51 lines
2.6 KiB
SQL
51 lines
2.6 KiB
SQL
-- nx9-auth: Global Slugs implementation
|
|
-- A unified registry for slugs across all resources (tenant, user, group, role, app, etc.)
|
|
-- Ensures global uniqueness and immutable references.
|
|
|
|
CREATE TABLE IF NOT EXISTS global_slugs (
|
|
slug TEXT PRIMARY KEY NOT NULL,
|
|
entity_type TEXT NOT NULL, -- 'tenant', 'user', 'role', 'group', 'permission', 'application', 'service_account', 'organization', 'team'
|
|
entity_id TEXT NOT NULL,
|
|
tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
|
|
created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%SZ', 'now'))
|
|
);
|
|
|
|
CREATE INDEX IF NOT EXISTS idx_global_slugs_entity ON global_slugs(entity_type, entity_id);
|
|
CREATE INDEX IF NOT EXISTS idx_global_slugs_tenant ON global_slugs(tenant_id);
|
|
|
|
-- Add slug column to existing tables for quick lookup and joins
|
|
ALTER TABLE tenants ADD COLUMN slug TEXT;
|
|
ALTER TABLE users ADD COLUMN slug TEXT;
|
|
ALTER TABLE roles ADD COLUMN slug TEXT;
|
|
ALTER TABLE permissions ADD COLUMN slug TEXT;
|
|
ALTER TABLE applications ADD COLUMN slug TEXT;
|
|
ALTER TABLE service_accounts ADD COLUMN slug TEXT;
|
|
|
|
-- We will backfill slugs in Rust on startup or through a data migration script,
|
|
-- or we can backfill basic ones here:
|
|
UPDATE tenants SET slug = lower(replace(name, ' ', '-')) WHERE slug IS NULL;
|
|
UPDATE users SET slug = lower(username) WHERE slug IS NULL;
|
|
UPDATE roles SET slug = lower(replace(name, ' ', '-')) WHERE slug IS NULL;
|
|
UPDATE permissions SET slug = lower(replace(name, ' ', '-')) WHERE slug IS NULL;
|
|
UPDATE applications SET slug = lower(replace(name, ' ', '-')) WHERE slug IS NULL;
|
|
UPDATE service_accounts SET slug = lower(replace(name, ' ', '-')) WHERE slug IS NULL;
|
|
|
|
-- Insert the backfilled slugs into the registry
|
|
INSERT OR IGNORE INTO global_slugs (slug, entity_type, entity_id, tenant_id)
|
|
SELECT slug, 'tenant', id, id FROM tenants WHERE slug IS NOT NULL;
|
|
|
|
INSERT OR IGNORE INTO global_slugs (slug, entity_type, entity_id, tenant_id)
|
|
SELECT slug, 'user', id, tenant_id FROM users WHERE slug IS NOT NULL;
|
|
|
|
INSERT OR IGNORE INTO global_slugs (slug, entity_type, entity_id, tenant_id)
|
|
SELECT slug, 'role', id, tenant_id FROM roles WHERE slug IS NOT NULL;
|
|
|
|
INSERT OR IGNORE INTO global_slugs (slug, entity_type, entity_id, tenant_id)
|
|
SELECT slug, 'permission', id, tenant_id FROM permissions WHERE slug IS NOT NULL;
|
|
|
|
INSERT OR IGNORE INTO global_slugs (slug, entity_type, entity_id, tenant_id)
|
|
SELECT slug, 'application', id, tenant_id FROM applications WHERE slug IS NOT NULL;
|
|
|
|
INSERT OR IGNORE INTO global_slugs (slug, entity_type, entity_id, tenant_id)
|
|
SELECT slug, 'service_account', id, tenant_id FROM service_accounts WHERE slug IS NOT NULL;
|