[Developer] #424 implement VPD ORDS backoffice

Refs #424

src/main/resources/mapper/AuditMapper.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
+    "https://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.cloudhandson.vpdbackoffice.mapper.AuditMapper">
+  <insert id="insert" parameterType="com.cloudhandson.vpdbackoffice.domain.audit.AuditEvent">
+    INSERT INTO cb_ords_probe_audit (
+      audit_id, event_type, key_id, object_id, status, row_count, error_code, message, created_at
+    ) VALUES (
+      cb_ords_probe_audit_seq.NEXTVAL,
+      #{eventType}, #{keyId}, #{objectId}, #{status}, #{rowCount}, #{errorCode}, #{message}, SYSTIMESTAMP
+    )
+  </insert>
+</mapper>

src/main/resources/mapper/BearerTokenMapper.xml

@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
+    "https://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.cloudhandson.vpdbackoffice.mapper.BearerTokenMapper">
+  <select id="findAll" resultType="com.cloudhandson.vpdbackoffice.domain.token.BearerTokenRecord">
+    SELECT k.key_id, k.user_id, u.user_name AS username, k.key_prefix, k.key_hash,
+           k.expires_at, k.revoked_at, k.description
+    FROM cb_agent_bearer_key k
+    JOIN cb_app_user u ON u.user_id = k.user_id
+    ORDER BY k.key_id DESC
+  </select>
+
+  <select id="findById" resultType="com.cloudhandson.vpdbackoffice.domain.token.BearerTokenRecord">
+    SELECT k.key_id, k.user_id, u.user_name AS username, k.key_prefix, k.key_hash,
+           k.expires_at, k.revoked_at, k.description
+    FROM cb_agent_bearer_key k
+    JOIN cb_app_user u ON u.user_id = k.user_id
+    WHERE k.key_id = #{keyId}
+  </select>
+
+  <select id="nextKeyId" resultType="long">
+    SELECT cb_agent_bearer_key_seq.NEXTVAL FROM dual
+  </select>
+
+  <insert id="insertToken" parameterType="com.cloudhandson.vpdbackoffice.domain.token.BearerTokenRecord">
+    INSERT INTO cb_agent_bearer_key (
+      key_id, user_id, key_prefix, key_hash, expires_at, revoked_at, description
+    ) VALUES (
+      #{keyId}, #{userId}, #{keyPrefix}, #{keyHash}, #{expiresAt}, #{revokedAt}, #{description}
+    )
+  </insert>
+
+  <update id="revokeToken">
+    UPDATE cb_agent_bearer_key
+    SET revoked_at = #{revokedAt},
+        description = CASE
+          WHEN #{reason} IS NULL THEN description
+          ELSE SUBSTR(COALESCE(description, '') || ' revoked: ' || #{reason}, 1, 200)
+        END
+    WHERE key_id = #{keyId}
+      AND revoked_at IS NULL
+  </update>
+</mapper>

