6decf1c8ef
Prior to this commit, the ObjectIdentity id had to be a number. This commit allows for domain objects to use UUIDs as their identifier. The fully qualified class name of the identifier type can be specified in the acl_object_identity table and a ConversionService can be provided to BasicLookupStrategy to convert from String to the actual identifier type. There are the following other changes: - BasicLookupStrategy has a new property, aclClassIdSupported, which is used to retrieve the new column from the database. This preserves backwards-compatibility, as it is false by default. - JdbcMutableAclService has the same property, aclClassIdSupported, which is needed to modify the insert statement to write to the new column. Defaults to false for backwards-compatibility. - Tests have been updated to verify both the existing functionality for backwards-compatibility and the new functionality. Fixes gh-1224
48 lines
1.5 KiB
SQL
48 lines
1.5 KiB
SQL
-- ACL Schema SQL for PostgreSQL
|
|
|
|
-- drop table acl_entry;
|
|
-- drop table acl_object_identity;
|
|
-- drop table acl_class;
|
|
-- drop table acl_sid;
|
|
|
|
create table acl_sid(
|
|
id bigserial not null primary key,
|
|
principal boolean not null,
|
|
sid varchar(100) not null,
|
|
constraint unique_uk_1 unique(sid,principal)
|
|
);
|
|
|
|
create table acl_class(
|
|
id bigserial not null primary key,
|
|
class varchar(100) not null,
|
|
class_id_type varchar(100),
|
|
constraint unique_uk_2 unique(class)
|
|
);
|
|
|
|
create table acl_object_identity(
|
|
id bigserial primary key,
|
|
object_id_class bigint not null,
|
|
object_id_identity varchar(36) not null,
|
|
parent_object bigint,
|
|
owner_sid bigint,
|
|
entries_inheriting boolean not null,
|
|
constraint unique_uk_3 unique(object_id_class,object_id_identity),
|
|
constraint foreign_fk_1 foreign key(parent_object)references acl_object_identity(id),
|
|
constraint foreign_fk_2 foreign key(object_id_class)references acl_class(id),
|
|
constraint foreign_fk_3 foreign key(owner_sid)references acl_sid(id)
|
|
);
|
|
|
|
create table acl_entry(
|
|
id bigserial primary key,
|
|
acl_object_identity bigint not null,
|
|
ace_order int not null,
|
|
sid bigint not null,
|
|
mask integer not null,
|
|
granting boolean not null,
|
|
audit_success boolean not null,
|
|
audit_failure boolean not null,
|
|
constraint unique_uk_4 unique(acl_object_identity,ace_order),
|
|
constraint foreign_fk_4 foreign key(acl_object_identity) references acl_object_identity(id),
|
|
constraint foreign_fk_5 foreign key(sid) references acl_sid(id)
|
|
);
|