# Generated by Django 5.1.3 on 2026-05-27 11:59 import django.db.models.deletion import uuid from django.conf import settings from django.db import migrations, models class Migration(migrations.Migration): dependencies = [ ("dms", "0003_phase8_preview"), ("organizations", "0001_initial"), ("tenants", "0001_initial"), migrations.swappable_dependency(settings.AUTH_USER_MODEL), ] operations = [ migrations.CreateModel( name="ACLPolicy", fields=[ ( "id", models.BigAutoField( auto_created=True, primary_key=True, serialize=False, verbose_name="ID" ), ), ( "is_deleted", models.BooleanField(db_index=True, default=False, verbose_name="deleted"), ), ( "deleted_at", models.DateTimeField(blank=True, null=True, verbose_name="deleted at"), ), ( "created_at", models.DateTimeField( auto_now_add=True, db_index=True, verbose_name="created at" ), ), ("updated_at", models.DateTimeField(auto_now=True, verbose_name="updated at")), ( "public_id", models.UUIDField( db_index=True, default=uuid.uuid4, editable=False, unique=True, verbose_name="public id", ), ), ("name", models.CharField(max_length=200, verbose_name="name")), ( "description", models.TextField(blank=True, default="", verbose_name="description"), ), ( "subject_type", models.CharField( choices=[ ("repository", "Repository"), ("folder", "Folder"), ("document", "Document"), ], max_length=20, verbose_name="subject type", ), ), ( "subject_id", models.CharField( help_text="public_id (UUID) of the resource this policy is attached to.", max_length=40, verbose_name="subject id", ), ), ( "inheritable", models.BooleanField( default=True, help_text="Whether sub-folders and documents inherit this policy.", verbose_name="inheritable", ), ), ("is_active", models.BooleanField(default=True, verbose_name="active")), ( "created_by", models.ForeignKey( blank=True, editable=False, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="created by", ), ), ( "deleted_by", models.ForeignKey( blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="deleted by", ), ), ( "organization_node", models.ForeignKey( on_delete=django.db.models.deletion.PROTECT, related_name="+", to="organizations.organizationnode", verbose_name="organization node", ), ), ( "tenant", models.ForeignKey( on_delete=django.db.models.deletion.CASCADE, related_name="+", to="tenants.tenant", verbose_name="tenant", ), ), ( "updated_by", models.ForeignKey( blank=True, editable=False, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="updated by", ), ), ], options={ "verbose_name": "ACL policy", "verbose_name_plural": "ACL policies", "ordering": ("subject_type", "name"), }, ), migrations.CreateModel( name="ACLRule", fields=[ ( "id", models.BigAutoField( auto_created=True, primary_key=True, serialize=False, verbose_name="ID" ), ), ( "is_deleted", models.BooleanField(db_index=True, default=False, verbose_name="deleted"), ), ( "deleted_at", models.DateTimeField(blank=True, null=True, verbose_name="deleted at"), ), ( "created_at", models.DateTimeField( auto_now_add=True, db_index=True, verbose_name="created at" ), ), ("updated_at", models.DateTimeField(auto_now=True, verbose_name="updated at")), ( "public_id", models.UUIDField( db_index=True, default=uuid.uuid4, editable=False, unique=True, verbose_name="public id", ), ), ( "principal_type", models.CharField( choices=[ ("user", "User"), ("role", "IAM Role"), ("org_node", "Organisation Node"), ("everyone", "Everyone (tenant members)"), ], max_length=20, verbose_name="principal type", ), ), ( "principal_id", models.CharField( blank=True, default="", help_text="Empty for EVERYONE. User PK / role slug / org_node PK as string.", max_length=40, verbose_name="principal id", ), ), ( "action", models.CharField( choices=[ ("view", "View"), ("download", "Download"), ("create", "Create"), ("update", "Update"), ("delete", "Delete"), ("publish", "Publish"), ("manage", "Manage (admin)"), ("share", "Share / create links"), ], max_length=20, verbose_name="action", ), ), ( "effect", models.CharField( choices=[("allow", "Allow"), ("deny", "Deny")], default="allow", max_length=10, verbose_name="effect", ), ), ( "priority", models.PositiveSmallIntegerField( default=0, help_text="Higher