src/main/resources/mapper/PermissionMapper.xml

@@ -0,0 +1,76 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
+    "https://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.cloudhandson.vpdbackoffice.mapper.PermissionMapper">
+  <select id="findRoles" resultType="com.cloudhandson.vpdbackoffice.domain.permission.AppRole">
+    SELECT role_id, role_name, CAST(NULL AS VARCHAR2(200)) AS description
+    FROM cb_app_role
+    ORDER BY role_name
+  </select>
+
+  <select id="findRole" resultType="com.cloudhandson.vpdbackoffice.domain.permission.AppRole">
+    SELECT role_id, role_name, CAST(NULL AS VARCHAR2(200)) AS description
+    FROM cb_app_role
+    WHERE role_id = #{roleId}
+  </select>
+
+  <select id="findPermissionId" resultType="long">
+    SELECT p.perm_id
+    FROM cb_permission p
+    JOIN cb_protected_object o ON o.object_name = p.target_name
+    WHERE p.role_id = #{roleId}
+      AND o.object_id = #{objectId}
+  </select>
+
+  <select id="findPermissionSet" resultType="com.cloudhandson.vpdbackoffice.domain.permission.PermissionSet">
+    SELECT p.perm_id AS permission_id,
+           p.role_id,
+           o.object_id,
+           p.action_name AS action
+    FROM cb_permission p
+    JOIN cb_protected_object o ON o.object_name = p.target_name
+    WHERE p.role_id = #{roleId}
+      AND o.object_id = #{objectId}
+  </select>
+
+  <select id="nextPermissionId" resultType="long">
+    SELECT cb_permission_seq.NEXTVAL FROM dual
+  </select>
+
+  <select id="nextRuleId" resultType="long">
+    SELECT cb_permission_rule_seq.NEXTVAL FROM dual
+  </select>
+
+  <insert id="insertPermission">
+    INSERT INTO cb_permission (perm_id, role_id, target_name, action_name)
+    SELECT #{permissionId}, #{roleId}, object_name, #{action}
+    FROM cb_protected_object
+    WHERE object_id = #{objectId}
+  </insert>
+
+  <update id="updatePermissionAction">
+    UPDATE cb_permission
+    SET action_name = #{action}
+    WHERE perm_id = #{permissionId}
+  </update>
+
+  <delete id="deleteRules">
+    DELETE FROM cb_permission_rule
+    WHERE perm_id = #{permissionId}
+  </delete>
+
+  <insert id="insertRule" parameterType="com.cloudhandson.vpdbackoffice.domain.permission.PermissionRule">
+    INSERT INTO cb_permission_rule (rule_id, perm_id, rule_type, rule_value)
+    VALUES (#{ruleId}, #{permissionId}, #{ruleType}, #{ruleValue})
+  </insert>
+
+  <delete id="deleteVisibleColumns">
+    DELETE FROM cb_permission_column
+    WHERE permission_id = #{permissionId}
+  </delete>
+
+  <insert id="insertVisibleColumn">
+    INSERT INTO cb_permission_column (permission_id, column_name)
+    VALUES (#{permissionId}, #{columnName})
+  </insert>
+</mapper>

src/main/resources/mapper/ProtectedObjectMapper.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
+    "https://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.cloudhandson.vpdbackoffice.mapper.ProtectedObjectMapper">
+  <select id="findEnabled" resultType="com.cloudhandson.vpdbackoffice.domain.protectedobject.ProtectedObject">
+    SELECT object_id, owner, object_name, ords_path, enabled_yn
+    FROM cb_protected_object
+    WHERE enabled_yn = 'Y'
+    ORDER BY owner, object_name
+  </select>
+
+  <select id="findById" resultType="com.cloudhandson.vpdbackoffice.domain.protectedobject.ProtectedObject">
+    SELECT object_id, owner, object_name, ords_path, enabled_yn
+    FROM cb_protected_object
+    WHERE object_id = #{objectId}
+  </select>
+
+  <select id="findColumns" resultType="com.cloudhandson.vpdbackoffice.domain.protectedobject.ProtectedColumn">
+    SELECT column_id, object_id, column_name, sensitive_yn, visible_role_id
+    FROM cb_protected_column
+    WHERE object_id = #{objectId}
+    ORDER BY column_id
+  </select>
+</mapper>

src/main/resources/mapper/UserMapper.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
+    "https://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.cloudhandson.vpdbackoffice.mapper.UserMapper">
+  <select id="findAll" resultType="com.cloudhandson.vpdbackoffice.domain.user.AppUser">
+    SELECT user_id,
+           user_name AS username,
+           employee_no AS emp_no,
+           dept_code,
+           active AS active_yn
+    FROM cb_app_user
+    ORDER BY username
+  </select>
+
+  <select id="findById" resultType="com.cloudhandson.vpdbackoffice.domain.user.AppUser">
+    SELECT user_id,
+           user_name AS username,
+           employee_no AS emp_no,
+           dept_code,
+           active AS active_yn
+    FROM cb_app_user
+    WHERE user_id = #{userId}
+  </select>
+</mapper>