83 lines
4.2 KiB
Python
83 lines
4.2 KiB
Python
# Generated by Django 5.2.12 on 2026-09-11 13:06
|
|
|
|
import django.db.models.deletion
|
|
from django.conf import settings
|
|
from django.db import migrations, models
|
|
|
|
|
|
def backfill_legacy_memberships(apps, schema_editor):
|
|
"""Keep existing installs usable while making tenant access explicit.
|
|
|
|
Existing superusers retain operator access to every active tenant. Other
|
|
users get the configured/default tenant, and the historical demo account
|
|
also gets the demo tenant needed by the public demo token flow.
|
|
"""
|
|
Tenant = apps.get_model('core', 'Tenant')
|
|
Membership = apps.get_model('core', 'TenantMembership')
|
|
User = apps.get_model(settings.AUTH_USER_MODEL.split('.')[0], settings.AUTH_USER_MODEL.split('.')[1])
|
|
|
|
default = Tenant.objects.filter(code='default', is_active=True).first()
|
|
demo = Tenant.objects.filter(code='demo', is_active=True).first()
|
|
for user in User.objects.all().iterator():
|
|
tenants = list(Tenant.objects.filter(is_active=True)) if user.is_superuser else ([default] if default else [])
|
|
if user.username == 'demo' and demo is not None:
|
|
tenants.append(demo)
|
|
for tenant in {t.pk: t for t in tenants if t is not None}.values():
|
|
Membership.objects.get_or_create(
|
|
user_id=user.pk, tenant_id=tenant.pk,
|
|
defaults={'role': 'owner' if user.is_superuser else 'member', 'is_active': True},
|
|
)
|
|
|
|
|
|
class Migration(migrations.Migration):
|
|
|
|
dependencies = [
|
|
('core', '0001_initial'),
|
|
migrations.swappable_dependency(settings.AUTH_USER_MODEL),
|
|
]
|
|
|
|
operations = [
|
|
migrations.CreateModel(
|
|
name='TenantMembership',
|
|
fields=[
|
|
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
|
|
('role', models.CharField(choices=[('owner', '所有者'), ('admin', '管理员'), ('member', '成员')], default='member', max_length=16)),
|
|
('is_active', models.BooleanField(default=True)),
|
|
('created_at', models.DateTimeField(auto_now_add=True)),
|
|
('updated_at', models.DateTimeField(auto_now=True)),
|
|
('tenant', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='memberships', to='core.tenant')),
|
|
('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='tenant_memberships', to=settings.AUTH_USER_MODEL)),
|
|
],
|
|
options={
|
|
'db_table': 'core_tenant_membership',
|
|
'indexes': [models.Index(fields=['user', 'is_active'], name='core_tenant_user_id_51dd63_idx'), models.Index(fields=['tenant', 'is_active'], name='core_tenant_tenant__f85f17_idx')],
|
|
'constraints': [models.UniqueConstraint(fields=('user', 'tenant'), name='core_membership_user_tenant_uniq')],
|
|
},
|
|
),
|
|
migrations.RunPython(backfill_legacy_memberships, migrations.RunPython.noop),
|
|
]
|
|
|
|
|
|
def backfill_legacy_memberships(apps, schema_editor):
|
|
"""Keep existing installs usable while making tenant access explicit.
|
|
|
|
Existing superusers retain operator access to every active tenant. Other
|
|
users get the configured/default tenant, and the historical demo account
|
|
also gets the demo tenant needed by the public demo token flow.
|
|
"""
|
|
Tenant = apps.get_model('core', 'Tenant')
|
|
Membership = apps.get_model('core', 'TenantMembership')
|
|
User = apps.get_model(settings.AUTH_USER_MODEL.split('.')[0], settings.AUTH_USER_MODEL.split('.')[1])
|
|
|
|
default = Tenant.objects.filter(code='default', is_active=True).first()
|
|
demo = Tenant.objects.filter(code='demo', is_active=True).first()
|
|
for user in User.objects.all().iterator():
|
|
tenants = list(Tenant.objects.filter(is_active=True)) if user.is_superuser else ([default] if default else [])
|
|
if user.username == 'demo' and demo is not None:
|
|
tenants.append(demo)
|
|
for tenant in {t.pk: t for t in tenants if t is not None}.values():
|
|
Membership.objects.get_or_create(
|
|
user_id=user.pk, tenant_id=tenant.pk,
|
|
defaults={'role': 'owner' if user.is_superuser else 'member', 'is_active': True},
|
|
)
|