Files
certvia/prisma/migrations/20260707132008_policies/migration.sql
T
msolarczekandClaude Opus 4.8 89b0e3a5a5 Richtlinien & Verfahren (Phase 1): Import, Rendering-Engine, Bibliothek, Coverage
Fundament des VDA-ISA-2027-Richtlinienmoduls (Spec §1–9):

- Datenmodell: PolicyDocument, PolicyRequirement, PolicyVariable (Variablen +
  Feature-Flags), PolicyBaselineParam, PolicyEvidence — inkl. RLS + Tenant-Guard
- Seed-Importer (import-policies.ts): liest die echten .md-Dateien (15 Richtlinien
  L00/R01–R14 + 11 Verfahren), mapping.json (120 Anforderungen/46 Controls),
  variables.schema.json (53 Variablen/Flags), Technische-Sicherheits-Baseline
  (31 BL-Parameter) und Nachweisregister; idempotent pro Mandant
- 6 im Vorlagenpaket beschädigte Variablen-Tokens (VA-08/09/10/12/13) repariert
  (dokumentiert im README des Übergabepakets)
- Rendering-Engine (policy-render.ts, Handlebars + marked): verschachtelte
  {{#if FLAG}}, {{VARIABLE}}, {{LINK:…}}-Deeplinks, Hidden-Anker + BL-Referenzen
  im Lesemodus entfernt (Wert bleibt), zentral verwaltete Abschnitte unterdrückt,
  wiederholtes „Umsetzung bei <Org>" reduziert (§7a); lenienter Fallback +
  Residue-Check über alle Flag-Kombinationen (analog _verify.py)
- UI: Bibliothek mit Typ-Chips/KPIs, Lesemodus-Popup (einklappbare Info-Tabelle,
  Control-Chips, Richtlinie↔Verfahren-Verlinkung), Coverage-Matrix
  (Control → Richtlinie → MUSS/SOLL → Verfahren → Anforderungs-IDs)
- Nav-Punkt „Richtlinien" aktiviert; de/en-Übersetzungen

Verifiziert: Import 28 Dokumente/120 Anforderungen; Rendering rückstandsfrei
über alle Flag-Kombinationen; Bibliothek, Lesemodus (R08 nested flags), Coverage
im Browser.

Später (Phase 2+): Bearbeiten/Freigabe-Workflow mit Versionierung, verwaltete
Tabellen (Krypto-/Risiko-/Klassifizierungsregister), Anwender-Handbuch,
DOCX/PDF-Export, Word-Upload, KI-Wizard, zentrale Baseline-/Variablen-Einstellseite.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-07 13:35:59 +02:00

