2bbe925cef
- Removed outdated and redundant Alembic migration files to streamline the migration directory. This improves maintainability and eliminates duplicate or unused scripts.
68 lines
2.2 KiB
Python
68 lines
2.2 KiB
Python
# app/models/user_organization.py
|
|
from enum import Enum as PyEnum
|
|
|
|
from sqlalchemy import Boolean, Column, Enum, ForeignKey, Index, String
|
|
from sqlalchemy.dialects.postgresql import UUID as PGUUID
|
|
from sqlalchemy.orm import relationship
|
|
|
|
from .base import Base, TimestampMixin
|
|
|
|
|
|
class OrganizationRole(str, PyEnum):
|
|
"""
|
|
Built-in organization roles.
|
|
These provide a baseline role system that can be optionally used.
|
|
Projects can extend this or implement their own permission system.
|
|
"""
|
|
|
|
OWNER = "owner" # Full control over organization
|
|
ADMIN = "admin" # Can manage users and settings
|
|
MEMBER = "member" # Regular member with standard access
|
|
GUEST = "guest" # Limited read-only access
|
|
|
|
|
|
class UserOrganization(Base, TimestampMixin):
|
|
"""
|
|
Junction table for many-to-many relationship between Users and Organizations.
|
|
Includes role information for flexible RBAC.
|
|
"""
|
|
|
|
__tablename__ = "user_organizations"
|
|
|
|
user_id = Column(
|
|
PGUUID(as_uuid=True),
|
|
ForeignKey("users.id", ondelete="CASCADE"),
|
|
primary_key=True,
|
|
)
|
|
organization_id = Column(
|
|
PGUUID(as_uuid=True),
|
|
ForeignKey("organizations.id", ondelete="CASCADE"),
|
|
primary_key=True,
|
|
)
|
|
|
|
role: Column[OrganizationRole] = Column(
|
|
Enum(OrganizationRole),
|
|
default=OrganizationRole.MEMBER,
|
|
nullable=False,
|
|
# Note: index defined in __table_args__ as ix_user_org_role
|
|
)
|
|
is_active = Column(Boolean, default=True, nullable=False, index=True)
|
|
|
|
# Optional: Custom permissions override for specific users
|
|
custom_permissions = Column(
|
|
String(500), nullable=True
|
|
) # JSON array of permission strings
|
|
|
|
# Relationships
|
|
user = relationship("User", back_populates="user_organizations")
|
|
organization = relationship("Organization", back_populates="user_organizations")
|
|
|
|
__table_args__ = (
|
|
Index("ix_user_org_user_active", "user_id", "is_active"),
|
|
Index("ix_user_org_org_active", "organization_id", "is_active"),
|
|
Index("ix_user_org_role", "role"),
|
|
)
|
|
|
|
def __repr__(self):
|
|
return f"<UserOrganization user={self.user_id} org={self.organization_id} role={self.role}>"
|