EGC-3: Create roles for GRAD reporting

bcgov · Oct 1, 2024 · e227c80 · e227c80
1 parent 65dc875
commit e227c80
Show file tree

Hide file tree

Showing 2 changed files with 53 additions and 1 deletion.
diff --git a/api/src/main/resources/db/migration/V1.0.54__EDX_API.sql b/api/src/main/resources/db/migration/V1.0.54__EDX_API.sql
@@ -0,0 +1,52 @@
+INSERT INTO EDX_PERMISSION (EDX_PERMISSION_CODE, LABEL, DESCRIPTION, CREATE_USER, UPDATE_USER)
+VALUES ('SCH_GRAD_RO', 'School GRAD Read-Only', 'GRAD read-only permission for School.', 'IDIR/AVSODHI', 'IDIR/AVSODHI');
+
+INSERT INTO EDX_PERMISSION (EDX_PERMISSION_CODE, LABEL, DESCRIPTION, CREATE_USER, UPDATE_USER)
+VALUES ('VIEW_SCH_GRAD_RPT', 'View School GRAD Reports', 'GRAD view reports permission for School.', 'IDIR/AVSODHI', 'IDIR/AVSODHI');
+
+INSERT INTO EDX_PERMISSION (EDX_PERMISSION_CODE, LABEL, DESCRIPTION, CREATE_USER, UPDATE_USER)
+VALUES ('DIS_GRAD_RO', 'District GRAD Read-Only', 'GRAD read-only permission for District.', 'IDIR/AVSODHI', 'IDIR/AVSODHI');
+
+INSERT INTO EDX_PERMISSION (EDX_PERMISSION_CODE, LABEL, DESCRIPTION, CREATE_USER, UPDATE_USER)
+VALUES ('VIEW_DIS_GRAD_RPT', 'View District GRAD Reports', 'GRAD view reports permission for District.', 'IDIR/AVSODHI', 'IDIR/AVSODHI');
+
+INSERT INTO EDX_ROLE (EDX_ROLE_CODE, LABEL, IS_DISTRICT_ROLE, DESCRIPTION, CREATE_USER, UPDATE_USER)
+VALUES ('SCH_GRAD_RO', 'School GRAD Read-Only', FALSE, 'Read-only GRAD role for School.', 'IDIR/AVSODHI', 'IDIR/AVSODHI');
+
+INSERT INTO EDX_ROLE (EDX_ROLE_CODE, LABEL, IS_DISTRICT_ROLE, DESCRIPTION, CREATE_USER, UPDATE_USER)
+VALUES ('DIS_GRAD_RO', 'District GRAD Read-Only', TRUE, 'Read-only GRAD role for District.', 'IDIR/AVSODHI', 'IDIR/AVSODHI');
+
+INSERT INTO EDX_ROLE_PERMISSION (EDX_ROLE_PERMISSION_ID, EDX_ROLE_CODE, EDX_PERMISSION_CODE, CREATE_USER, CREATE_DATE,
+                                 UPDATE_USER, UPDATE_DATE)
+VALUES (gen_random_uuid(), 'SCH_GRAD_RO', 'SCH_GRAD_RO', 'IDIR/AVSODHI',
+        to_date('2024-10-01', 'YYYY-MM-DD'), 'IDIR/AVSODHI', to_date('2024-10-01', 'YYYY-MM-DD'));
+
+INSERT INTO EDX_ROLE_PERMISSION (EDX_ROLE_PERMISSION_ID, EDX_ROLE_CODE, EDX_PERMISSION_CODE, CREATE_USER, CREATE_DATE,
+                                 UPDATE_USER, UPDATE_DATE)
+VALUES (gen_random_uuid(), 'SCH_GRAD_RO', 'EDX_SCHOOL_VIEW', 'IDIR/AVSODHI',
+        to_date('2024-10-01', 'YYYY-MM-DD'), 'IDIR/AVSODHI', to_date('2024-10-01', 'YYYY-MM-DD'));
+
+INSERT INTO EDX_ROLE_PERMISSION (EDX_ROLE_PERMISSION_ID, EDX_ROLE_CODE, EDX_PERMISSION_CODE, CREATE_USER, CREATE_DATE,
+                                 UPDATE_USER, UPDATE_DATE)
+VALUES (gen_random_uuid(), 'SCH_GRAD_RO', 'VIEW_SCH_GRAD_RPT', 'IDIR/AVSODHI',
+        to_date('2024-10-01', 'YYYY-MM-DD'), 'IDIR/AVSODHI', to_date('2024-10-01', 'YYYY-MM-DD'));
+
+INSERT INTO EDX_ROLE_PERMISSION (EDX_ROLE_PERMISSION_ID, EDX_ROLE_CODE, EDX_PERMISSION_CODE, CREATE_USER, CREATE_DATE,
+                                 UPDATE_USER, UPDATE_DATE)
+VALUES (gen_random_uuid(), 'DIS_GRAD_RO', 'DIS_GRAD_RO', 'IDIR/AVSODHI',
+        to_date('2024-10-01', 'YYYY-MM-DD'), 'IDIR/AVSODHI', to_date('2024-10-01', 'YYYY-MM-DD'));
+
+INSERT INTO EDX_ROLE_PERMISSION (EDX_ROLE_PERMISSION_ID, EDX_ROLE_CODE, EDX_PERMISSION_CODE, CREATE_USER, CREATE_DATE,
+                                 UPDATE_USER, UPDATE_DATE)
+VALUES (gen_random_uuid(), 'DIS_GRAD_RO', 'EDX_SCHOOL_VIEW', 'IDIR/AVSODHI',
+        to_date('2024-10-01', 'YYYY-MM-DD'), 'IDIR/AVSODHI', to_date('2024-10-01', 'YYYY-MM-DD'));
+
+INSERT INTO EDX_ROLE_PERMISSION (EDX_ROLE_PERMISSION_ID, EDX_ROLE_CODE, EDX_PERMISSION_CODE, CREATE_USER, CREATE_DATE,
+                                 UPDATE_USER, UPDATE_DATE)
+VALUES (gen_random_uuid(), 'DIS_GRAD_RO', 'EDX_DISTRICT_VIEW', 'IDIR/AVSODHI',
+        to_date('2024-10-01', 'YYYY-MM-DD'), 'IDIR/AVSODHI', to_date('2024-10-01', 'YYYY-MM-DD'));
+
+INSERT INTO EDX_ROLE_PERMISSION (EDX_ROLE_PERMISSION_ID, EDX_ROLE_CODE, EDX_PERMISSION_CODE, CREATE_USER, CREATE_DATE,
+                                 UPDATE_USER, UPDATE_DATE)
+VALUES (gen_random_uuid(), 'DIS_GRAD_RO', 'VIEW_DIS_GRAD_RPT', 'IDIR/AVSODHI',
+        to_date('2024-10-01', 'YYYY-MM-DD'), 'IDIR/AVSODHI', to_date('2024-10-01', 'YYYY-MM-DD'));
diff --git a/tools/config/update-configmap.sh b/tools/config/update-configmap.sh
@@ -412,7 +412,7 @@ EMAIL_TEMPLATE_EDX_SCHOOL_PRIMARY_CODE_NOTIFICATION_LITERAL="<!DOCTYPE html><htm
 
