Files
Richard Churchman 492da90e10 Added registration functionality to enable the creation of isolated tenants in Jube when the Sandbox environment variable is set to true. This includes the introduction of a basic registration screen for tenant creation and template data configuration.
Enabled tracking given Sandpit set to true (intended for internal Jube use), which incorporates embedded Google Analytics and the Ask Jooby AI bot for enhanced functionality.

Provided a working Dockerfile and docker-compose.yml to facilitate seamless containerized deployment.

Additionally, created a user creation SQL file with minimal permissions to ensure security. Introduced a new connection string environment variable specifically designed for running reports. This connection string is configured to operate with extreme least privilege, ensuring the account can only access a tenant's data for reporting purposes.

These updates improve flexibility, security, and ease of deployment for Jube in both development and production environments.
2025-02-16 13:12:33 +02:00

116 lines
8.5 KiB
SQL

CREATE USER service WITH PASSWORD '';
CREATE USER reporting WITH PASSWORD '';
grant insert, select, update on "VersionInfo" to service;
grant insert, select, update on "EntityAnalysisModelListValue" to service;
grant insert, select, update on "Archive" to service;
grant insert, select, update on "EntityAnalysisModelAsynchronousQueueBalance" to service;
grant insert, select, update on "ActivationWatcher" to service;
grant insert, select, update on "CaseExecutionLog" to service;
grant insert, select, update on "CaseWorkflowDisplay" to service;
grant insert, select, update on "CaseWorkflowFilter" to service;
grant insert, select, update on "CaseWorkflowMacro" to service;
grant insert, select, update on "CaseWorkflowForm" to service;
grant insert, select, update on "Case" to service;
grant insert, select, update on "CaseWorkflowStatus" to service;
grant insert, select, update on "CaseWorkflowXPath" to service;
grant insert, select, update on "CaseWorkflowFormEntry" to service;
grant insert, select, update on "CaseWorkflow" to service;
grant insert, select, update on "CaseWorkflowFormEntryValue" to service;
grant insert, select, update on "Country" to service;
grant insert, select, update on "Currency" to service;
grant insert, select, update on "EntityAnalysisAsynchronousQueueBalance" to service;
grant insert, select, update on "EntityAnalysisModelActivationRule" to service;
grant insert, select, update on "EntityAnalysisModelDictionaryCsvFileUpload" to service;
grant insert, select, update on "EntityAnalysisModelActivationRuleSuppression" to service;
grant insert, select, update on "EntityAnalysisModelDictionaryKvp" to service;
grant insert, select, update on "EntityAnalysisModelGatewayRule" to service;
grant insert, select, update on "EntityAnalysisInlineScript" to service;
grant insert, select, update on "EntityAnalysisModelAbstractionCalculation" to service;
grant insert, select, update on "EntityAnalysisInstance" to service;
grant insert, select, update on "EntityAnalysisModelInlineScript" to service;
grant insert, select, update on "EntityAnalysisModelList" to service;
grant insert, select, update on "EntityAnalysisModelProcessingCounter" to service;
grant insert, select, update on "EntityAnalysisModelReprocessingRuleInstance" to service;
grant insert, select, update on "EntityAnalysisModelInstance" to service;
grant insert, select, update on "EntityAnalysisModelHttpAdaptation" to service;
grant insert, select, update on "EntityAnalysisModelInlineFunction" to service;
grant insert, select, update on "EntityAnalysisModelSanction" to service;
grant insert, select, update on "EntityAnalysisModelSearchKeyCalculationInstance" to service;
grant insert, select, update on "EntityAnalysisModelSearchKeyDistinctValueCalculationInstance" to service;
grant insert, select, update on "EntityAnalysisModelSuppression" to service;
grant insert, select, update on "ArchiveEntityAnalysisModelAbstractionEntry" to service;
grant insert, select, update on "EntityAnalysisModelReprocessingRule" to service;
grant insert, select, update on "EntityAnalysisModelSynchronisationSchedule" to service;
grant insert, select, update on "EntityAnalysisModelTtlCounter" to service;
grant insert, select, update on "EntityAnalysisModelDictionary" to service;
grant insert, select, update on "EntityAnalysisModelSynchronisationNodeStatusEntry" to service;
grant insert, select, update on "EntityAnalysisModelVersion" to service;
grant insert, select, update on "ExhaustiveSearchInstancePromotedTrialInstancePredictedActual" to service;
grant insert, select, update on "ExhaustiveSearchInstancePromotedTrialInstanceRoc" to service;
grant insert, select, update on "ExhaustiveSearchInstancePromotedTrialInstanceSensitivity" to service;
