nodedb 0.3.0

Local-first, real-time, edge-to-cloud hybrid database for multi-modal workloads
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

// SPDX-License-Identifier: BUSL-1.1

//! System identity used to execute trigger bodies.
//!
//! Triggers run with superuser privileges (SECURITY DEFINER model): trigger
//! bodies are database-defined code, not user-submitted queries. The
//! creator's identity is captured separately on `StoredTrigger.owner`.

use crate::control::security::identity::{AuthMethod, AuthenticatedIdentity, DatabaseSet, Role};
use crate::types::TenantId;

pub(super) fn trigger_identity(tenant_id: TenantId) -> AuthenticatedIdentity {
    AuthenticatedIdentity {
        user_id: 0,
        username: "_system_trigger".into(),
        tenant_id,
        auth_method: AuthMethod::Trust,
        roles: vec![Role::Superuser],
        is_superuser: true,
        default_database: None,
        accessible_databases: DatabaseSet::All,
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn trigger_identity_is_superuser() {
        let id = trigger_identity(TenantId::new(5));
        assert!(id.is_superuser);
        assert_eq!(id.tenant_id, TenantId::new(5));
    }
}