Migrations

2026-03-08 16:58:05 +08:00
parent d87b5e73d7
commit ce82a88e04
19 changed files with 1526 additions and 0 deletions
@@ -0,0 +1,260 @@
+-- =============================================================================
+-- IT Service Request Module
+-- =============================================================================
+
+-- 1. Main table
+CREATE TABLE IF NOT EXISTS it_service_requests (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  request_number text UNIQUE,
+
+  -- Services (checkboxes from the form)
+  services text[] NOT NULL DEFAULT '{}',
+  services_other text,
+
+  -- Event/Activity Details (Quill Delta JSON)
+  event_name text NOT NULL,
+  event_details text, -- Quill delta JSON
+  
+  -- Scheduling
+  event_date timestamptz,
+  event_end_date timestamptz,
+  dry_run_date timestamptz,
+  dry_run_end_date timestamptz,
+
+  -- Contact
+  contact_person text,
+  contact_number text,
+
+  -- Remarks (Quill Delta JSON)
+  remarks text,
+
+  -- Office (Department in the form)
+  office_id uuid REFERENCES offices(id) ON DELETE SET NULL,
+
+  -- Signatories
+  requested_by text, -- Name of requester (default: standard user who created)
+  requested_by_user_id uuid REFERENCES auth.users(id) ON DELETE SET NULL,
+  approved_by text, -- Name of approver (admin only)
+  approved_by_user_id uuid REFERENCES auth.users(id) ON DELETE SET NULL,
+  approved_at timestamptz,
+
+  -- Status lifecycle: draft → pending_approval → scheduled → in_progress_dry_run → in_progress → completed → cancelled
+  status text NOT NULL DEFAULT 'draft' CHECK (
+    status IN ('draft', 'pending_approval', 'scheduled', 'in_progress_dry_run', 'in_progress', 'completed', 'cancelled')
+  ),
+
+  -- Geofence override: allow IT staff to check in/out outside CRMC premise
+  outside_premise_allowed boolean NOT NULL DEFAULT false,
+
+  -- Cancellation
+  cancellation_reason text,
+  cancelled_at timestamptz,
+
+  -- Metadata
+  creator_id uuid REFERENCES auth.users(id) ON DELETE SET NULL,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  completed_at timestamptz,
+
+  -- Date/Time Received/Checked from the form
+  date_time_received timestamptz,
+  date_time_checked timestamptz
+);
+
+-- Auto-update updated_at
+CREATE OR REPLACE FUNCTION update_it_service_requests_updated_at()
+RETURNS TRIGGER AS $$
+BEGIN
+  NEW.updated_at = now();
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER it_service_requests_updated_at_trigger
+  BEFORE UPDATE ON it_service_requests
+  FOR EACH ROW
+  EXECUTE FUNCTION update_it_service_requests_updated_at();
+
+-- 2. IT Service Request Assignments (IT Staff assigned to the request)
+CREATE TABLE IF NOT EXISTS it_service_request_assignments (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  request_id uuid NOT NULL REFERENCES it_service_requests(id) ON DELETE CASCADE,
+  user_id uuid NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  UNIQUE(request_id, user_id)
+);
+
+-- 3. Activity Logs for audit trail
+CREATE TABLE IF NOT EXISTS it_service_request_activity_logs (
+  id bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
+  request_id uuid NOT NULL REFERENCES it_service_requests(id) ON DELETE CASCADE,
+  actor_id uuid REFERENCES auth.users(id) ON DELETE SET NULL,
+  action_type text NOT NULL,
+  meta jsonb,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+-- 4. Action Taken (separate table with evidence attachments)
+CREATE TABLE IF NOT EXISTS it_service_request_actions (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  request_id uuid NOT NULL REFERENCES it_service_requests(id) ON DELETE CASCADE,
