Phase 3 Completed
This commit is contained in:
+149
-78
@@ -1,5 +1,5 @@
|
||||
// Prisma schema
|
||||
// Basic User model for RayLab Core
|
||||
// Prisma schema for RayLab Core - Phase 1
|
||||
// PostgreSQL datasource. DATABASE_URL must be set in environment.
|
||||
|
||||
generator client {
|
||||
provider = "prisma-client-js"
|
||||
@@ -11,99 +11,170 @@ datasource db {
|
||||
}
|
||||
|
||||
model User {
|
||||
id String @id @default(uuid())
|
||||
|
||||
authentikId String? @unique
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
authentikId String? @unique
|
||||
authentikUserId String? @unique
|
||||
authentikSubject String? @unique
|
||||
username String? @db.VarChar(255) @unique
|
||||
email String? @db.VarChar(320) @unique
|
||||
name String? @db.VarChar(255)
|
||||
picture String?
|
||||
isActive Boolean @default(true)
|
||||
deletedAt DateTime?
|
||||
lastSeenAt DateTime?
|
||||
lastSyncedAt DateTime?
|
||||
syncStatus String?
|
||||
storageQuota BigInt? @default(10737418240)
|
||||
storageUsed BigInt? @default(0)
|
||||
metadata Json?
|
||||
userRoles UserRole[]
|
||||
auditLogs AuditLog[]
|
||||
lastGroupHash String? @db.Text
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
|
||||
username String @unique
|
||||
email String @unique
|
||||
|
||||
|
||||
isActive Boolean @default(true)
|
||||
|
||||
// storage (in bytes)
|
||||
storageQuota BigInt @default(10737418240)
|
||||
storageUsed BigInt @default(0)
|
||||
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
deletedAt DateTime?
|
||||
lastSeenAt DateTime?
|
||||
lastSyncedAt DateTime?
|
||||
syncStatus String?
|
||||
|
||||
roles UserRole[]
|
||||
permissions UserPermission[]
|
||||
|
||||
@@index([authentikId])
|
||||
@@index([username])
|
||||
@@index([email])
|
||||
}
|
||||
|
||||
model Role {
|
||||
id String @id @default(uuid())
|
||||
|
||||
code String @unique
|
||||
name String
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
code String @unique @db.VarChar(100)
|
||||
name String @db.VarChar(255)
|
||||
displayName String? @db.VarChar(255)
|
||||
description String?
|
||||
|
||||
isDefault Boolean @default(false)
|
||||
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
|
||||
users UserRole[]
|
||||
permissions RolePermission[]
|
||||
isDefault Boolean @default(false)
|
||||
rolePermissions RolePermission[]
|
||||
userRoles UserRole[]
|
||||
mappings AuthGroupRoleMapping[]
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
}
|
||||
|
||||
model Permission {
|
||||
id String @id @default(uuid())
|
||||
|
||||
code String @unique
|
||||
name String
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
code String @unique @db.VarChar(150)
|
||||
name String @db.VarChar(255)
|
||||
displayName String? @db.VarChar(255)
|
||||
description String?
