Files
phylum/server/sql/queries/permissions.sql
2024-08-06 23:09:10 +05:30

103 lines
3.5 KiB
SQL

-- name: ReadDir :many
WITH RECURSIVE nodes(id, owner, parent, name, dir, created, modified, size, etag, depth, path, permission) AS (
SELECT r.id, r.owner, r.parent, r.name, r.dir, r.created, r.modified, r.size, r.etag, 0, ''::text, @permission::int
FROM resources r
WHERE r.id = @id::uuid
UNION ALL
SELECT r.id, r.owner, r.parent, r.name, r.dir, r.created, r.modified, r.size, r.etag, n.depth + 1, concat(n.path, '/', r.name),
CASE
WHEN r.owner = @user_id::int THEN 127
WHEN p.permission IS NULL THEN n.permission
ELSE p.permission
END
FROM resources r JOIN nodes n on r.parent = n.id
LEFT JOIN permissions p
ON r.id = p.resource_id
AND p.user_id = @user_id::int
WHERE deleted IS NULL
AND r.id != @id::uuid
AND CASE WHEN @recursive::boolean THEN true ELSE depth < 1 END
)
SELECT * from nodes
WHERE CASE WHEN @include_root::boolean THEN true ELSE depth > 0 END;
-- name: ResourceByPath :one
WITH RECURSIVE nodes(id, owner, parent, name, dir, created, modified, size, etag, depth, path, search, permission) AS (
SELECT r.id, r.owner, r.parent, r.name, r.dir, r.created, r.modified, r.size, r.etag, 0, ''::text, @search::text[], @permission::int
FROM resources r
WHERE r.id = @root::uuid
UNION ALL
SELECT r.id, r.owner, r.parent, r.name, r.dir, r.created, r.modified, r.size, r.etag, n.depth + 1, concat(n.path, '/', r.name), n.search,
CASE
WHEN r.owner = @user_id::int THEN 127
WHEN p.permission IS NULL THEN n.permission
ELSE p.permission
END
FROM resources r
JOIN nodes n ON r.parent = n.id
LEFT JOIN permissions p
ON r.id = p.resource_id
AND p.user_id = @user_id::int
WHERE deleted IS NULL
AND r.name = n.search[n.depth + 1]
)
SELECT * FROM nodes WHERE cardinality(search) = depth;
-- name: ResourceByID :one
WITH RECURSIVE nodes(resid, id, parent, found, permission) AS (
SELECT @resource_id::uuid, r.id, r.parent,
CASE
WHEN r.id = @root::uuid THEN true
ELSE false
END,
@permission::int
FROM resources r
LEFT JOIN permissions p
on r.id = p.resource_id
AND p.user_id = @user_id::int
WHERE r.id = @resource_id::uuid
UNION ALL
SELECT n.resid, r.id, r.parent,
CASE
WHEN r.id = @root::uuid
THEN true
ELSE n.found
END,
CASE
WHEN n.permission IS NOT NULL THEN n.permission
WHEN r.owner = @user_id::int THEN 127
WHEN p.permission IS NOT NULL THEN p.permission
ELSE 0
END
FROM resources r
JOIN nodes n
ON r.id = n.parent
LEFT JOIN permissions p
ON r.id = p.resource_id AND p.user_id = @user_id::int
WHERE n.id != '00000000-0000-0000-0000-000000000000'::uuid
)
SELECT resid AS id, found, r.owner, permission, r.id, r.parent, name, dir, created, modified, deleted, size, etag FROM nodes n
JOIN resources r
ON r.id = n.resid
WHERE n.id = @root::uuid;
-- name: RootResource :one
SELECT r.name, r.owner, r.modified,
CASE
WHEN r.owner = @user_id::int THEN 127
WHEN p.permission IS NOT NULL THEN p.permission
ELSE 0
END AS permission
FROM resources r
LEFT JOIN permissions p
ON p.resource_id = r.id
AND p.user_id = @user_id::int
WHERE r.id = '00000000-0000-0000-0000-000000000000'::uuid;
-- name: UpdatePermissionsForResource :exec
INSERT INTO permissions(resource_id, user_id, permission)
VALUES(@resource_id::uuid, @user_id::int, @permission::int)
ON CONFLICT(resource_id, user_id) DO UPDATE SET permission = @permission::int;