mirror of
https://git.meshkee.com/Meshkee/backend.git
synced 2026-08-11 22:30:59 +04:30
Ali Reza
bb59d5e9ba
NestJS backend with Prisma, Docker Compose for Postgres/Redis, and deploy docs for the production VM.
325 lines
14 KiB
SQL
325 lines
14 KiB
SQL
-- Meshkee CMS — RBAC, content tables, media
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- enums
|
|
-- ---------------------------------------------------------------------------
|
|
CREATE TYPE content_status AS ENUM ('draft', 'published', 'archived');
|
|
CREATE TYPE media_type AS ENUM ('image', 'video');
|
|
CREATE TYPE media_entity_type AS ENUM ('product', 'blog', 'portfolio');
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- permissions (RBAC)
|
|
-- ---------------------------------------------------------------------------
|
|
CREATE TABLE permissions (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
name VARCHAR(100) NOT NULL,
|
|
slug VARCHAR(100) NOT NULL,
|
|
group_name VARCHAR(50) NOT NULL,
|
|
description TEXT,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT permissions_slug_unique UNIQUE (slug)
|
|
);
|
|
|
|
CREATE TABLE roles (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
name VARCHAR(100) NOT NULL,
|
|
slug VARCHAR(100) NOT NULL,
|
|
description TEXT,
|
|
is_system BOOLEAN NOT NULL DEFAULT TRUE,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT roles_slug_unique UNIQUE (slug)
|
|
);
|
|
|
|
CREATE TABLE role_permissions (
|
|
role_id BIGINT NOT NULL,
|
|
permission_id BIGINT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
PRIMARY KEY (role_id, permission_id),
|
|
CONSTRAINT role_permissions_role_id_fkey
|
|
FOREIGN KEY (role_id) REFERENCES roles (id) ON DELETE CASCADE,
|
|
CONSTRAINT role_permissions_permission_id_fkey
|
|
FOREIGN KEY (permission_id) REFERENCES permissions (id) ON DELETE CASCADE
|
|
);
|
|
|
|
CREATE TABLE user_roles (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
user_id BIGINT NOT NULL,
|
|
role_id BIGINT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT user_roles_user_role_unique UNIQUE (user_id, role_id),
|
|
CONSTRAINT user_roles_user_id_fkey
|
|
FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
|
|
CONSTRAINT user_roles_role_id_fkey
|
|
FOREIGN KEY (role_id) REFERENCES roles (id) ON DELETE CASCADE
|
|
);
|
|
|
|
CREATE INDEX idx_user_roles_user_id ON user_roles (user_id);
|
|
CREATE INDEX idx_role_permissions_permission_id ON role_permissions (permission_id);
|
|
|
|
CREATE TRIGGER roles_set_updated_at
|
|
BEFORE UPDATE ON roles
|
|
FOR EACH ROW
|
|
EXECUTE FUNCTION set_updated_at();
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- media (images & videos, scoped per business)
|
|
-- ---------------------------------------------------------------------------
|
|
CREATE TABLE media (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
business_id BIGINT NOT NULL,
|
|
uploaded_by BIGINT,
|
|
media_type media_type NOT NULL,
|
|
storage_disk VARCHAR(50) NOT NULL DEFAULT 'local',
|
|
storage_path TEXT NOT NULL,
|
|
public_url TEXT NOT NULL,
|
|
file_name VARCHAR(255) NOT NULL,
|
|
original_file_name VARCHAR(255) NOT NULL,
|
|
mime_type VARCHAR(100) NOT NULL,
|
|
file_size_bytes BIGINT NOT NULL,
|
|
width INTEGER,
|
|
height INTEGER,
|
|
duration_seconds NUMERIC(10, 2),
|
|
alt_text VARCHAR(255),
|
|
caption TEXT,
|
|
metadata JSONB NOT NULL DEFAULT '{}',
