mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-08-21 16:02:28 +00:00
Ruben Fiszel
08374e7984
* feat: db users: admin -> windmill_admin, app -> windmill_user * clean up * backend tests * backend tests * backend tests * lock roles in first migration * check if user is superuser too * add init-db * add init-db
21 lines
956 B
SQL
21 lines
956 B
SQL
-- Add up migration script here
|
|
ALTER TABLE account ADD COLUMN owner VARCHAR(50) NOT NULL;
|
|
ALTER TABLE account ADD COLUMN client VARCHAR(50) NOT NULL;
|
|
ALTER TABLE resource ADD COLUMN is_oauth BOOLEAN NOT NULL DEFAULT false;
|
|
ALTER TABLE variable ADD COLUMN is_oauth BOOLEAN NOT NULL DEFAULT false;
|
|
ALTER TABLE resource DROP COLUMN account;
|
|
|
|
ALTER TABLE account ALTER COLUMN expires_at TYPE TIMESTAMP WITH TIME ZONE;
|
|
|
|
ALTER TABLE account ALTER COLUMN expires_at SET NOT NULL;
|
|
ALTER TABLE account ALTER COLUMN refresh_token SET NOT NULL;
|
|
|
|
ALTER TABLE account ENABLE ROW LEVEL SECURITY;
|
|
|
|
|
|
CREATE POLICY see_own ON account FOR ALL
|
|
USING (SPLIT_PART(account.owner, '/', 1) = 'u' AND SPLIT_PART(account.owner, '/', 2) = current_setting('session.user'));
|
|
|
|
CREATE POLICY see_member ON account FOR ALL
|
|
USING (SPLIT_PART(account.owner, '/', 1) = 'g' AND SPLIT_PART(account.owner, '/', 2) = any(regexp_split_to_array(current_setting('session.groups'), ',')::text[]));
|