import django.db.models.deletion
from django.conf import settings
from django.db import migrations, models


class Migration(migrations.Migration):
    dependencies = [
        ("companies", "0002_initial"),
        ("core", "0004_auditlog_audit_logs_model_n_656046_idx"),
        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
    ]

    operations = [
        migrations.AddField(
            model_name="user",
            name="organization_role",
            field=models.CharField(
                choices=[("staff", "Staff"), ("director", "Director")],
                db_index=True, default="staff", max_length=20,
            ),
        ),
        migrations.CreateModel(
            name="DepartmentMembership",
            fields=[
                ("id", models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name="ID")),
                ("role", models.CharField(choices=[("staff", "Staff"), ("manager", "Department Manager")], default="staff", max_length=20)),
                ("assigned_at", models.DateTimeField(auto_now_add=True)),
                ("assigned_by", models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL)),
                ("department", models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name="access_memberships", to="companies.department")),
                ("user", models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name="department_memberships", to=settings.AUTH_USER_MODEL)),
            ],
            options={"db_table": "rbac_department_memberships", "ordering": ["department__name", "user__email"]},
        ),
        migrations.AddConstraint(
            model_name="departmentmembership",
            constraint=models.UniqueConstraint(fields=("user", "department"), name="unique_user_department_membership"),
        ),
        migrations.CreateModel(
            name="AccessAuditLog",
            fields=[
                ("id", models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name="ID")),
                ("event_type", models.CharField(db_index=True, max_length=60)),
                ("object_type", models.CharField(max_length=60)),
                ("object_id", models.CharField(blank=True, max_length=80)),
                ("previous_value", models.JSONField(blank=True, default=dict)),
                ("new_value", models.JSONField(blank=True, default=dict)),
                ("reason", models.TextField(blank=True)),
                ("created_at", models.DateTimeField(auto_now_add=True, db_index=True)),
                ("actor", models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="+", to=settings.AUTH_USER_MODEL)),
                ("target_user", models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, related_name="access_audit_events", to=settings.AUTH_USER_MODEL)),
            ],
            options={"db_table": "rbac_access_audit_logs", "ordering": ["-created_at"]},
        ),
    ]