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT media_business_id_fkey
|
|
FOREIGN KEY (business_id) REFERENCES businesses (id) ON DELETE CASCADE,
|
|
CONSTRAINT media_uploaded_by_fkey
|
|
FOREIGN KEY (uploaded_by) REFERENCES users (id) ON DELETE SET NULL,
|
|
CONSTRAINT media_file_size_positive CHECK (file_size_bytes > 0),
|
|
CONSTRAINT media_image_dimensions CHECK (
|
|
media_type <> 'image' OR (width IS NOT NULL AND height IS NOT NULL)
|
|
),
|
|
CONSTRAINT media_video_duration CHECK (
|
|
media_type <> 'video' OR duration_seconds IS NOT NULL
|
|
)
|
|
);
|
|
|
|
CREATE INDEX idx_media_business_id ON media (business_id);
|
|
CREATE INDEX idx_media_business_type ON media (business_id, media_type);
|
|
CREATE INDEX idx_media_created_at ON media (business_id, created_at DESC);
|
|
|
|
CREATE TRIGGER media_set_updated_at
|
|
BEFORE UPDATE ON media
|
|
FOR EACH ROW
|
|
EXECUTE FUNCTION set_updated_at();
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- products
|
|
-- ---------------------------------------------------------------------------
|
|
CREATE TABLE products (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
business_id BIGINT NOT NULL,
|
|
title VARCHAR(255) NOT NULL,
|
|
slug VARCHAR(255) NOT NULL,
|
|
description TEXT,
|
|
content JSONB NOT NULL DEFAULT '{}',
|
|
price NUMERIC(12, 2),
|
|
compare_at_price NUMERIC(12, 2),
|
|
sku VARCHAR(100),
|
|
stock_quantity INTEGER,
|
|
status content_status NOT NULL DEFAULT 'draft',
|
|
featured_media_id BIGINT,
|
|
sort_order INTEGER NOT NULL DEFAULT 0,
|
|
published_at TIMESTAMPTZ,
|
|
metadata JSONB NOT NULL DEFAULT '{}',
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT products_business_slug_unique UNIQUE (business_id, slug),
|
|
CONSTRAINT products_business_id_fkey
|
|
FOREIGN KEY (business_id) REFERENCES businesses (id) ON DELETE CASCADE,
|
|
CONSTRAINT products_featured_media_id_fkey
|
|
FOREIGN KEY (featured_media_id) REFERENCES media (id) ON DELETE SET NULL,
|
|
CONSTRAINT products_price_non_negative CHECK (price IS NULL OR price >= 0),
|
|
CONSTRAINT products_compare_price_non_negative CHECK (compare_at_price IS NULL OR compare_at_price >= 0),
|
|
CONSTRAINT products_stock_non_negative CHECK (stock_quantity IS NULL OR stock_quantity >= 0)
|
|
);
|
|
|
|
CREATE INDEX idx_products_business_id ON products (business_id);
|
|
CREATE INDEX idx_products_business_status ON products (business_id, status);
|
|
CREATE INDEX idx_products_business_published ON products (business_id, published_at DESC);
|
|
|
|
CREATE TRIGGER products_set_updated_at
|
|
BEFORE UPDATE ON products
|
|
FOR EACH ROW
|
|
EXECUTE FUNCTION set_updated_at();
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- blogs
|
|
-- ---------------------------------------------------------------------------
|
|
CREATE TABLE blogs (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
business_id BIGINT NOT NULL,
|
|
author_id BIGINT,
|
|
title VARCHAR(255) NOT NULL,
|
|
slug VARCHAR(255) NOT NULL,
|
|
excerpt TEXT,
|
|
content JSONB NOT NULL DEFAULT '{}',
|
|
status content_status NOT NULL DEFAULT 'draft',
|
|
featured_media_id BIGINT,
|
|
published_at TIMESTAMPTZ,
|
|
metadata JSONB NOT NULL DEFAULT '{}',
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT blogs_business_slug_unique UNIQUE (business_id, slug),
|
|
CONSTRAINT blogs_business_id_fkey
|
|
FOREIGN KEY (business_id) REFERENCES businesses (id) ON DELETE CASCADE,
|
|
