[Developer] #424 add user and permission management

Refs #424

src/main/resources/mapper/PermissionMapper.xml

@@ -14,6 +14,23 @@
     WHERE role_id = #{roleId}
   </select>
 
+  <select id="findPermissionViews" resultType="com.cloudhandson.vpdbackoffice.domain.permission.PermissionView">
+    SELECT p.perm_id AS permission_id,
+           r.role_id,
+           r.role_name,
+           o.object_id,
+           p.target_name AS object_name,
+           p.action_name AS action,
+           LISTAGG(pr.rule_type || NVL2(pr.rule_value, ':' || pr.rule_value, ''), ', ')
+             WITHIN GROUP (ORDER BY pr.rule_id) AS rules
+    FROM cb_permission p
+    JOIN cb_app_role r ON r.role_id = p.role_id
+    LEFT JOIN cb_protected_object o ON o.object_name = p.target_name
+    LEFT JOIN cb_permission_rule pr ON pr.perm_id = p.perm_id
+    GROUP BY p.perm_id, r.role_id, r.role_name, o.object_id, p.target_name, p.action_name
+    ORDER BY r.role_name, p.target_name
+  </select>
+
   <select id="findPermissionId" resultType="long">
     SELECT p.perm_id
     FROM cb_permission p
@@ -73,4 +90,9 @@
     INSERT INTO cb_permission_column (permission_id, column_name)
     VALUES (#{permissionId}, #{columnName})
   </insert>
+
+  <delete id="deletePermission">
+    DELETE FROM cb_permission
+    WHERE perm_id = #{permissionId}
+  </delete>
 </mapper>

src/main/resources/mapper/ProtectedObjectMapper.xml

@@ -21,4 +21,34 @@
     WHERE object_id = #{objectId}
     ORDER BY column_id
   </select>
+
+  <select id="nextObjectId" resultType="long">
+    SELECT NVL(MAX(object_id), 0) + 1 FROM cb_protected_object
+  </select>
+
+  <select id="nextColumnId" resultType="long">
+    SELECT NVL(MAX(column_id), 0) + 1 FROM cb_protected_column
+  </select>
+
+  <insert id="insertObject">
+    INSERT INTO cb_protected_object (object_id, owner, object_name, ords_path, enabled_yn)
+    VALUES (
+      #{objectId},
+      UPPER(#{command.owner}),
+      UPPER(#{command.objectName}),
+      #{command.ordsPath},
+      'Y'
+    )
+  </insert>
+
+  <insert id="insertColumn">
+    INSERT INTO cb_protected_column (column_id, object_id, column_name, sensitive_yn)
+    VALUES (#{columnId}, #{objectId}, UPPER(#{columnName}), #{sensitiveYn})
+  </insert>
+
+  <update id="disableObject">
+    UPDATE cb_protected_object
+    SET enabled_yn = 'N'
+    WHERE object_id = #{objectId}
+  </update>
 </mapper>

src/main/resources/mapper/UserMapper.xml

@@ -7,6 +7,7 @@
            user_name AS username,
            employee_no AS emp_no,
            dept_code,
+           can_read_contents,
            active AS active_yn
     FROM cb_app_user
     ORDER BY username
@@ -17,8 +18,57 @@
            user_name AS username,
            employee_no AS emp_no,
            dept_code,
+           can_read_contents,
            active AS active_yn
     FROM cb_app_user
     WHERE user_id = #{userId}
   </select>
+
+  <select id="findUserRoles" resultType="com.cloudhandson.vpdbackoffice.domain.user.UserRoleView">
+    SELECT u.user_id,
+           u.user_name AS username,
+           r.role_id,
+           r.role_name
+    FROM cb_user_role ur
+    JOIN cb_app_user u ON u.user_id = ur.user_id
+    JOIN cb_app_role r ON r.role_id = ur.role_id
+    ORDER BY u.user_name, r.role_name
+  </select>
+
+  <select id="nextUserId" resultType="long">
+    SELECT NVL(MAX(user_id), 0) + 1 FROM cb_app_user
+  </select>
+
+  <insert id="insertUser">
+    INSERT INTO cb_app_user (
+      user_id, user_name, employee_no, dept_code, can_read_contents, active
+    ) VALUES (
+      #{userId},
+      #{command.username},
+      #{command.empNo},
+      #{command.deptCode},
+      <choose>
+        <when test="command.canReadContents"> 'Y' </when>
+        <otherwise> 'N' </otherwise>
+      </choose>,
+      'Y'
+    )
+  </insert>
+
+  <update id="updateActive">
+    UPDATE cb_app_user
+    SET active = #{activeYn}
+    WHERE user_id = #{userId}
+  </update>
+
+  <insert id="insertUserRole">
+    INSERT INTO cb_user_role (user_id, role_id)
+    VALUES (#{userId}, #{roleId})
+  </insert>
+
+  <delete id="deleteUserRole">
+    DELETE FROM cb_user_role
+    WHERE user_id = #{userId}
+      AND role_id = #{roleId}
+  </delete>
 </mapper>