# Generated by Django 5.2.11 on 2026-02-11 17:02 import django.db.models.deletion from django.conf import settings from django.db import migrations, models class Migration(migrations.Migration): initial = True dependencies = [ ('core_permission', '0001_initial'), ('tenant', '0001_initial'), migrations.swappable_dependency(settings.AUTH_USER_MODEL), ] operations = [ migrations.CreateModel( name='DataScope', fields=[ ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), ('name', models.CharField(max_length=100)), ('slug', models.SlugField(max_length=100)), ('description', models.TextField(blank=True)), ('scope_type', models.CharField(choices=[('owner', 'Owner Only (own records)'), ('org_unit', 'Organizational Unit'), ('team', 'Team Members'), ('custom', 'Custom Filter')], default='org_unit', max_length=50)), ('configuration', models.JSONField(default=dict, help_text='Scope configuration')), ('is_active', models.BooleanField(default=True)), ('created_at', models.DateTimeField(auto_now_add=True)), ('updated_at', models.DateTimeField(auto_now=True)), ('tenant', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='%(class)s_set', to='tenant.tenant')), ], options={ 'verbose_name': 'Data Scope', 'verbose_name_plural': 'Data Scopes', 'db_table': 'data_scopes', 'unique_together': {('tenant', 'slug')}, }, ), migrations.CreateModel( name='RoleDataScope', fields=[ ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), ('module', models.CharField(blank=True, max_length=100)), ('resource', models.CharField(blank=True, max_length=100)), ('parameters', models.JSONField(blank=True, default=dict)), ('is_active', models.BooleanField(default=True)), ('created_at', models.DateTimeField(auto_now_add=True)), ('role', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='data_scopes', to='core_permission.role')), ('scope', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='role_assignments', to='core_data_policy.datascope')), ], options={ 'verbose_name': 'Role Data Scope', 'verbose_name_plural': 'Role Data Scopes', 'db_table': 'role_data_scopes', }, ), migrations.CreateModel( name='UserDataScope', fields=[ ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), ('module', models.CharField(blank=True, help_text='Module this scope applies to (* or empty = all)', max_length=100)), ('resource', models.CharField(blank=True, help_text='Resource this scope applies to (* or empty = all)', max_length=100)), ('parameters', models.JSONField(blank=True, default=dict, help_text='Additional parameters for scope evaluation')), ('is_active', models.BooleanField(default=True)), ('created_at', models.DateTimeField(auto_now_add=True)), ('updated_at', models.DateTimeField(auto_now=True)), ('scope', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='user_assignments', to='core_data_policy.datascope')), ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='data_scopes', to=settings.AUTH_USER_MODEL)), ], options={ 'verbose_name': 'User Data Scope', 'verbose_name_plural': 'User Data Scopes', 'db_table': 'user_data_scopes', }, ), migrations.CreateModel( name='DataAccessLog', fields=[ ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), ('module', models.CharField(max_length=100)), ('resource', models.CharField(max_length=100)), ('record_id', models.CharField(max_length=100)), ('action', models.CharField(max_length=50)), ('fields_accessed', models.JSONField(default=list, help_text='List of fields accessed')), ('ip_address', models.GenericIPAddressField(blank=True, null=True)), ('user_agent', models.TextField(blank=True)), ('was_allowed', models.BooleanField(default=True)), ('policy_applied', models.CharField(blank=True, help_text='Name of the policy that allowed/denied access', max_length=100)), ('accessed_at', models.DateTimeField(auto_now_add=True)), ('tenant', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='%(class)s_set', to='tenant.tenant')), ('user', models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='data_access_logs', to=settings.AUTH_USER_MODEL)), ], options={ 'verbose_name': 'Data Access Log', 'verbose_name_plural': 'Data Access Logs', 'db_table': 'data_access_logs', 'indexes': [models.Index(fields=['tenant', 'user', 'accessed_at'], name='data_access_tenant__dc6c1d_idx'), models.Index(fields=['tenant', 'module', 'resource'], name='data_access_tenant__608473_idx'), models.Index(fields=['accessed_at'], name='data_access_accesse_e9285b_idx')], }, ), migrations.CreateModel( name='DataPolicy', fields=[ ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), ('name', models.CharField(help_text='Policy name', max_length=100)), ('slug', models.SlugField(help_text='Unique identifier', max_length=100)), ('description', models.TextField(blank=True)), ('module', models.CharField(help_text='Module name (* for all modules)', max_length=100)), ('resource', models.CharField(help_text='Resource name (* for all resources)', max_length=100)), ('policy_type', models.CharField(choices=[('row_filter', 'Row Filter (Which records)'), ('field_mask', 'Field Mask (Which fields)'), ('aggregate_only', 'Aggregate Only (No details)'), ('time_based', 'Time Based Access'), ('conditional', 'Conditional Access')], default='row_filter', max_length=20)), ('actions', models.JSONField(default=list, help_text="List of actions: ['read', 'write', 'delete'] or ['all']")), ('conditions', models.JSONField(default=dict, help_text='Policy conditions (JSON)')), ('priority', models.IntegerField(default=0, help_text='Higher priority policies are evaluated first')), ('is_allow', models.BooleanField(default=True, help_text='True = allow access, False = deny access')), ('is_active', models.BooleanField(default=True)), ('created_at', models.DateTimeField(auto_now_add=True)), ('updated_at', models.DateTimeField(auto_now=True)), ('applies_to_roles', models.ManyToManyField(blank=True, help_text='Roles this policy applies to (empty = all roles)', related_name='data_policies', to='core_permission.role')), ('tenant', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='%(class)s_set', to='tenant.tenant')), ], options={ 'verbose_name': 'Data Policy', 'verbose_name_plural': 'Data Policies', 'db_table': 'data_policies', 'ordering': ['-priority', 'name'], 'unique_together': {('tenant', 'slug')}, }, ), ]