CONSTRAINT blogs_author_id_fkey
|
|
FOREIGN KEY (author_id) REFERENCES users (id) ON DELETE SET NULL,
|
|
CONSTRAINT blogs_featured_media_id_fkey
|
|
FOREIGN KEY (featured_media_id) REFERENCES media (id) ON DELETE SET NULL
|
|
);
|
|
|
|
CREATE INDEX idx_blogs_business_id ON blogs (business_id);
|
|
CREATE INDEX idx_blogs_business_status ON blogs (business_id, status);
|
|
CREATE INDEX idx_blogs_business_published ON blogs (business_id, published_at DESC);
|
|
|
|
CREATE TRIGGER blogs_set_updated_at
|
|
BEFORE UPDATE ON blogs
|
|
FOR EACH ROW
|
|
EXECUTE FUNCTION set_updated_at();
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- portfolios
|
|
-- ---------------------------------------------------------------------------
|
|
CREATE TABLE portfolios (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
business_id BIGINT NOT NULL,
|
|
title VARCHAR(255) NOT NULL,
|
|
slug VARCHAR(255) NOT NULL,
|
|
description TEXT,
|
|
content JSONB NOT NULL DEFAULT '{}',
|
|
client_name VARCHAR(255),
|
|
project_url TEXT,
|
|
status content_status NOT NULL DEFAULT 'draft',
|
|
featured_media_id BIGINT,
|
|
sort_order INTEGER NOT NULL DEFAULT 0,
|
|
published_at TIMESTAMPTZ,
|
|
metadata JSONB NOT NULL DEFAULT '{}',
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT portfolios_business_slug_unique UNIQUE (business_id, slug),
|
|
CONSTRAINT portfolios_business_id_fkey
|
|
FOREIGN KEY (business_id) REFERENCES businesses (id) ON DELETE CASCADE,
|
|
CONSTRAINT portfolios_featured_media_id_fkey
|
|
FOREIGN KEY (featured_media_id) REFERENCES media (id) ON DELETE SET NULL
|
|
);
|
|
|
|
CREATE INDEX idx_portfolios_business_id ON portfolios (business_id);
|
|
CREATE INDEX idx_portfolios_business_status ON portfolios (business_id, status);
|
|
CREATE INDEX idx_portfolios_business_published ON portfolios (business_id, published_at DESC);
|
|
|
|
CREATE TRIGGER portfolios_set_updated_at
|
|
BEFORE UPDATE ON portfolios
|
|
FOR EACH ROW
|
|
EXECUTE FUNCTION set_updated_at();
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- media attachments (galleries, inline images/videos on content)
|
|
-- ---------------------------------------------------------------------------
|
|
CREATE TABLE media_attachments (
|
|
id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
|
|
business_id BIGINT NOT NULL,
|
|
media_id BIGINT NOT NULL,
|
|
entity_type media_entity_type NOT NULL,
|
|
entity_id BIGINT NOT NULL,
|
|
sort_order INTEGER NOT NULL DEFAULT 0,
|
|
is_featured BOOLEAN NOT NULL DEFAULT FALSE,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
CONSTRAINT media_attachments_business_id_fkey
|
|
FOREIGN KEY (business_id) REFERENCES businesses (id) ON DELETE CASCADE,
|
|
CONSTRAINT media_attachments_media_id_fkey
|
|
FOREIGN KEY (media_id) REFERENCES media (id) ON DELETE CASCADE,
|
|
CONSTRAINT media_attachments_unique UNIQUE (media_id, entity_type, entity_id)
|
|
);
|
|
|
|
CREATE INDEX idx_media_attachments_entity
|
|
ON media_attachments (business_id, entity_type, entity_id, sort_order);
|
|
CREATE INDEX idx_media_attachments_media_id ON media_attachments (media_id);
|
|
|
|
-- ---------------------------------------------------------------------------
|
|
-- seed: default permissions & roles
|
|
-- ---------------------------------------------------------------------------
|
|
INSERT INTO permissions (name, slug, group_name, description) VALUES
|
|
