Entidades

@Getter
@EntityListeners(AuditingEntityListener.class)
public abstract class AuditEntity {
    @CreatedDate
    private LocalDateTime createdAt;    // Fecha de creación
 
    @LastModifiedDate
    private LocalDateTime updatedAt;    // Fecha de última modificación
 
    @CreatedBy
    private User createdBy;            // Usuario que creó el registro
}

@Entity
@Table(name = "users")
public class User extends AuditEntity {
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    private Long id;                    // ID interno
 
    @Column(unique = true)
    private UUID uuid;                  // ID público
 
    private String firstName;           // Nombre
    private String lastName;            // Apellido
    
    @Column(unique = true)
    private String email;               // Email único
    
    private String password;            // Contraseña hasheada
 
    @ManyToMany
    @JoinTable(name = "user_roles")
    private Collection<Role> roles;     // Roles asignados
}

@Entity
@Table(name = "roles")
public class Role {
    @Id
    @GeneratedValue
    private Long id;
 
    @Column(unique = true)
    private UUID uuid;
 
    @Enumerated(EnumType.STRING)
    private RoleName name;              // USER, ADMIN
 
    @ManyToMany(mappedBy = "roles")
    private Collection<User> users;     // Usuarios con este rol
 
    @ManyToMany
    @JoinTable(name = "role_privileges")
    private Collection<Privilege> privileges; // Privilegios del rol
}
 
public enum RoleName {
    USER,   // Usuario regular
    ADMIN   // Administrador
}

@Entity
@Table(name = "privileges")
public class Privilege {
    @Id
    @GeneratedValue
    private Long id;
 
    @Column(unique = true)
    private UUID uuid;
 
    @Enumerated(EnumType.STRING)
    private PrivilegeName name;         // READ, WRITE, DELETE
 
    @ManyToMany(mappedBy = "privileges")
    private Collection<Role> roles;     // Roles con este privilegio
}
 
enum PrivilegeName {
    READ,    // Permiso de lectura
    WRITE,   // Permiso de escritura
    DELETE   // Permiso de eliminación
}