static.go
View File

File diff suppressed because one or more lines are too long

66
system/db/schema/mysql/20190226160000.system_roles_and_rules.up.sql
View File

@ -2,69 +2,3 @@ REPLACE INTO `sys_role` (`id`, `name`, `handle`) VALUES
(1, 'Everyone', 'everyone'),
(2, 'Administrators', 'admins');
-- Value: Allow (2), Deny (1), Inherit(0),
REPLACE INTO `sys_rules` (`rel_role`, `resource`, `operation`, `value`) VALUES
-- Everyone
(1, 'compose:*', 'access', 2),
(1, 'messaging:*', 'access', 2),
-- Admins
(2, 'compose', 'namespace.create', 2),
(2, 'compose', 'access', 2),
(2, 'compose', 'grant', 2),
(2, 'compose:namespace:*', 'page.create', 2),
(2, 'compose:namespace:*', 'read', 2),
(2, 'compose:namespace:*', 'update', 2),
(2, 'compose:namespace:*', 'delete', 2),
(2, 'compose:namespace:*', 'module.create', 2),
(2, 'compose:namespace:*', 'chart.create', 2),
(2, 'compose:namespace:*', 'trigger.create', 2),
(2, 'compose:chart:*', 'read', 2),
(2, 'compose:chart:*', 'update', 2),
(2, 'compose:chart:*', 'delete', 2),
(2, 'compose:trigger:*', 'read', 2),
(2, 'compose:trigger:*', 'update', 2),
(2, 'compose:trigger:*', 'delete', 2),
(2, 'compose:page:*', 'read', 2),
(2, 'compose:page:*', 'update', 2),
(2, 'compose:page:*', 'delete', 2),
(2, 'system', 'access', 2),
(2, 'system', 'grant', 2),
(2, 'system', 'organisation.create', 2),
(2, 'system', 'role.create', 2),
(2, 'system:organisation:*', 'access', 2),
(2, 'system:role:*', 'read', 2),
(2, 'system:role:*', 'update', 2),
(2, 'system:role:*', 'delete', 2),
(2, 'system:role:*', 'members.manage', 2),
(2, 'messaging', 'access', 2),
(2, 'messaging', 'grant', 2),
(2, 'messaging', 'channel.public.create', 2),
(2, 'messaging', 'channel.private.create', 2),
(2, 'messaging', 'channel.group.create', 2),
(2, 'messaging:channel:*', 'update', 2),
(2, 'messaging:channel:*', 'leave', 2),
(2, 'messaging:channel:*', 'read', 2),
(2, 'messaging:channel:*', 'join', 2),
(2, 'messaging:channel:*', 'delete', 2),
(2, 'messaging:channel:*', 'undelete', 2),
(2, 'messaging:channel:*', 'archive', 2),
(2, 'messaging:channel:*', 'unarchive', 2),
(2, 'messaging:channel:*', 'members.manage', 2),
(2, 'messaging:channel:*', 'webhooks.manage', 2),
(2, 'messaging:channel:*', 'attachments.manage', 2),
(2, 'messaging:channel:*', 'message.attach', 2),
(2, 'messaging:channel:*', 'message.update.all', 2),
(2, 'messaging:channel:*', 'message.update.own', 2),
(2, 'messaging:channel:*', 'message.delete.all', 2),
(2, 'messaging:channel:*', 'message.delete.own', 2),
(2, 'messaging:channel:*', 'message.embed', 2),
(2, 'messaging:channel:*', 'message.send', 2),
(2, 'messaging:channel:*', 'message.reply', 2),
(2, 'messaging:channel:*', 'message.react', 2),
(2, 'compose:module:*', 'read', 2),
(2, 'compose:module:*', 'update', 2),
(2, 'compose:module:*', 'delete', 2),
(2, 'compose:module:*', 'record.create', 2),
(2, 'compose:module:*', 'record.read', 2),
(2, 'compose:module:*', 'record.update', 2),
(2, 'compose:module:*', 'record.delete', 2);

8
system/db/schema/mysql/20190306205033.applications.up.sql
View File

@ -31,11 +31,3 @@ REPLACE INTO `sys_application` (`id`, `name`, `enabled`, `rel_owner`, `unify`) V
'{"logo": "/applications/google_maps.png", "icon": "/applications/google_maps_icon.png", "url": "/bridge/google-maps/", "listed": true}'
);
-- Allow admin access to applications
INSERT INTO `sys_rules` (`rel_role`, `resource`, `operation`, `value`) VALUES
(1, 'system:application:*', 'read', 2),
(2, 'system', 'application.create', 2),
(2, 'system:application:*', 'read', 2),
(2, 'system:application:*', 'update', 2),
(2, 'system:application:*', 'delete', 2)
;