value = displayed/evaluated first within the same policy.", verbose_name="priority", ), ), ( "created_by", models.ForeignKey( blank=True, editable=False, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="created by", ), ), ( "deleted_by", models.ForeignKey( blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="deleted by", ), ), ( "organization_node", models.ForeignKey( on_delete=django.db.models.deletion.PROTECT, related_name="+", to="organizations.organizationnode", verbose_name="organization node", ), ), ( "policy", models.ForeignKey( on_delete=django.db.models.deletion.CASCADE, related_name="rules", to="dms.aclpolicy", verbose_name="policy", ), ), ( "tenant", models.ForeignKey( on_delete=django.db.models.deletion.CASCADE, related_name="+", to="tenants.tenant", verbose_name="tenant", ), ), ( "updated_by", models.ForeignKey( blank=True, editable=False, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="updated by", ), ), ], options={ "verbose_name": "ACL rule", "verbose_name_plural": "ACL rules", "ordering": ("-priority", "action"), }, ), migrations.CreateModel( name="DocumentPermission", fields=[ ( "id", models.BigAutoField( auto_created=True, primary_key=True, serialize=False, verbose_name="ID" ), ), ( "is_deleted", models.BooleanField(db_index=True, default=False, verbose_name="deleted"), ), ( "deleted_at", models.DateTimeField(blank=True, null=True, verbose_name="deleted at"), ), ( "created_at", models.DateTimeField( auto_now_add=True, db_index=True, verbose_name="created at" ), ), ("updated_at", models.DateTimeField(auto_now=True, verbose_name="updated at")), ( "public_id", models.UUIDField( db_index=True, default=uuid.uuid4, editable=False, unique=True, verbose_name="public id", ), ), ( "principal_type", models.CharField( choices=[ ("user", "User"), ("role", "IAM Role"), ("org_node", "Organisation Node"), ("everyone", "Everyone (tenant members)"), ], max_length=20, verbose_name="principal type", ), ), ( "principal_id", models.CharField( blank=True, default="", help_text="Empty for EVERYONE.", max_length=40, verbose_name="principal id", ), ), ( "action", models.CharField( choices=[ ("view", "View"), ("download", "Download"), ("create", "Create"), ("update", "Update"), ("delete", "Delete"), ("publish", "Publish"), ("manage", "Manage (admin)"), ("share", "Share / create links"), ], max_length=20, verbose_name="action", ), ), ( "effect", models.CharField( choices=[("allow", "Allow"), ("deny", "Deny")], default="allow", max_length=10, verbose_name="effect", ), ), ( "expires_at", models.DateTimeField( blank=True, help_text="NULL = no expiry.", null=True, verbose_name="expires at", ), ), ( "inheritable", models.BooleanField( default=False, help_text="Whether this permission propagates to child resources.", verbose_name="inheritable", ), ), ("notes", models.TextField(blank=True, default="", verbose_name="notes")), ( "created_by", models.ForeignKey( blank=True, editable=False, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="created by", ), ), ( "deleted_by", models.ForeignKey( blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="deleted by", ), ), ( "document", models.ForeignKey( on_delete=django.db.models.deletion.CASCADE, related_name="acl_permissions", to="dms.document", verbose_name="document", ), ), ( "granted_by", models.ForeignKey( blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="granted by", ), ), ( "organization_node", models.ForeignKey( on_delete=django.db.models.deletion.PROTECT, related_name="+", to="organizations.organizationnode", verbose_name="organization node", ), ), ( "tenant", models.ForeignKey( on_delete=django.db.models.deletion.CASCADE, related_name="+", to="tenants.tenant", verbose_name="tenant", ), ), ( "updated_by", models.ForeignKey( blank=True, editable=False, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="updated by", ), ), ], options={ "verbose_name": "document permission", "verbose_name_plural": "document permissions", "ordering": ("action", "principal_type"), }, ), migrations.CreateModel( name="ShareLink", fields=[ ( "id", models.BigAutoField( auto_created=True, primary_key=True, serialize=False, verbose_name="ID" ), ), ( "is_deleted", models.BooleanField(db_index=True, default=False, verbose_name="deleted"), ), ( "deleted_at", models.DateTimeField(blank=True, null=True, verbose_name="deleted at"), ), ( "created_at", models.DateTimeField( auto_now_add=True, db_index=True, verbose_name="created at" ), ), ("updated_at", models.DateTimeField(auto_now=True, verbose_name="updated at")), ( "public_id", models.UUIDField( db_index=True, default=uuid.uuid4, editable=False, unique=True, verbose_name="public id", ), ), ( "token", models.UUIDField( db_index=True, default=uuid.uuid4, editable=False, unique=True, verbose_name="token", ), ), ( "label", models.CharField( blank=True, default="", help_text="Human-readable label, e.g. 'For client review – Q3 2026'.", max_length=200, verbose_name="label", ), ), ( "expires_at", models.DateTimeField( blank=True, help_text="NULL = never expires.", null=True, verbose_name="expires at", ), ), ( "max_uses", models.PositiveIntegerField( blank=True, help_text="NULL = unlimited.", null=True, verbose_name="max uses", ), ), ("use_count", models.PositiveIntegerField(default=0, verbose_name="use count")), ( "allow_download", models.BooleanField(default=True, verbose_name="allow download"), ), ("allow_preview", models.BooleanField(default=True, verbose_name="allow preview")), ("is_active", models.BooleanField(default=True, verbose_name="active")), ("notes", models.TextField(blank=True, default="", verbose_name="notes")), ( "password_hash", models.CharField( blank=True, default="", help_text="Django make_password() hash; empty = no password.", max_length=128, verbose_name="password hash", ), ), ( "created_by", models.ForeignKey( blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="created by", ), ), ( "deleted_by", models.ForeignKey( blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="deleted by", ), ), ( "document", models.ForeignKey( on_delete=django.db.models.deletion.CASCADE, related_name="share_links", to="dms.document", verbose_name="document", ), ), ( "organization_node", models.ForeignKey( on_delete=django.db.models.deletion.PROTECT, related_name="+", to="organizations.organizationnode", verbose_name="organization node", ), ), ( "tenant", models.ForeignKey( on_delete=django.db.models.deletion.CASCADE, related_name="+", to="tenants.tenant", verbose_name="tenant", ), ), ( "updated_by", models.ForeignKey( blank=True, editable=False, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL, verbose_name="updated by", ), ), ], options={ "verbose_name": "share link", "verbose_name_plural": "share links", "ordering": ("-created_at",), }, ), migrations.AddIndex( model_name="aclpolicy", index=models.Index( fields=["tenant", "subject_type", "subject_id", "is_deleted"], name="dms_aclpolicy_subject_idx", ), ), migrations.AddIndex( model_name="aclpolicy", index=models.Index( fields=["tenant", "is_active", "is_deleted"], name="dms_aclpolicy_active_idx" ), ), migrations.AddIndex( model_name="aclrule", index=models.Index( fields=["policy", "effect", "is_deleted"], name="dms_aclrule_policy_effect_idx" ), ), migrations.AddConstraint( model_name="aclrule", constraint=models.UniqueConstraint( condition=models.Q(("is_deleted", False)), fields=("policy", "principal_type", "principal_id", "action"), name="dms_aclrule_unique_per_policy_principal_action", ), ), migrations.AddIndex( model_name="documentpermission", index=models.Index( fields=["document", "effect", "is_deleted"], name="dms_docperm_doc_effect_idx" ), ), migrations.AddIndex( model_name="documentpermission", index=models.Index( fields=["tenant", "principal_type", "principal_id", "is_deleted"], name="dms_docperm_principal_idx", ), ), migrations.AddConstraint( model_name="documentpermission", constraint=models.UniqueConstraint( condition=models.Q(("is_deleted", False)), fields=("document", "principal_type", "principal_id", "action"), name="dms_docperm_unique_per_doc_principal_action", ), ), migrations.AddIndex( model_name="sharelink", index=models.Index( fields=["document", "is_active", "is_deleted"], name="dms_sharelink_doc_active_idx" ), ), ]