- users + tenant_memberships tables (tenant-scoped)
- RLS policy on tenant_memberships using set_config('app.current_tenant_id', ...)
- withTenantContext() helper for transaction-scoped tenant context
- separate non-superuser app role (b2bcall_app): the default Docker postgres
user is SUPERUSER and always bypasses RLS even with FORCE, so the app must
never connect through the migration/owner role. Documented in
docs/TENANT_ISOLATION.md.
- automated isolation test proving tenant A never sees tenant B's data
79 lines
2.2 KiB
Plaintext
79 lines
2.2 KiB
Plaintext
generator client {
|
|
provider = "prisma-client-js"
|
|
}
|
|
|
|
datasource db {
|
|
provider = "postgresql"
|
|
}
|
|
|
|
enum TenantStatus {
|
|
TRIAL
|
|
ACTIVE
|
|
SUSPENDED
|
|
PAST_DUE
|
|
CANCELLED
|
|
|
|
@@map("tenant_status")
|
|
}
|
|
|
|
model Tenant {
|
|
id String @id @default(uuid()) @db.Uuid
|
|
code String @unique
|
|
slug String @unique
|
|
legalName String @map("legal_name")
|
|
tradeName String? @map("trade_name")
|
|
taxId String? @map("tax_id")
|
|
status TenantStatus @default(TRIAL)
|
|
timezone String @default("America/Sao_Paulo")
|
|
locale String @default("pt-BR")
|
|
billingCurrency String @map("billing_currency") @default("BRL")
|
|
telephonyDomain String? @map("telephony_domain")
|
|
createdAt DateTime @default(now()) @map("created_at")
|
|
updatedAt DateTime @updatedAt @map("updated_at")
|
|
deletedAt DateTime? @map("deleted_at")
|
|
|
|
memberships TenantMembership[]
|
|
|
|
@@map("tenants")
|
|
}
|
|
|
|
enum UserStatus {
|
|
ACTIVE
|
|
DISABLED
|
|
|
|
@@map("user_status")
|
|
}
|
|
|
|
// Identidade global do usuário. NUNCA carrega tenant_id diretamente — o tenant
|
|
// é sempre resolvido via TenantMembership (agente.md secao 31).
|
|
model User {
|
|
id String @id @default(uuid()) @db.Uuid
|
|
email String @unique
|
|
passwordHash String @map("password_hash")
|
|
name String
|
|
status UserStatus @default(ACTIVE)
|
|
createdAt DateTime @default(now()) @map("created_at")
|
|
updatedAt DateTime @updatedAt @map("updated_at")
|
|
deletedAt DateTime? @map("deleted_at")
|
|
|
|
memberships TenantMembership[]
|
|
|
|
@@map("users")
|
|
}
|
|
|
|
// Tabela tenant-scoped protegida por Row Level Security (ver migration
|
|
// 'tenant_isolation' e docs/TENANT_ISOLATION.md).
|
|
model TenantMembership {
|
|
id String @id @default(uuid()) @db.Uuid
|
|
tenantId String @map("tenant_id") @db.Uuid
|
|
userId String @map("user_id") @db.Uuid
|
|
createdAt DateTime @default(now()) @map("created_at")
|
|
|
|
tenant Tenant @relation(fields: [tenantId], references: [id])
|
|
user User @relation(fields: [userId], references: [id])
|
|
|
|
@@unique([tenantId, userId])
|
|
@@index([tenantId])
|
|
@@map("tenant_memberships")
|
|
}
|