Skip to content

Commit 625f435

Browse files
rkboycerkboyce
authored
Flyway read restricted atlas user 2 (#2316)
* added new flyway script for the read restricted Atlas User
1 parent 94abef1 commit 625f435

1 file changed

Lines changed: 211 additions & 0 deletions

File tree

‎src/main/resources/db/migration/postgresql/V2.14.0.20231025170057__altas_read_restricted_role_and_permissions.sql‎

Lines changed: 211 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,211 @@
1+
INSERT INTO ${ohdsiSchema}.sec_role (id, name, system_role)
2+
values (15, 'read restricted Atlas Users', true)
3+
;
4+
5+
INSERT INTO ${ohdsiSchema}.sec_role_permission (role_id, permission_id)
6+
SELECT DISTINCT 15 role_id, permission_id
7+
FROM ${ohdsiSchema}.sec_role_permission srp
8+
INNER JOIN ${ohdsiSchema}.sec_permission sp ON srp.permission_id = sp.id
9+
WHERE sp.value IN
10+
(
11+
'*:cohortresults:*:breakdown:get',
12+
'*:person:*:get:dates',
13+
'*:vocabulary:lookup:identifiers:post',
14+
'cdmresults:*:get',
15+
'cohort-characterization:*:download:get',
16+
'cohort-characterization:*:exists:get',
17+
'cohort-characterization:*:export:conceptset:get',
18+
'cohort-characterization:*:export:get',
19+
'cohort-characterization:*:post',
20+
'cohort-characterization:*:tag:*:delete',
21+
'cohort-characterization:*:tag:post',
22+
'cohort-characterization:*:version:*:createAsset:put',
23+
'cohort-characterization:*:version:*:delete',
24+
'cohort-characterization:*:version:*:put',
25+
'cohort-characterization:byTags:post',
26+
'cohort-characterization:check:post',
27+
'cohort-characterization:generation:*:delete',
28+
'cohort-characterization:generation:*:design:get',
29+
'cohort-characterization:generation:*:explore:prevalence:*:*:*:get',
30+
'cohort-characterization:generation:*:result:count:get',
31+
'cohort-characterization:generation:*:result:export:post',
32+
'cohort-characterization:generation:*:result:get',
33+
'cohort-characterization:generation:*:result:post',
34+
'cohort-characterization:get',
35+
'cohort-characterization:import:post',
36+
'cohort-characterization:post',
37+
'cohortanalysis:*:get',
38+
'cohortanalysis:get',
39+
'cohortanalysis:post',
40+
'cohortdefinition:*:check:get',
41+
'cohortdefinition:*:check:post',
42+
'cohortdefinition:*:copy:get',
43+
'cohortdefinition:*:exists:get',
44+
'cohortdefinition:*:export:conceptset:get',
45+
'cohortdefinition:*:tag:*:delete',
46+
'cohortdefinition:*:tag:post',
47+
'cohortdefinition:*:version:*:createAsset:put',
48+
'cohortdefinition:*:version:*:delete',
49+
'cohortdefinition:*:version:*:put',
50+
'cohortdefinition:byTags:post',
51+
'cohortdefinition:check:post',
52+
'cohortdefinition:checkv2:post',
53+
'cohortdefinition:get',
54+
'cohortdefinition:post',
55+
'cohortdefinition:printfriendly:cohort:post',
56+
'cohortdefinition:printfriendly:conceptsets:post',
57+
'cohortdefinition:sql:post',
58+
'cohortresults:*:get',
59+
'cohortsample:*:*:*:delete',
60+
'cohortsample:*:*:*:get',
61+
'cohortsample:*:*:*:refresh:post',
62+
'cohortsample:*:*:delete',
63+
'cohortsample:*:*:get',
64+
'cohortsample:*:*:post',
65+
'comparativecohortanalysis:*:copy:get',
66+
'comparativecohortanalysis:*:delete',
67+
'comparativecohortanalysis:*:put',
68+
'comparativecohortanalysis:get',
69+
'comparativecohortanalysis:post',
70+
'conceptset:*:copy-name:get',
71+
'conceptset:*:exists:get',
72+
'conceptset:*:export:get',
73+
'conceptset:*:expression:*:get',
74+
'conceptset:*:generationinfo:get',
75+
'conceptset:*:tag:*:delete',
76+
'conceptset:*:tag:post',
77+
'conceptset:*:version:*:createAsset:put',
78+
'conceptset:*:version:*:delete',
79+
'conceptset:*:version:*:expression:*:get',
80+
'conceptset:*:version:*:get',
81+
'conceptset:*:version:*:put',
82+
'conceptset:*:version:get',
83+
'conceptset:19:delete',
84+
'conceptset:19:expression:get',
85+
'conceptset:19:get',
86+
'conceptset:19:items:put',
87+
'conceptset:19:put',
88+
'conceptset:19:version:*:expression:get',