+  user_id uuid NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  action_taken text, -- Quill Delta JSON
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+-- Auto-update updated_at for actions
+CREATE TRIGGER it_service_request_actions_updated_at_trigger
+  BEFORE UPDATE ON it_service_request_actions
+  FOR EACH ROW
+  EXECUTE FUNCTION update_it_service_requests_updated_at();
+
+-- 5. Evidence Attachments (images only, for action taken)
+CREATE TABLE IF NOT EXISTS it_service_request_evidence (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  request_id uuid NOT NULL REFERENCES it_service_requests(id) ON DELETE CASCADE,
+  action_id uuid REFERENCES it_service_request_actions(id) ON DELETE CASCADE,
+  user_id uuid NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  file_path text NOT NULL,
+  file_name text NOT NULL,
+  taken_at timestamptz, -- Extracted from image EXIF metadata
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+-- 6. Request Number Generation RPC
+CREATE OR REPLACE FUNCTION insert_it_service_request_with_number(
+  p_event_name text,
+  p_services text[],
+  p_creator_id uuid,
+  p_office_id uuid DEFAULT NULL,
+  p_requested_by text DEFAULT NULL,
+  p_requested_by_user_id uuid DEFAULT NULL,
+  p_status text DEFAULT 'draft'
+)
+RETURNS TABLE(id uuid, request_number text) AS $$
+DECLARE
+  v_seq int;
+  v_id uuid;
+  v_number text;
+BEGIN
+  -- Get next sequence number for the current year
+  SELECT COALESCE(MAX(
+    CAST(NULLIF(regexp_replace(r.request_number, '^ISR-\d{4}-', ''), '') AS int)
+  ), 0) + 1
+  INTO v_seq
+  FROM it_service_requests r
+  WHERE r.request_number LIKE 'ISR-' || EXTRACT(YEAR FROM now())::text || '-%';
+
+  v_number := 'ISR-' || EXTRACT(YEAR FROM now())::text || '-' || LPAD(v_seq::text, 4, '0');
+  v_id := gen_random_uuid();
+
+  INSERT INTO it_service_requests (id, request_number, event_name, services, creator_id, office_id, requested_by, requested_by_user_id, status)
+  VALUES (v_id, v_number, p_event_name, p_services, p_creator_id, p_office_id, p_requested_by, p_requested_by_user_id, p_status);
+
+  RETURN QUERY SELECT v_id, v_number;
+END;
+$$ LANGUAGE plpgsql;
+
+-- 7. Indexes
+CREATE INDEX idx_it_service_requests_status ON it_service_requests(status);
+CREATE INDEX idx_it_service_requests_office_id ON it_service_requests(office_id);
+CREATE INDEX idx_it_service_requests_creator_id ON it_service_requests(creator_id);
+CREATE INDEX idx_it_service_requests_event_date ON it_service_requests(event_date);
+CREATE INDEX idx_it_service_request_assignments_request_id ON it_service_request_assignments(request_id);
+CREATE INDEX idx_it_service_request_assignments_user_id ON it_service_request_assignments(user_id);
+CREATE INDEX idx_it_service_request_activity_logs_request_id ON it_service_request_activity_logs(request_id);
+CREATE INDEX idx_it_service_request_actions_request_id ON it_service_request_actions(request_id);
+CREATE INDEX idx_it_service_request_evidence_request_id ON it_service_request_evidence(request_id);
+
+-- 8. Enable RLS
+ALTER TABLE it_service_requests ENABLE ROW LEVEL SECURITY;
+ALTER TABLE it_service_request_assignments ENABLE ROW LEVEL SECURITY;
+ALTER TABLE it_service_request_activity_logs ENABLE ROW LEVEL SECURITY;
+ALTER TABLE it_service_request_actions ENABLE ROW LEVEL SECURITY;
+ALTER TABLE it_service_request_evidence ENABLE ROW LEVEL SECURITY;
+
+-- 9. RLS Policies
+
+-- IT Service Requests: authenticated can read all, insert own, update depending on role
+CREATE POLICY "Authenticated users can read it_service_requests"
