CORE/views/roles_auth_schemes.sql

91 lines
3.6 KiB
SQL

CREATE OR REPLACE VIEW roles_auth_schemes AS
SELECT
a.application_id AS app_id,
MAX(r.role_id) AS role_id,
MAX(r.role_group) AS role_group,
a.authorization_scheme_name AS auth_scheme,
--
MAX(LTRIM(s.object_name || '.' || s.procedure_name, '.')) AS auth_procedure,
--
CASE
WHEN MAX(s.procedure_name) IS NULL AND a.authorization_scheme_name NOT IN ('NOBODY')
THEN 'fa fa-warning'
END AS auth_procedure_icon,
MAX(a.attribute_01) AS auth_source_code,
--
NULLIF(COUNT(DISTINCT p.page_id), 0) AS count_pages,
NULLIF(COUNT(DISTINCT g.region_id), 0) AS count_regions,
NULLIF(COUNT(DISTINCT u.user_id), 0) AS count_users,
--
MAX(CASE WHEN a.caching = 'Once per session' THEN 'Y' END) AS cache_session,
MAX(CASE WHEN a.caching = 'Once per page view' THEN 'Y' END) AS cache_page_view,
MAX(CASE WHEN a.caching = 'BY_COMPONENT' THEN 'Y' END) AS cache_component,
MAX(CASE WHEN a.caching = 'NOCACHE' THEN 'Y' END) AS cache_no,
--
MAX(a.error_message) AS error_message,
MAX(r.order#) AS order#
FROM apex_application_authorization a
LEFT JOIN apex_application_pages p
ON p.application_id = a.application_id
AND p.authorization_scheme = a.authorization_scheme_name
LEFT JOIN apex_application_page_regions g
ON g.application_id = a.application_id
AND g.authorization_scheme = a.authorization_scheme_name
AND g.parent_region_id IS NULL
LEFT JOIN roles r
ON r.role_id = a.authorization_scheme_name
LEFT JOIN user_roles u
ON u.app_id = a.application_id
AND u.role_id = r.role_id
LEFT JOIN user_procedures s
ON s.procedure_name = a.authorization_scheme_name
AND UPPER(a.attribute_01) LIKE '%' || s.object_name || '.' || s.procedure_name || '%'
WHERE a.application_id = app.get_app_id()
GROUP BY a.application_id, a.authorization_scheme_name
UNION ALL
--
SELECT
r.app_id,
r.role_id,
r.role_group,
--
app_actions.get_html_a(
app.get_page_url(920,
in_names => 'P920_CREATE_SCHEME,P920_AUTH_SCHEME',
in_values => 'Y,' || r.role_id
),
app.get_icon('fa-plus-square', 'Create missing Authorization Scheme')
) AS auth_scheme,
--
NULL AS auth_procedure,
'fa fa-warning' AS auth_procedure_icon,
NULL AS auth_source_code,
NULL AS count_pages,
NULL AS count_regions,
u.count_users AS count_users,
NULL AS cache_session,
NULL AS cache_page_view,
NULL AS cache_component,
NULL AS cache_no,
NULL AS error_message,
r.order#
FROM roles r
LEFT JOIN apex_application_authorization a
ON a.application_id = r.app_id
AND a.authorization_scheme_name = r.role_id
LEFT JOIN (
SELECT
u.role_id,
COUNT(*) AS count_users
FROM user_roles u
WHERE u.app_id = app.get_app_id()
GROUP BY u.role_id
) u
ON u.role_id = r.role_id
WHERE r.app_id = app.get_app_id()
AND a.authorization_scheme_name IS NULL;
--
COMMENT ON TABLE roles_auth_schemes IS '[CORE - DASHBOARD] Auth schemes tight to Roles';