 EMAIL_TEMPLATE_EDX_DISTRICT_PRIMARY_CODE_NOTIFICATION_LITERAL="<!DOCTYPE html><html xmlns:th=\"http://www.thymeleaf.org\"><head><meta charset=\"ISO-8859-1\"><title>Primary Activation Code</title></head><body><p>Hi <span th:text=\"\${\$}{recipient}\"></span>,</p><p>Here is the EDX Primary Activation Code for <span th:text=\"\${\$}{minCode}\"></span> - <span th:text=\"\${\$}{instituteName}\"></span>: <span th:text=\"\${\$}{primaryCode}\"></span></p><p>Once you have activated your EDX District Account Manager account, you will be able to grant access to others. You will find your district’s Primary Activation Code from your dashboard by clicking Menu, Administration, District User Management.</p><br><b>The EDX Team</b><br>Ministry of Education and Child Care<br>educationdataexchange@gov.bc.ca</body></html>"
 
-ROLES_ALLOW_LIST="EDX_DISTRICT_ADMIN,EDX_SCHOOL_ADMIN,STUDENT_DATA_COLLECTION,SECURE_EXCHANGE_SCHOOL,SECURE_EXCHANGE_DISTRICT,EDX_EDIT_SCHOOL,EDX_EDIT_DISTRICT,SCHOOL_SDC,DISTRICT_SDC,SUPERINT,SECR_TRES,DIS_SDC_RO,SCH_SDC_RO"
+ROLES_ALLOW_LIST="EDX_DISTRICT_ADMIN,EDX_SCHOOL_ADMIN,STUDENT_DATA_COLLECTION,SECURE_EXCHANGE_SCHOOL,SECURE_EXCHANGE_DISTRICT,EDX_EDIT_SCHOOL,EDX_EDIT_DISTRICT,SCHOOL_SDC,DISTRICT_SDC,SUPERINT,SECR_TRES,DIS_SDC_RO,SCH_SDC_RO,SCH_GRAD_RO,DIS_GRAD_RO"
 
 if [ "$envValue" = "prod" ]
 then