feat: reporting RLS configs

bcgov · Feb 18, 2025 · fef92bf · fef92bf
1 parent 9b61560
commit fef92bf
Show file tree

Hide file tree

Showing 14 changed files with 233 additions and 0 deletions.
diff --git a/bc_obps/reporting/enums/enums.py b/bc_obps/reporting/enums/enums.py
@@ -34,6 +34,7 @@ class ReportingTableNames(Enum):
     REPORT_SOURCE_TYPE = 'report_source_type'
     REPORT_UNIT = 'report_unit'
     REPORT_VERIFICATION_VISIT = 'report_verification_visit'
+    REPORT_VERIFICATION = 'report_verification'
     REPORT_VERSION = 'report_version'
     REPORT = 'report'
     REPORTING_FIELD = 'reporting_field'

diff --git a/bc_obps/reporting/models/rls_configs/report.py b/bc_obps/reporting/models/rls_configs/report.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT)
diff --git a/bc_obps/reporting/models/rls_configs/report_person_responsible.py b/bc_obps/reporting/models/rls_configs/report_person_responsible.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_PERSON_RESPONSIBLE)
diff --git a/bc_obps/reporting/models/rls_configs/report_product.py b/bc_obps/reporting/models/rls_configs/report_product.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_PRODUCT)
diff --git a/bc_obps/reporting/models/rls_configs/report_product_emission_allocation.py b/bc_obps/reporting/models/rls_configs/report_product_emission_allocation.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_PRODUCT_EMISSION_ALLOCATION)
diff --git a/bc_obps/reporting/models/rls_configs/report_raw_activity_data.py b/bc_obps/reporting/models/rls_configs/report_raw_activity_data.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_RAW_ACTIVITY_DATA)
diff --git a/bc_obps/reporting/models/rls_configs/report_source_type.py b/bc_obps/reporting/models/rls_configs/report_source_type.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_SOURCE_TYPE)
diff --git a/bc_obps/reporting/models/rls_configs/report_unit.py b/bc_obps/reporting/models/rls_configs/report_unit.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_UNIT)
diff --git a/bc_obps/reporting/models/rls_configs/report_verification.py b/bc_obps/reporting/models/rls_configs/report_verification.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_VERIFICATION)
diff --git a/bc_obps/reporting/models/rls_configs/report_verification_visit.py b/bc_obps/reporting/models/rls_configs/report_verification_visit.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_VERIFICATION_VISIT)
diff --git a/bc_obps/reporting/models/rls_configs/report_version.py b/bc_obps/reporting/models/rls_configs/report_version.py
@@ -0,0 +1,19 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [
+            RlsOperations.SELECT,
+            RlsOperations.INSERT,
+            RlsOperations.UPDATE,
+            RlsOperations.DELETE,
+        ],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORT_VERSION)
diff --git a/bc_obps/reporting/models/rls_configs/reporting_field.py b/bc_obps/reporting/models/rls_configs/reporting_field.py
@@ -0,0 +1,14 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [RlsOperations.SELECT],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORTING_FIELD)
diff --git a/bc_obps/reporting/models/rls_configs/reporting_year.py b/bc_obps/reporting/models/rls_configs/reporting_year.py
@@ -0,0 +1,14 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [RlsOperations.SELECT],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.REPORTING_YEAR)
diff --git a/bc_obps/reporting/models/rls_configs/source_type.py b/bc_obps/reporting/models/rls_configs/source_type.py
@@ -0,0 +1,14 @@
+from reporting.enums.enums import ReportingTableNames
+from rls.enums import RlsRoles, RlsOperations
+from rls.utils.helpers import generate_rls_grants
+
+
+class Rls:
+    role_grants_mapping = {
+        RlsRoles.INDUSTRY_USER: [RlsOperations.SELECT],
+        RlsRoles.CAS_DIRECTOR: [RlsOperations.SELECT],
+        RlsRoles.CAS_ADMIN: [RlsOperations.SELECT],
+        RlsRoles.CAS_ANALYST: [RlsOperations.SELECT],
+        RlsRoles.CAS_VIEW_ONLY: [RlsOperations.SELECT],
+    }
+    grants = generate_rls_grants(role_grants_mapping, ReportingTableNames.SOURCE_TYPE)