Data Service RBAC Design

CS_API_FUNCTION

ID (PK)API_ALIAS_NAME (UK)API_PATHAUTH_REQUIREDMODULEDESCRIPTIONCREATE_BYCREATE_TIMELAST_MODIFY_BYLAST_MODIFY_TIME

CS_ROLE_DATA_PERMISSION_MAPPING

ID (PK)ROLE_ID (FK) -> CS_ROLECLASSIFICATION_ID (FK) -> CS_DATA_CLASSIFICATIONPERMISSION      read/editCREATE_BYCREATE_TIMELAST_MODIFY_BYLAST_MODIFY_TIME

CS_USER

ID (PK)USER_NAME (UK)   CECIDDISPLAY_NAMEUSER_TYPEUSER_STATUSLAST_LOGIN_DATECREATE_BYCREATE_TIMELAST_MODIFY_BYLAST_MODIFY_TIME

CS_ROLE

ID (PK)ROLE_NAME (UK)DESCRIPTIONROLE_STATUS  enable/disablespan style=\

CS_ROLE_API_PERMISSION_MAPPING

ID (PK)ROLE_ID (FK) ->      CS_ROLEAPI_ID (FK).    ->      CS_API_FUNCTIONPERMISSION     read/editspan style=\

user infomation and hierachy

CS_USER_ROLE_MAPPING

ID (PK)USER_ID (FK) ->      CS_USER ROLE_ID (FK) ->      CS_ROLE  span style=\

CS_PROTECTED_DATA

ID (PK)ALIAS_NAME (UK)FIELD_NAME CLASSIFICATION_ID (FK) DESCRIPTIONCREATE_BYCREATE_TIMELAST_MODIFY_BYLAST_MODIFY_TIME

CS_EMPLOYEE

ID (PK)CEC_IDspan style=\

API function resource defination

protected data resource defination

CS_DATA_CLASSIFICATION

ID (PK)CLASSIFICATION_NAME DESCRIPTIONCREATE_BYCREATE_TIMELAST_MODIFY_BYLAST_MODIFY_TIME