|
||||
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
|
||||
roles RolePermission[]
|
||||
users UserPermission[]
|
||||
}
|
||||
|
||||
model UserRole {
|
||||
userId String
|
||||
roleId String
|
||||
|
||||
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
|
||||
role Role @relation(fields: [roleId], references: [id], onDelete: Cascade)
|
||||
|
||||
assignedAt DateTime @default(now())
|
||||
assignedBy String
|
||||
|
||||
@@id([userId, roleId])
|
||||
rolePermissions RolePermission[]
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
}
|
||||
|
||||
model RolePermission {
|
||||
roleId String
|
||||
permissionId String
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
role Role @relation(fields: [roleId], references: [id], onDelete: Cascade)
|
||||
roleId String @db.Uuid
|
||||
permission Permission @relation(fields: [permissionId], references: [id], onDelete: Cascade)
|
||||
permissionId String @db.Uuid
|
||||
createdAt DateTime @default(now())
|
||||
|
||||
role Role @relation(fields: [roleId], references: [id], onDelete: Cascade)
|
||||
permission Permission @relation(fields: [permissionId], references: [id], onDelete: Cascade)
|
||||
|
||||
assignedAt DateTime @default(now())
|
||||
assignedBy String
|
||||
|
||||
@@id([roleId, permissionId])
|
||||
@@unique([roleId, permissionId])
|
||||
@@index([roleId])
|
||||
@@index([permissionId])
|
||||
}
|
||||
|
||||
model UserPermission {
|
||||
userId String
|
||||
permissionId String
|
||||
enum UserRoleSource {
|
||||
AUTHENTIK
|
||||
SYSTEM
|
||||
}
|
||||
|
||||
model UserRole {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
|
||||
userId String @db.Uuid
|
||||
role Role @relation(fields: [roleId], references: [id], onDelete: Cascade)
|
||||
roleId String @db.Uuid
|
||||
source UserRoleSource @default(AUTHENTIK)
|
||||
syncedAt DateTime @default(now())
|
||||
createdAt DateTime @default(now())
|
||||
|
||||
@@unique([userId, roleId])
|
||||
@@index([userId])
|
||||
@@index([roleId])
|
||||
}
|
||||
|
||||
model AuthGroupRoleMapping {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
authGroup String @db.VarChar(255)
|
||||
role Role @relation(fields: [roleId], references: [id], onDelete: Cascade)
|
||||
roleId String @db.Uuid
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
|
||||
@@index([authGroup])
|
||||
}
|
||||
|
||||
model AuditLog {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
user User? @relation(fields: [userId], references: [id], onDelete: SetNull)
|
||||
userId String? @db.Uuid
|
||||
action String @db.VarChar(200)
|
||||
resource String? @db.VarChar(200)
|
||||
resourceId String?
|
||||
details Json?
|
||||
createdAt DateTime @default(now())
|
||||
|
||||
@@index([userId])
|
||||
@@index([action])
|
||||
}
|
||||
|
||||
model ScheduledJob {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
name String @db.VarChar(255)
|
||||
payload Json?
|
||||
cron String?
|
||||
runAt DateTime?
|
||||
status String @db.VarChar(50) @default("pending")
|
||||
attempts Int @default(0)
|
||||
lastRunAt DateTime?
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
|
||||
@@index([name])
|
||||
@@index([status])
|
||||
}
|
||||
|
||||
model MediaObject {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
ownerUserId String? @db.Uuid
|
||||
owner User? @relation(fields: [ownerUserId], references: [id], onDelete: SetNull)
|
||||
storageKey String @db.VarChar(1024)
|
||||
filename String? @db.VarChar(1024)
|
||||
mimeType String? @db.VarChar(255)
|
||||
size BigInt?
|
||||
isPublic Boolean @default(false)
|
||||
metadata Json?
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
|
||||
@@index([ownerUserId])
|
||||
@@index([storageKey])
|
||||
}
|
||||
|
||||
|
||||
|
||||
model Application {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
code String @unique @db.VarChar(100)
|
||||
name String @db.VarChar(255)
|
||||
description String?
|
||||
icon String?
|
||||
url String?
|
||||
applicationsClaim String @unique @db.VarChar(255)
|
||||
isActive Boolean @default(true)
|
||||
displayOrder Int @default(0)
|
||||
createdAt DateTime @default(now())
|
||||
updatedAt DateTime @updatedAt
|
||||
|
||||
@@index([code])
|
||||
@@index([applicationsClaim])
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
|
||||
permission Permission @relation(fields: [permissionId], references: [id], onDelete: Cascade)
|
||||
|
||||
assignedAt DateTime @default(now())
|
||||
assignedBy String
|
||||
|
||||
@@id([userId, permissionId])
|
||||
}
|
||||
Reference in New Issue
Block a user