panels-origin/db/iam/changesets/006-documents-delete-permission.sql
Cursor Agent 05005d5a9d
fix(iam): asignar documents.delete al rol tenant_admin del sistema
Co-authored-by: alberto.martinez <alberto.martinez@mrdev.mx>
2026-09-16 21:11:20 +00:00

23 lines
852 B
SQL

--liquibase formatted sql
-- PANELS · iam · permiso eliminar documentos de expediente
--changeset panel:iam-006a-documents-delete endDelimiter:; splitStatements:true
INSERT INTO iam.permissions (code, label, module, verb, perm_group) VALUES
('documents.delete', 'Eliminar documentos de expediente', 'documents', 'delete', NULL)
ON CONFLICT (code) DO UPDATE SET
label = EXCLUDED.label,
module = EXCLUDED.module,
verb = EXCLUDED.verb,
perm_group = EXCLUDED.perm_group;
INSERT INTO iam._legacy_perm_map (legacy_code, v2_code) VALUES
('manage_documents', 'documents.delete')
ON CONFLICT (legacy_code, v2_code) DO NOTHING;
INSERT INTO iam.role_permissions (role_id, permission_code)
SELECT sr.id, 'documents.delete'
FROM iam.roles sr
WHERE sr.code = 'tenant_admin'
AND sr.is_system
AND sr.tenant_id IS NULL
ON CONFLICT DO NOTHING;