grant insert, select, update on "ExhaustiveSearchInstanceTrialInstanceVariable" to service;
grant insert, select, update on "ExhaustiveSearchInstanceTrialInstanceTopologyTrial" to service;
grant insert, select, update on "ExhaustiveSearchInstancePromotedTrialInstanceVariableHistogram" to service;
grant insert, select, update on "ExhaustiveSearchInstanceTrialInstance" to service;
grant insert, select, update on "ExhaustiveSearchInstanceTrialInstanceActivationFunctionTrial" to service;
grant insert, select, update on "ExhaustiveSearchInstance" to service;
grant insert, select, update on "ExhaustiveSearchInstanceVariableHistogram" to service;
grant insert, select, update on "ExhaustiveSearchInstanceVariableMultiCollinearity" to service;
grant insert, select, update on "ExhaustiveSearchInstancePromotedTrialInstanceVariable" to service;
grant insert, select, update on "SanctionEntrySource" to service;
grant insert, select, update on "SanctionEntry" to service;
grant insert, select, update on "Language" to service;
grant insert, select, update on "LanguageString" to service;
grant insert, select, update on "ExhaustiveSearchInstanceVariable" to service;
grant insert, select, update on "PermissionSpecification" to service;
grant insert, select, update on "RuleScriptToken" to service;
grant insert, select, update on "UserRoleRegistry" to service;
grant insert, select, update on "TenantRegistryVersion" to service;
grant insert, select, update on "UserLogin" to service;
grant insert, select, update on "VisualisationRegistryDatasourceExecutionLogParameter" to service;
grant insert, select, update on "VisualisationRegistryDatasourceSeries" to service;
grant insert, select, update on "VisualisationRegistryDatasourceExecutionLog" to service;
grant insert, select, update on "TenantRegistry" to service;
grant insert, select, update on "VisualisationRegistry" to service;
grant insert, select, update on "VisualisationRegistryDatasource" to service;
grant insert, select, update on "ArchiveKey" to service;
grant insert, select, update on "ExhaustiveSearchInstancePromotedTrialInstance" to service;
grant insert, select, update on "CaseEvent" to service;
grant insert, select, update on "CaseNote" to service;
grant insert, select, update on "EntityAnalysisModelAbstractionRule" to service;
grant insert, select, update on "EntityAnalysisModelListCsvFileUpload" to service;
grant insert, select, update on "VisualisationRegistryParameter" to service;
grant insert, select, update on "RoleRegistryPermission" to service;
grant insert, select, update on "RoleRegistry" to service;
grant insert, select, update on "UserInTenant" to service;
grant insert, select, update on "VisualisationRegistryVersion" to service;
grant insert, select, update on "ExhaustiveSearchInstanceTrialInstanceSensitivity" to service;
grant insert, select, update on "CachePayload" to service;
grant insert, select, update on "CacheTtlCounter" to service;
grant insert, select, update on "CacheSanction" to service;
grant insert, select, update on "SessionCaseSearchCompiledSql" to service;
grant insert, select, update on "SessionCaseSearchCompiledSqlExecution" to service;
grant insert, select, update on "CaseWorkflowAction" to service;
grant insert, select, update on "SessionCaseJournal" to service;
grant insert, select, update on "UserRegistry" to service;
grant insert, select, update on "CaseFile" to service;
grant insert, select, update on "EntityAnalysisModelTag" to service;
grant insert, select, update on "HttpProcessingCounter" to service;
grant insert, select, update on "CaseWorkflowVersion" to service;
grant insert, select, update on "CaseWorkflowStatusVersion" to service;
grant insert, select, update on "EntityAnalysisModelTtlCounterVersion" to service;
grant insert, select, update on "ExampleCaseVolumeEntry" to service,reporting;
grant insert, select, update on "ExampleCustomerCaseManagement" to service,reporting;
grant insert, select, update on "ExampleGeoCoded" to service,reporting;
grant insert, select, update on "UserInTenantSwitchLog" to service;
grant insert, select, update on "MockArchive" to service;
grant insert, select, update on "ExhaustiveSearchInstanceVariableClassification" to service;
grant insert, select, update on "ExhaustiveSearchInstanceVariableHistogramClassification" to service;
grant insert, select, update on "ExhaustiveSearchInstanceVariableAnomaly" to service;
grant insert, select, update on "ExhaustiveSearchInstanceVariableHistogramAnomaly" to service;
grant insert, select, update on "CachePayloadLatest" to service;
grant insert, select, update on "CacheTtlCounterEntry" to service;
grant insert, select, update on "CacheAbstraction" to service;
grant insert, select, update on "CacheReferenceDate" to service;
grant insert, select, update on "EntityAnalysisModelRequestXpath" to service;
grant insert, select, update on "EntityAnalysisModel" to service;