From: Thierry Parmentelat <thierry.parmentelat@sophia.inria.fr>
Date: Fri, 6 Jan 2012 10:15:48 +0000 (+0100)
Subject: migrations for storing ssh keys - checkpoint
X-Git-Tag: sfa-2.1-1~16^2~1
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=5367744a11b0af513a08aab367142e08b984f865;p=sfa.git

migrations for storing ssh keys - checkpoint
---

diff --git a/sfa/storage/migrations/002-down-keys-roles.sql b/sfa/storage/migrations/002-down-keys-roles.sql
new file mode 100644
index 00000000..a3a27333
--- /dev/null
+++ b/sfa/storage/migrations/002-down-keys-roles.sql
@@ -0,0 +1,8 @@
+DROP VIEW view_records;
+DROP VIEW record_keys;
+DROP TABLE record_key;
+DROP TABLE keys;
+DROP TABLE key_types;
+
+------------------------------------------------------------
+UPDATE sfa_db_version SET subversion = 1;
diff --git a/sfa/storage/migrations/002-up-keys-roles.sql b/sfa/storage/migrations/002-up-keys-roles.sql
new file mode 100644
index 00000000..4fe9886e
--- /dev/null
+++ b/sfa/storage/migrations/002-up-keys-roles.sql
@@ -0,0 +1,58 @@
+----
+-- the purpose of this migration is to enrich the proper SFA table 
+-- so that the registry can perform reasonably in standalone mode,
+-- i.e. without any underlying myplc
+-- this is desirable in the perspective of providing a generic framework
+-- for non myplc-based testbeds
+-- prior to this change, the registry needed to inspect the myplc db in order
+-- to retrieve keys and roles, so as to be able to make the right decisions in
+-- terms of delivering credentials
+----
+
+--------------------------------------------------------------------------------
+-- Authentication Keys
+--------------------------------------------------------------------------------
+-- Valid key types
+CREATE TABLE key_types (
+    key_type text PRIMARY KEY
+) WITH OIDS;
+INSERT INTO key_types (key_type) VALUES ('ssh');
+
+-- Authentication keys
+CREATE TABLE keys (
+    key_id serial PRIMARY KEY,
+    key_type text REFERENCES key_types NOT NULL,
+    key text NOT NULL
+) WITH OIDS;
+
+-- attaching keys to records
+CREATE TABLE record_key (
+    record_id integer REFERENCES records NOT NULL,
+    key_id integer REFERENCES keys PRIMARY KEY
+) WITH OIDS;
+CREATE INDEX record_key_record_id_idx ON record_key (record_id);
+
+-- get all keys attached to one record
+CREATE OR REPLACE VIEW record_keys AS
+SELECT record_id,
+array_accum(key_id) AS key_ids
+FROM record_key
+GROUP BY record_id;
+
+-- a synthesis view for records
+CREATE OR REPLACE VIEW view_records AS
+SELECT
+records.record_id,
+records.hrn,
+records.authority,
+records.peer_authority,
+records.gid,
+records.type,
+records.pointer,
+records.date_created,
+records.last_updated,
+COALESCE((SELECT key_ids FROM record_keys WHERE record_keys.record_id = records.record_id), '{}') AS key_ids
+FROM records;
+
+------------------------------------------------------------
+UPDATE sfa_db_version SET subversion = 2;