('View business', 'business.read', 'business', 'View business profile and settings'),
|
|
('Update business', 'business.update', 'business', 'Edit business profile and settings'),
|
|
('View domains', 'domains.read', 'domains', 'View connected domains'),
|
|
('Manage domains', 'domains.manage', 'domains', 'Add, edit, and remove domains'),
|
|
('View products', 'products.read', 'products', 'View products'),
|
|
('Create products', 'products.create', 'products', 'Create products'),
|
|
('Update products', 'products.update', 'products', 'Edit products'),
|
|
('Delete products', 'products.delete', 'products', 'Delete products'),
|
|
('Publish products', 'products.publish', 'products', 'Publish and unpublish products'),
|
|
('View blogs', 'blogs.read', 'blogs', 'View blog posts'),
|
|
('Create blogs', 'blogs.create', 'blogs', 'Create blog posts'),
|
|
('Update blogs', 'blogs.update', 'blogs', 'Edit blog posts'),
|
|
('Delete blogs', 'blogs.delete', 'blogs', 'Delete blog posts'),
|
|
('Publish blogs', 'blogs.publish', 'blogs', 'Publish and unpublish blog posts'),
|
|
('View portfolios', 'portfolios.read', 'portfolios', 'View portfolio items'),
|
|
('Create portfolios', 'portfolios.create', 'portfolios', 'Create portfolio items'),
|
|
('Update portfolios', 'portfolios.update', 'portfolios', 'Edit portfolio items'),
|
|
('Delete portfolios', 'portfolios.delete', 'portfolios', 'Delete portfolio items'),
|
|
('Publish portfolios', 'portfolios.publish', 'portfolios', 'Publish and unpublish portfolio items'),
|
|
('View media', 'media.read', 'media', 'View uploaded media'),
|
|
('Upload media', 'media.create', 'media', 'Upload images and videos'),
|
|
('Update media', 'media.update', 'media', 'Edit media metadata'),
|
|
('Delete media', 'media.delete', 'media', 'Delete media files'),
|
|
('View users', 'users.read', 'users', 'View user accounts'),
|
|
('Manage users', 'users.manage', 'users', 'Create and manage user accounts'),
|
|
('Manage roles', 'roles.manage', 'users', 'Assign roles and permissions');
|
|
|
|
INSERT INTO roles (name, slug, description, is_system) VALUES
|
|
('Owner', 'owner', 'Full access to everything', TRUE),
|
|
('Administrator', 'admin', 'Manage content, media, and settings', TRUE),
|
|
('Editor', 'editor', 'Create and edit content', TRUE),
|
|
('Viewer', 'viewer', 'Read-only access', TRUE);
|
|
|
|
INSERT INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id
|
|
FROM roles r
|
|
CROSS JOIN permissions p
|
|
WHERE r.slug = 'owner';
|
|
|
|
INSERT INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id
|
|
FROM roles r
|
|
JOIN permissions p ON p.slug <> 'roles.manage'
|
|
WHERE r.slug = 'admin';
|
|
|
|
INSERT INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id
|
|
FROM roles r
|
|
JOIN permissions p ON p.slug IN (
|
|
'business.read',
|
|
'products.read', 'products.create', 'products.update', 'products.publish',
|
|
'blogs.read', 'blogs.create', 'blogs.update', 'blogs.publish',
|
|
'portfolios.read', 'portfolios.create', 'portfolios.update', 'portfolios.publish',
|
|
'media.read', 'media.create', 'media.update'
|
|
)
|
|
WHERE r.slug = 'editor';
|
|
|
|
INSERT INTO role_permissions (role_id, permission_id)
|
|
SELECT r.id, p.id
|
|
FROM roles r
|
|
JOIN permissions p ON p.slug IN (
|
|
'business.read',
|
|
'domains.read',
|
|
'products.read',
|
|
'blogs.read',
|
|
'portfolios.read',
|
|
'media.read'
|
|
)
|
|
WHERE r.slug = 'viewer';
|