# Generated by Django 5.2.11 on 2026-02-22 16:41

import django.db.models.deletion
import uuid
from django.conf import settings
from django.db import migrations, models


class Migration(migrations.Migration):

    dependencies = [
        (
            "core_permission",
            "0002_fieldpermission_alter_rolepermission_options_and_more",
        ),
        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
    ]

    operations = [
        migrations.CreateModel(
            name="ObjectRelation",
            fields=[
                (
                    "id",
                    models.UUIDField(
                        default=uuid.uuid4,
                        editable=False,
                        primary_key=True,
                        serialize=False,
                    ),
                ),
                (
                    "object_type",
                    models.CharField(
                        db_index=True,
                        help_text="e.g., 'pm.task', 'hrm.leave_request'",
                        max_length=100,
                    ),
                ),
                (
                    "object_id",
                    models.CharField(
                        db_index=True,
                        help_text="UUID or ID of the target object",
                        max_length=255,
                    ),
                ),
                (
                    "relation_type",
                    models.CharField(
                        choices=[
                            ("creator", "Creator"),
                            ("assignee", "Assignee"),
                            ("watcher", "Watcher"),
                            ("approver", "Approver"),
                            ("manager_of_assignee", "Manager of Assignee"),
                            ("owner", "Owner"),
                            ("reviewer", "Reviewer"),
                            ("contributor", "Contributor"),
                            ("custom", "Custom"),
                        ],
                        max_length=30,
                    ),
                ),
                (
                    "custom_relation",
                    models.CharField(
                        blank=True,
                        help_text="Custom relation name when type is 'custom'",
                        max_length=50,
                    ),
                ),
                (
                    "module",
                    models.CharField(
                        db_index=True,
                        help_text="Module name (e.g., 'pm', 'hrm')",
                        max_length=100,
                    ),
                ),
                ("metadata", models.JSONField(blank=True, default=dict)),
                ("created_at", models.DateTimeField(auto_now_add=True)),
                (
                    "user",
                    models.ForeignKey(
                        on_delete=django.db.models.deletion.CASCADE,
                        related_name="object_relations",
                        to=settings.AUTH_USER_MODEL,
                    ),
                ),
            ],
            options={
                "verbose_name": "Object Relation",
                "verbose_name_plural": "Object Relations",
                "db_table": "object_relations",
                "indexes": [
                    models.Index(
                        fields=["object_type", "object_id"],
                        name="object_rela_object__52270a_idx",
                    ),
                    models.Index(
                        fields=["user", "relation_type"],
                        name="object_rela_user_id_b89c46_idx",
                    ),
                    models.Index(
                        fields=["module", "object_type"],
                        name="object_rela_module_b46452_idx",
                    ),
                ],
                "unique_together": {
                    ("object_type", "object_id", "user", "relation_type")
                },
            },
        ),
        migrations.CreateModel(
            name="RAICPolicy",
            fields=[
                (
                    "id",
                    models.BigAutoField(
                        auto_created=True,
                        primary_key=True,
                        serialize=False,
                        verbose_name="ID",
                    ),
                ),
                ("module", models.CharField(db_index=True, max_length=100)),
                (
                    "object_type",
                    models.CharField(
                        help_text="e.g., 'pm.task', 'hrm.leave_request'", max_length=100
                    ),
                ),
                (
                    "relation_type",
                    models.CharField(
                        choices=[
                            ("creator", "Creator"),
                            ("assignee", "Assignee"),
                            ("watcher", "Watcher"),
                            ("approver", "Approver"),
                            ("manager_of_assignee", "Manager of Assignee"),
                            ("owner", "Owner"),
                            ("reviewer", "Reviewer"),
                            ("contributor", "Contributor"),
                            ("custom", "Custom"),
                        ],
                        max_length=30,
                    ),
                ),
                ("is_active", models.BooleanField(default=True)),
                ("created_at", models.DateTimeField(auto_now_add=True)),
                (
                    "permission",
                    models.ForeignKey(
                        on_delete=django.db.models.deletion.CASCADE,
                        related_name="raic_policies",
                        to="core_permission.permission",
                    ),
                ),
            ],
            options={
                "verbose_name": "RAIC Policy",
                "verbose_name_plural": "RAIC Policies",
                "db_table": "raic_policies",
                "unique_together": {
                    ("module", "object_type", "relation_type", "permission")
                },
            },
        ),
        migrations.CreateModel(
            name="UserPermission",
            fields=[
                (
                    "id",
                    models.BigAutoField(
                        auto_created=True,
                        primary_key=True,
                        serialize=False,
                        verbose_name="ID",
                    ),
                ),
                (
                    "allow",
                    models.BooleanField(
                        default=True,
                        help_text="True = grant, False = deny (deny always wins)",
                    ),
                ),
                (
                    "reason",
                    models.TextField(
                        blank=True, help_text="Why this override was created"
                    ),
                ),
                ("starts_at", models.DateTimeField(blank=True, null=True)),
                ("expires_at", models.DateTimeField(blank=True, null=True)),
                ("created_at", models.DateTimeField(auto_now_add=True)),
                ("updated_at", models.DateTimeField(auto_now=True)),
                (
                    "granted_by",
                    models.ForeignKey(
                        blank=True,
                        null=True,
                        on_delete=django.db.models.deletion.SET_NULL,
                        related_name="permission_overrides_granted",
                        to=settings.AUTH_USER_MODEL,
                    ),
                ),
                (
                    "permission",
                    models.ForeignKey(
                        on_delete=django.db.models.deletion.CASCADE,
                        related_name="user_overrides",
                        to="core_permission.permission",
                    ),
                ),
                (
                    "user",
                    models.ForeignKey(
                        on_delete=django.db.models.deletion.CASCADE,
                        related_name="user_permissions_custom",
                        to=settings.AUTH_USER_MODEL,
                    ),
                ),
            ],
            options={
                "verbose_name": "User Permission Override",
                "verbose_name_plural": "User Permission Overrides",
                "db_table": "user_permissions",
                "indexes": [
                    models.Index(
                        fields=["user", "allow"], name="user_permis_user_id_8e9528_idx"
                    )
                ],
                "unique_together": {("user", "permission")},
            },
        ),
    ]