1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
//! SQL constants for cluster-catalog queries.
//!
//! Both queries use `$1::text[]` as their parameter, but the semantics differ
//! from per-DB queries: here the array is a bootstrap-roles filter list (role
//! names to exclude), not a managed-schemas list. Both are dispatched through
//! the same [`CatalogQuery::takes_text_array_param`] mechanism.
//!
//! The [`crate::catalog::cluster::read_cluster_catalog`] caller is responsible
//! for passing the bootstrap-roles slice; per-DB callers pass the
//! managed-schemas slice; the trait does not police which is which.
//!
//! [`CatalogQuery::takes_text_array_param`]: crate::catalog::CatalogQuery::takes_text_array_param
/// Query `pg_authid` (joined to `pg_shdescription` for comments) and return
/// one row per managed role.
///
/// Predefined `pg_*` roles and any role named in `$1::text[]` are excluded.
/// `rolconnlimit` is cast to `bigint` so the adapter decodes it as
/// [`crate::catalog::rows::Value::Integer`]; `-1` means unlimited.
/// `rolvaliduntil` is formatted as an RFC 3339 UTC string (or `NULL` when not
/// set).
pub const CLUSTER_ROLES_QUERY: &str = r#"
SELECT r.rolname,
r.rolsuper,
r.rolcreatedb,
r.rolcreaterole,
r.rolinherit,
r.rolcanlogin,
r.rolreplication,
r.rolbypassrls,
r.rolconnlimit::bigint AS rolconnlimit,
to_char(r.rolvaliduntil AT TIME ZONE 'UTC',
'YYYY-MM-DD"T"HH24:MI:SS"Z"') AS valid_until,
d.description AS comment
FROM pg_authid r
LEFT JOIN pg_shdescription d
ON d.objoid = r.oid
AND d.classoid = 'pg_authid'::regclass
WHERE r.rolname NOT LIKE 'pg\_%' ESCAPE '\'
AND r.rolname <> ALL($1::text[])
ORDER BY r.rolname
"#;
/// Query `pg_auth_members` joined twice to `pg_authid` to resolve oids to names.
///
/// Returns one row per (member, parent) edge where both sides are non-predefined
/// and non-bootstrap. The same `$1::text[]` bootstrap filter applies to both
/// member and parent sides of the edge.
pub const CLUSTER_MEMBERS_QUERY: &str = r"
SELECT memb.rolname AS member,
parent.rolname AS member_of
FROM pg_auth_members am
JOIN pg_authid memb ON memb.oid = am.member
JOIN pg_authid parent ON parent.oid = am.roleid
WHERE memb.rolname NOT LIKE 'pg\_%' ESCAPE '\'
AND parent.rolname NOT LIKE 'pg\_%' ESCAPE '\'
AND memb.rolname <> ALL($1::text[])
AND parent.rolname <> ALL($1::text[])
";