Agent Zero
627360113f
P8: Invalidate all Redis sessions when is_system_admin changes - Added is_system_admin to UserUpdate schema and UserResponse - Added invalidate_all_user_sessions call in users.py route - Added is_system_admin param to user_service.update_user P9: Remove no-op permission resolution strategies - Only highest_wins supported, others removed as no-ops - Updated tenant.py CheckConstraint to only allow highest_wins - Added KI-Kommentar in permissions.py P10: Remove legacy check_permission from auth.py - Removed duplicate check_permission and filter_fields_by_permission - Fixed ai_copilot_service.py to use permissions.check_permission - Updated ai_copilot route to pass resolved permissions dict P11: Verified — no guest_users remnants found P12: Migrate ContactFolderPermission to EntityPermission - contact_folder_permission_service now delegates to entity_permission_service - contact_folder_service uses EntityPermission queries - Removed ContactFolderPermission from models/__init__.py - Created migration 0114 to migrate data and drop table P13: Added RLS migration history comment in alembic/env.py P14: Verified — services already apply visibility_filter - saved_filters/views filter by user_id (personal data) - workspaces are UI context only - notifications already filter by entity access P15: Split entity_permission_service.py (932 lines) into 4 modules - permission_resolver.py: get_effective_access, get_visible_ids, etc. - permission_cache.py: Redis caching functions - permission_audit.py: Audit logging helpers - entity_permission_service.py: CRUD operations + re-exports P16: Centralize PERM_RANK in permissions.py - Single source: app.core.permissions.PERM_RANK - Updated all services to import from permissions.py P17: Fix MIGRATION_DATABASE_URL to use crm_migration - docker-compose.yaml defaults changed from crm_user to crm_migration - .env.docker.example updated - prestart.sh comment updated
84 lines
2.7 KiB
Python
84 lines
2.7 KiB
Python
"""SQLAlchemy models for LeoCRM."""
|
|
|
|
from app.models.address import Address
|
|
from app.models.bank_account import BankAccount
|
|
from app.models.ai_conversation import AIConversation, AIMessage
|
|
from app.models.attachment import Attachment
|
|
from app.models.audit import AuditLog, DeletionLog
|
|
from app.models.auth import ApiToken, PasswordResetToken
|
|
from app.models.contact import Contact, ContactPerson
|
|
from app.models.contact_folder import ContactFolder
|
|
from app.models.contact_merge import ContactMergeHistory
|
|
from app.models.entity_permission import EntityPermission
|
|
from app.models.consumer_inbox import ConsumerInbox
|
|
from app.models.outbox_delivery import OutboxDelivery
|
|
from app.models.entity_policy import EntityPolicy
|
|
from app.models.permission_template import PermissionTemplate
|
|
from app.models.permission_delegation import PermissionDelegation
|
|
from app.models.owned_mixin import OwnedMixin
|
|
from app.models.entity_history import EntityHistory
|
|
from app.models.currency import Currency
|
|
from app.models.group import Group, UserGroup
|
|
from app.models.notification import Notification, NotificationPreference, NotificationType
|
|
from app.models.plugin import Plugin, PluginMigration
|
|
from app.models.role import Role
|
|
from app.models.sequence import Sequence
|
|
from app.models.session import Session
|
|
from app.models.system_settings import SystemSettings
|
|
from app.models.tax import TaxRate
|
|
from app.models.tenant import Tenant
|
|
from app.models.user import User, UserTenant
|
|
from app.models.backup import Backup
|
|
from app.models.custom_field_definition import CustomFieldDefinition
|
|
from app.models.webhook import Webhook
|
|
from app.models.workflow import Workflow, WorkflowInstance, WorkflowStepHistory
|
|
from app.models.saved_view import SavedView
|
|
|
|
__all__ = [
|
|
"Tenant",
|
|
"User",
|
|
"UserTenant",
|
|
"Role",
|
|
"Group",
|
|
"UserGroup",
|
|
"Session",
|
|
"AuditLog",
|
|
"DeletionLog",
|
|
"Notification",
|
|
"NotificationType",
|
|
"NotificationPreference",
|
|
"PasswordResetToken",
|
|
"ApiToken",
|
|
"Contact",
|
|
"ContactPerson",
|
|
"ContactFolder",
|
|
"ContactMergeHistory",
|
|
"EntityPermission",
|
|
"ConsumerInbox",
|
|
"PermissionDelegation",
|
|
"PermissionTemplate",
|
|
"EntityPolicy",
|
|
"OwnedMixin",
|
|
"EntityHistory",
|
|
"Currency",
|
|
"TaxRate",
|
|
"Sequence",
|
|
"SystemSettings",
|
|
"Attachment",
|
|
"Address",
|
|
"BankAccount",
|
|
"Plugin",
|
|
"PluginMigration",
|
|
"AIConversation",
|
|
"AIMessage",
|
|
"Backup",
|
|
"CustomFieldDefinition",
|
|
"Webhook",
|
|
"Workflow",
|
|
"WorkflowInstance",
|
|
"WorkflowStepHistory",
|
|
"SavedView",
|
|
]
|
|
from app.models.entity_attachment import EntityAttachment # noqa: F401
|
|
from app.models.workspace import Workspace, WorkspaceModule, WorkspaceUser, WorkspaceWidget # noqa: F401
|