kjh2064
dc888e7cd0
fix(0042_iam_tables.sql): Fix PostgreSQL partial unique constraint syntax
...
deploy / deploy (push) Successful in 1m54s
deploy / notify (push) Successful in 0s
Issue: Table constraint with WHERE clause is invalid PostgreSQL syntax
Error: 42601: syntax error at or near "WHERE" at position 1525
Solution: Move partial uniqueness to separate CREATE UNIQUE INDEX statement
- Removed invalid WHERE clause from table UNIQUE() constraint
- Created proper partial unique index with WHERE condition
- PostgreSQL syntax now correct
Syntax fix:
❌ UNIQUE(col1, col2) WHERE condition (invalid in table def)
✅ CREATE UNIQUE INDEX idx ON table(col1, col2) WHERE condition
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com >
2026-08-17 22:48:50 +09:00
kjh2064
a7f4ec8759
feat(wbs): AEG-VS-01-02 Identity & Access Control data contract
...
AEG-VS-01-02: Data Schema & Contract Definition
Implementation:
1. db/migrations/0042_iam_tables.sql
- identity table: PIT versioning (published_at, revision_version)
- role table: Hierarchy levels (GUEST/USER/OPERATOR/ADMIN/SUPER_ADMIN)
- role_assignment table: Maker-Checker workflow (PENDING_APPROVAL → ACTIVE)
- permission table: Granular permissions (RESOURCE:ACTION)
- role_permission table: M:N role-to-permission mapping
- mfa_device table: TOTP/WebAuthn/SMS/EMAIL support
2. contracts/data/identity-data-contract.v1.json
- Full JSON Schema for 5 tables
- PIT (Point-in-Time) versioning strategy
- Maker-Checker workflow constraints
- Unique constraints (username, email, role_name, resource+action)
- Referential integrity (cascade on delete)
- Lineage: upstream (OIDC), downstream (Auth middleware, Authorization policy)
- Quality rules: no circular hierarchies, MFA verification, approval counts
Principles Applied:
- 정규화: 5NF (identity/role/permission separation)
- 역정규화: role_assignment.approved_by_identity_ids (array for audit)
- 정공법: Maker-Checker enforced at schema level (approval_count constraint)
- 안정성: Immutable append-only (published_at, revision_version)
- 데이터 정합성: referential integrity, unique constraints, quality rules
Next: AEG-VS-01-03 (Domain Policy Implementation)
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com >
2026-08-17 17:26:55 +09:00
kjh2064