+  ON it_service_requests FOR SELECT TO authenticated USING (true);
+
+CREATE POLICY "Authenticated users can insert it_service_requests"
+  ON it_service_requests FOR INSERT TO authenticated
+  WITH CHECK (auth.uid() = creator_id);
+
+CREATE POLICY "Authenticated users can update it_service_requests"
+  ON it_service_requests FOR UPDATE TO authenticated
+  USING (true);
+
+-- Assignments
+CREATE POLICY "Authenticated users can read it_service_request_assignments"
+  ON it_service_request_assignments FOR SELECT TO authenticated USING (true);
+
+CREATE POLICY "Authenticated users can insert it_service_request_assignments"
+  ON it_service_request_assignments FOR INSERT TO authenticated
+  WITH CHECK (true);
+
+CREATE POLICY "Authenticated users can delete it_service_request_assignments"
+  ON it_service_request_assignments FOR DELETE TO authenticated
+  USING (true);
+
+-- Activity Logs
+CREATE POLICY "Authenticated users can read it_service_request_activity_logs"
+  ON it_service_request_activity_logs FOR SELECT TO authenticated USING (true);
+
+CREATE POLICY "Authenticated users can insert it_service_request_activity_logs"
+  ON it_service_request_activity_logs FOR INSERT TO authenticated
+  WITH CHECK (true);
+
+-- Actions
+CREATE POLICY "Authenticated users can read it_service_request_actions"
+  ON it_service_request_actions FOR SELECT TO authenticated USING (true);
+
+CREATE POLICY "Authenticated users can insert it_service_request_actions"
+  ON it_service_request_actions FOR INSERT TO authenticated
+  WITH CHECK (auth.uid() = user_id);
+
+CREATE POLICY "Authenticated users can update it_service_request_actions"
+  ON it_service_request_actions FOR UPDATE TO authenticated
+  USING (auth.uid() = user_id);
+
+-- Evidence
+CREATE POLICY "Authenticated users can read it_service_request_evidence"
+  ON it_service_request_evidence FOR SELECT TO authenticated USING (true);
+
+CREATE POLICY "Authenticated users can insert it_service_request_evidence"
+  ON it_service_request_evidence FOR INSERT TO authenticated
+  WITH CHECK (auth.uid() = user_id);
+
+CREATE POLICY "Authenticated users can delete it_service_request_evidence"
+  ON it_service_request_evidence FOR DELETE TO authenticated
+  USING (auth.uid() = user_id);
+
+-- 10. Add it_service_request_id to notifications table
+ALTER TABLE notifications ADD COLUMN IF NOT EXISTS it_service_request_id uuid REFERENCES it_service_requests(id) ON DELETE CASCADE;
+
+-- 11. Storage bucket for IT service request files
+INSERT INTO storage.buckets (id, name, public, file_size_limit)
+VALUES ('it_service_attachments', 'it_service_attachments', true, 26214400)
+ON CONFLICT (id) DO NOTHING;
+
+-- Storage policies
+CREATE POLICY "Authenticated users can upload it_service_attachments"
+  ON storage.objects FOR INSERT TO authenticated
+  WITH CHECK (bucket_id = 'it_service_attachments');
+
+CREATE POLICY "Authenticated users can read it_service_attachments"
+  ON storage.objects FOR SELECT TO authenticated
+  USING (bucket_id = 'it_service_attachments');
+
+CREATE POLICY "Authenticated users can delete it_service_attachments"
+  ON storage.objects FOR DELETE TO authenticated
+  USING (bucket_id = 'it_service_attachments');
+
+-- 12. Realtime publication
+ALTER PUBLICATION supabase_realtime ADD TABLE it_service_requests;
+ALTER PUBLICATION supabase_realtime ADD TABLE it_service_request_assignments;
+ALTER PUBLICATION supabase_realtime ADD TABLE it_service_request_activity_logs;
+ALTER PUBLICATION supabase_realtime ADD TABLE it_service_request_actions;