137 lines
4.2 KiB
SQL

-- CreateEnum
CREATE TYPE "PolicyDocType" AS ENUM ('LEITLINIE', 'RICHTLINIE', 'VERFAHREN', 'REGISTER', 'HANDBUCH', 'EIGENES');
-- CreateEnum
CREATE TYPE "PolicyStatus" AS ENUM ('ENTWURF', 'IN_FREIGABE', 'FREIGEGEBEN', 'ARCHIVIERT');
-- CreateTable
CREATE TABLE "policy_documents" (
"id" TEXT NOT NULL,
"tenant_id" TEXT NOT NULL,
"code" TEXT NOT NULL,
"type" "PolicyDocType" NOT NULL,
"title" TEXT NOT NULL,
"version" TEXT NOT NULL DEFAULT '1.0',
"status" "PolicyStatus" NOT NULL DEFAULT 'FREIGEGEBEN',
"owner" TEXT,
"policy_code" TEXT,
"fulfills" TEXT[] DEFAULT ARRAY[]::TEXT[],
"raw_markdown" TEXT NOT NULL,
"order_idx" INTEGER NOT NULL DEFAULT 0,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
"updated_at" TIMESTAMP(3) NOT NULL,
CONSTRAINT "policy_documents_pkey" PRIMARY KEY ("id")
);
-- CreateTable
CREATE TABLE "policy_requirements" (
"id" TEXT NOT NULL,
"tenant_id" TEXT NOT NULL,
"req_id" TEXT NOT NULL,
"policy_code" TEXT NOT NULL,
"control" TEXT NOT NULL,
"obligation" TEXT NOT NULL,
"condition" TEXT,
"requirement" TEXT NOT NULL,
"implementation" TEXT NOT NULL,
"va_codes" TEXT[] DEFAULT ARRAY[]::TEXT[],
"nachweis_link" TEXT,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
CONSTRAINT "policy_requirements_pkey" PRIMARY KEY ("id")
);
-- CreateTable
CREATE TABLE "policy_variables" (
"id" TEXT NOT NULL,
"tenant_id" TEXT NOT NULL,
"key" TEXT NOT NULL,
"title" TEXT NOT NULL,
"kind" TEXT NOT NULL,
"group_name" TEXT,
"value" TEXT NOT NULL,
"required" BOOLEAN NOT NULL DEFAULT false,
"order_idx" INTEGER NOT NULL DEFAULT 0,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
"updated_at" TIMESTAMP(3) NOT NULL,
CONSTRAINT "policy_variables_pkey" PRIMARY KEY ("id")
);
-- CreateTable
CREATE TABLE "policy_baseline_params" (
"id" TEXT NOT NULL,
"tenant_id" TEXT NOT NULL,
"bl_id" TEXT NOT NULL,
"section" TEXT NOT NULL,
"name" TEXT NOT NULL,
"vorgabe" TEXT NOT NULL,
"order_idx" INTEGER NOT NULL DEFAULT 0,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
CONSTRAINT "policy_baseline_params_pkey" PRIMARY KEY ("id")
);
-- CreateTable
CREATE TABLE "policy_evidence" (
"id" TEXT NOT NULL,
"tenant_id" TEXT NOT NULL,
"nr" INTEGER NOT NULL,
"policy_code" TEXT NOT NULL,
"nachweis" TEXT NOT NULL,
"quelle" TEXT NOT NULL,
"verantwortlich" TEXT NOT NULL,
"turnus" TEXT NOT NULL,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
CONSTRAINT "policy_evidence_pkey" PRIMARY KEY ("id")
);
-- CreateIndex
CREATE INDEX "policy_documents_tenant_id_idx" ON "policy_documents"("tenant_id");
-- CreateIndex
CREATE UNIQUE INDEX "policy_documents_tenant_id_code_key" ON "policy_documents"("tenant_id", "code");
-- CreateIndex
CREATE INDEX "policy_requirements_tenant_id_idx" ON "policy_requirements"("tenant_id");
-- CreateIndex
CREATE INDEX "policy_requirements_tenant_id_control_idx" ON "policy_requirements"("tenant_id", "control");
-- CreateIndex
CREATE UNIQUE INDEX "policy_requirements_tenant_id_req_id_key" ON "policy_requirements"("tenant_id", "req_id");
-- CreateIndex
CREATE INDEX "policy_variables_tenant_id_idx" ON "policy_variables"("tenant_id");
-- CreateIndex
CREATE UNIQUE INDEX "policy_variables_tenant_id_key_key" ON "policy_variables"("tenant_id", "key");
-- CreateIndex
CREATE INDEX "policy_baseline_params_tenant_id_idx" ON "policy_baseline_params"("tenant_id");
-- CreateIndex
CREATE UNIQUE INDEX "policy_baseline_params_tenant_id_bl_id_key" ON "policy_baseline_params"("tenant_id", "bl_id");
-- CreateIndex
CREATE INDEX "policy_evidence_tenant_id_idx" ON "policy_evidence"("tenant_id");
-- RLS-Policies für die Richtlinien-Tabellen
DO $$
DECLARE t text;
BEGIN
FOREACH t IN ARRAY ARRAY[
'policy_documents','policy_requirements','policy_variables',
'policy_baseline_params','policy_evidence'
] LOOP
EXECUTE format('ALTER TABLE %I ENABLE ROW LEVEL SECURITY', t);
EXECUTE format(
'CREATE POLICY tenant_isolation ON %I USING (tenant_id = current_setting(''app.tenant_id'', true))',
t
);
END LOOP;
END $$;