89+
'conceptset:byTags:post',
90+
'conceptset:check:post',
91+
'conceptset:get',
92+
'conceptset:post',
93+
'configuration:edit:ui',
94+
'estimation:*:exists:get',
95+
'estimation:*:generation:*:post',
96+
'estimation:check:post',
97+
'estimation:generation:*:result:get',
98+
'estimation:get',
99+
'estimation:import:post',
100+
'estimation:post',
101+
'evidence:*:drugconditionpairs:post',
102+
'evidence:*:druglabel:post',
103+
'evidence:*:get',
104+
'evidence:*:negativecontrols:*:get',
105+
'evidence:*:negativecontrols:post',
106+
'executionservice:*:get',
107+
'executionservice:execution:run:post',
108+
'feasibility:*:delete',
109+
'feasibility:*:get',
110+
'feasibility:*:put',
111+
'feasibility:get',
112+
'feature-analysis:*:copy:get',
113+
'feature-analysis:*:exists:get',
114+
'feature-analysis:*:export:conceptset:get',
115+
'feature-analysis:*:get',
116+
'feature-analysis:aggregates:get',
117+
'feature-analysis:get',
118+
'feature-analysis:post',
119+
'featureextraction:*:get',
120+
'gis:cohort:*:bounds:*:get',
121+
'gis:cohort:*:clusters:*:get',
122+
'gis:cohort:*:density:*:get',
123+
'gis:person:*:bounds:*:get',
124+
'gis:source:check:*:get',
125+
'ir:*:exists:get',
126+
'ir:*:tag:*:delete',
127+
'ir:*:tag:post',
128+
'ir:*:version:*:createAsset:put',
129+
'ir:*:version:*:delete',
130+
'ir:*:version:*:put',
131+
'ir:byTags:post',
132+
'ir:check:post',
133+
'ir:design:post',
134+
'ir:get',
135+
'ir:post',
136+
'ir:sql:post',
137+
'job:execution:get',
138+
'job:get',
139+
'job:type:*:name:*:get',
140+
'notifications:get',
141+
'notifications:viewed:get',
142+
'notifications:viewed:post',
143+
'pathway-analysis:*:exists:get',
144+
'pathway-analysis:*:export:get',
145+
'pathway-analysis:*:post',
146+
'pathway-analysis:*:tag:*:delete',
147+
'pathway-analysis:*:tag:post',
148+
'pathway-analysis:*:version:*:createAsset:put',
149+
'pathway-analysis:*:version:*:delete',
150+
'pathway-analysis:*:version:*:put',
151+
'pathway-analysis:byTags:post',
152+
'pathway-analysis:check:post',
153+
'pathway-analysis:get',
154+
'pathway-analysis:import:post',
155+
'pathway-analysis:post',
156+
'plp:*:copy:get',
157+
'plp:*:delete',
158+
'plp:*:put',
159+
'plp:get',
160+
'plp:post',
161+
'prediction:*:generation:*:post',
162+
'prediction:check:post',
163+
'prediction:generation:*:result:get',
164+
'prediction:get',
165+
'prediction:import:post',
166+
'prediction:post',
167+
'reusable:*:exists:get',
168+
'reusable:*:get',
169+
'reusable:*:post',
170+
'reusable:*:tag:*:delete',
171+
'reusable:*:tag:post',
172+
'reusable:*:version:*:createAsset:put',
173+
'reusable:*:version:*:delete',
174+
'reusable:*:version:*:get',
175+
'reusable:*:version:*:put',
176+
'reusable:*:version:get',
177+
'reusable:byTags:post',
178+
'reusable:get',
179+
'reusable:post',
180+
'source:*:get',
181+
'source:daimon:priority:get',
182+
'source:priorityVocabulary:get',
183+
'sqlrender:translate:post',
184+
'tag:*:delete',
185+
'tag:*:get',
186+
'tag:*:put',
187+
'tag:get',
188+
'tag:multiAssign:post',
189+
'tag:multiUnassign:post',
190+
'tag:post',
191+
'tag:search:get',
192+
'vocabulary:*:compare-arbitrary',
193+
'vocabulary:*:post',
194+
'vocabulary:basic_cdm:*:get',
195+
'vocabulary:basic_cdm:compare:post',
196+
'vocabulary:basic_cdm:concept:*:ancestorAndDescendant:get',
197+
'vocabulary:basic_cdm:concept:*:get',
198+
'vocabulary:basic_cdm:concept:*:related:get',
199+
'vocabulary:basic_cdm:included-concepts:count:post',
200+
'vocabulary:basic_cdm:lookup:identifiers:ancestors:post',
201+
'vocabulary:basic_cdm:lookup:identifiers:post',
202+
'vocabulary:basic_cdm:lookup:mapped:post',
203+
'vocabulary:basic_cdm:lookup:recommended:post',
204+
'vocabulary:basic_cdm:lookup:sourcecodes:post',
205+
'vocabulary:basic_cdm:optimize:post',
206+
'vocabulary:basic_cdm:resolveConceptSetExpression:post',
207+
'vocabulary:basic_cdm:search:*:get',
208+
'vocabulary:basic_cdm:search:post'
209+
)
210+
;
211+

0 commit comments

Comments
 (0)