115 lines
5.6 KiB
Python
115 lines
5.6 KiB
Python
from __future__ import annotations
|
|
|
|
from datetime import datetime
|
|
|
|
from sqlalchemy import Boolean, DateTime, ForeignKey, String, Text, UniqueConstraint
|
|
from sqlalchemy.orm import Mapped, mapped_column, relationship
|
|
|
|
from app.db.session import Base
|
|
|
|
|
|
class ClientAccount(Base):
|
|
__tablename__ = "client_accounts"
|
|
|
|
id: Mapped[int] = mapped_column(primary_key=True)
|
|
tenant_id: Mapped[str] = mapped_column(String(64), default="default")
|
|
name: Mapped[str] = mapped_column(String(255), unique=True, index=True)
|
|
client_code: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
status: Mapped[str] = mapped_column(String(32), default="active")
|
|
powerbi_workspace: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
notes: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
|
|
|
|
users: Mapped[list["ClientUser"]] = relationship(
|
|
back_populates="client_account",
|
|
cascade="all, delete-orphan",
|
|
order_by="ClientUser.created_at.desc()",
|
|
)
|
|
features: Mapped[list["ClientFeatureAccess"]] = relationship(
|
|
back_populates="client_account",
|
|
cascade="all, delete-orphan",
|
|
order_by="ClientFeatureAccess.feature_group, ClientFeatureAccess.feature_name",
|
|
)
|
|
audit_events: Mapped[list["ClientAccessAuditEvent"]] = relationship(
|
|
back_populates="client_account",
|
|
cascade="all, delete-orphan",
|
|
order_by="ClientAccessAuditEvent.created_at.desc()",
|
|
)
|
|
|
|
|
|
class ClientUser(Base):
|
|
__tablename__ = "client_users"
|
|
__table_args__ = (UniqueConstraint("client_account_id", "email", name="uq_client_user_email"),)
|
|
|
|
id: Mapped[int] = mapped_column(primary_key=True)
|
|
tenant_id: Mapped[str] = mapped_column(String(64), default="default")
|
|
client_account_id: Mapped[int] = mapped_column(ForeignKey("client_accounts.id"), index=True)
|
|
full_name: Mapped[str] = mapped_column(String(255))
|
|
email: Mapped[str] = mapped_column(String(255))
|
|
role: Mapped[str] = mapped_column(String(64), default="viewer")
|
|
status: Mapped[str] = mapped_column(String(32), default="invited")
|
|
is_new_user: Mapped[bool] = mapped_column(Boolean, default=True)
|
|
last_login_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
|
|
|
|
client_account: Mapped[ClientAccount] = relationship(back_populates="users")
|
|
module_permissions: Mapped[list["ClientUserModulePermission"]] = relationship(
|
|
back_populates="client_user",
|
|
cascade="all, delete-orphan",
|
|
order_by="ClientUserModulePermission.module_key",
|
|
)
|
|
|
|
|
|
class ClientFeatureAccess(Base):
|
|
__tablename__ = "client_feature_access"
|
|
__table_args__ = (UniqueConstraint("client_account_id", "feature_key", name="uq_client_feature"),)
|
|
|
|
id: Mapped[int] = mapped_column(primary_key=True)
|
|
tenant_id: Mapped[str] = mapped_column(String(64), default="default")
|
|
client_account_id: Mapped[int] = mapped_column(ForeignKey("client_accounts.id"), index=True)
|
|
feature_key: Mapped[str] = mapped_column(String(64))
|
|
feature_name: Mapped[str] = mapped_column(String(255))
|
|
feature_group: Mapped[str] = mapped_column(String(64), default="operations")
|
|
description: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
enabled: Mapped[bool] = mapped_column(Boolean, default=False)
|
|
updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
|
|
|
|
client_account: Mapped[ClientAccount] = relationship(back_populates="features")
|
|
|
|
|
|
class ClientUserModulePermission(Base):
|
|
__tablename__ = "client_user_module_permissions"
|
|
__table_args__ = (UniqueConstraint("client_user_id", "module_key", name="uq_client_user_module_permission"),)
|
|
|
|
id: Mapped[int] = mapped_column(primary_key=True)
|
|
tenant_id: Mapped[str] = mapped_column(String(64), default="default")
|
|
client_account_id: Mapped[int] = mapped_column(ForeignKey("client_accounts.id"), index=True)
|
|
client_user_id: Mapped[int] = mapped_column(ForeignKey("client_users.id"), index=True)
|
|
module_key: Mapped[str] = mapped_column(String(64))
|
|
access_level: Mapped[str] = mapped_column(String(32), default="none")
|
|
updated_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
|
|
|
|
client_user: Mapped[ClientUser] = relationship(back_populates="module_permissions")
|
|
|
|
|
|
class ClientAccessAuditEvent(Base):
|
|
__tablename__ = "client_access_audit_events"
|
|
|
|
id: Mapped[int] = mapped_column(primary_key=True)
|
|
tenant_id: Mapped[str] = mapped_column(String(64), default="default")
|
|
client_account_id: Mapped[int] = mapped_column(ForeignKey("client_accounts.id"), index=True)
|
|
actor_type: Mapped[str] = mapped_column(String(32), default="client")
|
|
actor_name: Mapped[str] = mapped_column(String(255))
|
|
actor_email: Mapped[str] = mapped_column(String(255))
|
|
actor_role: Mapped[str] = mapped_column(String(64))
|
|
action: Mapped[str] = mapped_column(String(128))
|
|
target_type: Mapped[str] = mapped_column(String(64))
|
|
target_id: Mapped[int | None] = mapped_column(nullable=True)
|
|
module_key: Mapped[str | None] = mapped_column(String(64), nullable=True)
|
|
summary: Mapped[str] = mapped_column(Text)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=datetime.utcnow)
|
|
|
|
client_account: Mapped[ClientAccount] = relationship(back_populates="audit_events")
|