phase0-multi-tenant-rls-rbac

backend/python/app/models.py

@@ -32,7 +32,7 @@ class User(Base):
     phone = Column(String(20), default=None)
     password_hash = Column(String(255), nullable=False)
     avatar = Column(String(500), default=None)
-    role = Column(String(10), nullable=False, default="user")  # user / admin
+    role = Column(String(20), nullable=False, default="user")  # super_admin/admin/developer/user/guest
     status = Column(String(10), nullable=False, default="active")  # active / banned
     real_name_status = Column(String(20), nullable=False, default="unverified")
     real_name = Column(String(50), default=None)
@@ -40,6 +40,7 @@ class User(Base):
     membership_plan_id = Column(String(36), default=None)
     membership_level = Column(Integer, default=0)
     membership_expire_at = Column(DateTime, default=None)
+    tenant_id = Column(String(36), default=None)
     auto_renew = Column(Boolean, default=False)
     created_at = Column(DateTime, default=datetime.now)
     updated_at = Column(DateTime, default=datetime.now, onupdate=datetime.now)
@@ -76,6 +77,47 @@ class ApiKey(Base):
 # AI聊天与频道
 # ============================================================
 
+
+
+class UserGroup(Base):
+    __tablename__ = "user_groups"
+    id = Column(String(36), primary_key=True, default=gen_uuid)
+    name = Column(String(100), unique=True, nullable=False)
+    description = Column(String(500), default=None)
+    owner_id = Column(String(36), ForeignKey("users.id"), nullable=False)
+    tenant_id = Column(String(36), default=None)
+    created_at = Column(DateTime, default=datetime.now)
+    updated_at = Column(DateTime, default=datetime.now, onupdate=datetime.now)
+    owner = relationship("User", foreign_keys=[owner_id])
+
+class UserGroupMember(Base):
+    __tablename__ = "user_group_members"
+    id = Column(String(36), primary_key=True, default=gen_uuid)
+    group_id = Column(String(36), ForeignKey("user_groups.id"), nullable=False)
+    user_id = Column(String(36), ForeignKey("users.id"), nullable=False)
+    joined_at = Column(DateTime, default=datetime.now)
+    group = relationship("UserGroup")
+    user = relationship("User")
+
+class GroupModelQuota(Base):
+    __tablename__ = "group_model_quotas"
+    id = Column(String(36), primary_key=True, default=gen_uuid)
+    group_id = Column(String(36), ForeignKey("user_groups.id"), nullable=False)
+    model_id = Column(String(36), ForeignKey("models.id"), nullable=False)
+    daily_limit = Column(Integer, default=1000)
+    rpm_limit = Column(Integer, default=60)
+    group = relationship("UserGroup")
+    model = relationship("AIModel")
+
+class Tenant(Base):
+    __tablename__ = "tenants"
+    id = Column(String(36), primary_key=True, default=gen_uuid)
+    name = Column(String(100), nullable=False)
+    slug = Column(String(50), unique=True, nullable=False)
+    status = Column(String(20), default="active")
+    created_at = Column(DateTime, default=datetime.now)
+    updated_at = Column(DateTime, default=datetime.now, onupdate=datetime.now)
+
 class Conversation(Base):
     __tablename__ = "conversations"