86 lines
3.5 KiB
Python
86 lines
3.5 KiB
Python
"""add audit logs
|
|
|
|
Revision ID: a5e4b7c9d012
|
|
Revises: 9c1d8a2f6b44
|
|
Create Date: 2026-07-02 15:00:00.000000
|
|
|
|
"""
|
|
from typing import Sequence, Union
|
|
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
|
|
|
|
revision: str = "a5e4b7c9d012"
|
|
down_revision: Union[str, Sequence[str], None] = "9c1d8a2f6b44"
|
|
branch_labels: Union[str, Sequence[str], None] = None
|
|
depends_on: Union[str, Sequence[str], None] = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.create_table(
|
|
"audit_logs",
|
|
sa.Column("id", sa.Integer(), nullable=False),
|
|
sa.Column("actor_user_id", sa.Integer(), nullable=True),
|
|
sa.Column("actor_username", sa.String(length=120), server_default="", nullable=False),
|
|
sa.Column("action", sa.String(length=120), nullable=False),
|
|
sa.Column("entity_type", sa.String(length=80), nullable=False),
|
|
sa.Column("entity_id", sa.Integer(), nullable=True),
|
|
sa.Column("entity_label", sa.String(length=255), server_default="", nullable=False),
|
|
sa.Column("ip_address", sa.String(length=80), server_default="", nullable=False),
|
|
sa.Column("user_agent", sa.Text(), server_default="", nullable=False),
|
|
sa.Column("before_data", sa.JSON(), nullable=True),
|
|
sa.Column("after_data", sa.JSON(), nullable=True),
|
|
sa.Column("metadata", sa.JSON(), nullable=True),
|
|
sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
|
|
sa.ForeignKeyConstraint(["actor_user_id"], ["users.id"], ondelete="SET NULL"),
|
|
sa.PrimaryKeyConstraint("id"),
|
|
)
|
|
op.create_index(op.f("ix_audit_logs_action"), "audit_logs", ["action"], unique=False)
|
|
op.create_index(op.f("ix_audit_logs_actor_user_id"), "audit_logs", ["actor_user_id"], unique=False)
|
|
op.create_index(op.f("ix_audit_logs_entity_id"), "audit_logs", ["entity_id"], unique=False)
|
|
op.create_index(op.f("ix_audit_logs_entity_type"), "audit_logs", ["entity_type"], unique=False)
|
|
op.create_index(op.f("ix_audit_logs_created_at"), "audit_logs", ["created_at"], unique=False)
|
|
|
|
op.execute(
|
|
"""
|
|
INSERT INTO permissions (name, display_name, description, module)
|
|
SELECT 'audit_logs.read', 'Audit Logs lesen', 'Audit Logs anzeigen', 'audit_logs'
|
|
WHERE NOT EXISTS (
|
|
SELECT 1 FROM permissions WHERE name = 'audit_logs.read'
|
|
)
|
|
"""
|
|
)
|
|
op.execute(
|
|
"""
|
|
INSERT INTO role_permissions (role_id, permission_id)
|
|
SELECT roles.id, permissions.id
|
|
FROM roles
|
|
JOIN permissions ON permissions.name = 'audit_logs.read'
|
|
WHERE roles.name = 'administrator'
|
|
AND NOT EXISTS (
|
|
SELECT 1
|
|
FROM role_permissions
|
|
WHERE role_permissions.role_id = roles.id
|
|
AND role_permissions.permission_id = permissions.id
|
|
)
|
|
"""
|
|
)
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.execute(
|
|
"""
|
|
DELETE FROM role_permissions
|
|
USING permissions
|
|
WHERE role_permissions.permission_id = permissions.id
|
|
AND permissions.name = 'audit_logs.read'
|
|
"""
|
|
)
|
|
op.execute("DELETE FROM permissions WHERE name = 'audit_logs.read'")
|
|
op.drop_index(op.f("ix_audit_logs_created_at"), table_name="audit_logs")
|
|
op.drop_index(op.f("ix_audit_logs_entity_type"), table_name="audit_logs")
|
|
op.drop_index(op.f("ix_audit_logs_entity_id"), table_name="audit_logs")
|
|
op.drop_index(op.f("ix_audit_logs_actor_user_id"), table_name="audit_logs")
|
|
op.drop_index(op.f("ix_audit_logs_action"), table_name="audit_logs")
|
|
op.drop_table("audit_logs")
|