surrealdb-core 3.3.1

A scalable, distributed, collaborative, document-graph database, for the realtime web
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99

use anyhow::Result;
use reblessive::tree::Stk;

use crate::catalog::Error;
use crate::catalog::providers::AuthorisationProvider;
use crate::ctx::FrozenContext;
use crate::dbs::Options;
use crate::doc::CursorDoc;
use crate::expr::Base;
use crate::expr::statements::remove::access::RemoveAccessStatement;
use crate::iam::{Action, ResourceKind};
use crate::legacy::expr_to_ident;
use crate::val::Value;

/// Process this type returning a computed simple Value
pub(crate) async fn remove_access_statement_compute(
	this: &RemoveAccessStatement,
	stk: &mut Stk,
	ctx: &FrozenContext,
	opt: &Options,
	doc: Option<&CursorDoc>,
) -> Result<Value> {
	// Allowed to run?
	ctx.is_allowed(opt, Action::Edit, ResourceKind::Actor, this.base)?;
	// Compute the name
	let name = expr_to_ident(stk, ctx, opt, doc, &this.name, "access name").await?;
	// Check the statement type
	match &this.base {
		Base::Root => {
			// Get the transaction
			let txn = ctx.tx();
			// Get the definition
			let Some(ac) = txn.get_root_access(&name, None).await? else {
				if this.if_exists {
					return Ok(Value::None);
				} else {
					return Err(anyhow::Error::new(Error::AccessRootNotFound {
						ac: name,
					}));
				}
			};

			// Delete the definition
			txn.del_root_access(&ac.name).await?;
			// Clear the cache
			txn.clear_cache();
			// Ok all good
			Ok(Value::None)
		}
		Base::Ns => {
			// Get the transaction
			let txn = ctx.tx();
			// Get the definition
			let ns = ctx.get_ns_id(opt).await?;
			let Some(ac) = txn.get_ns_access(ns, &name, None).await? else {
				if this.if_exists {
					return Ok(Value::None);
				} else {
					let ns = opt.ns()?;
					return Err(anyhow::Error::new(Error::AccessNsNotFound {
						ac: name,
						ns: ns.to_string(),
					}));
				}
			};

			// Delete the definition
			txn.del_ns_access(ns, &ac.name).await?;
			// Clear the cache
			txn.clear_cache();
			// Ok all good
			Ok(Value::None)
		}
		Base::Db => {
			// Get the transaction
			let txn = ctx.tx();
			// Get the definition
			let (ns, db) = ctx.expect_ns_db_ids(opt).await?;
			let Some(ac) = txn.get_db_access(ns, db, &name, None).await? else {
				if this.if_exists {
					return Ok(Value::None);
				} else {
					let (ns, db) = opt.ns_db()?;
					return Err(anyhow::Error::new(Error::AccessDbNotFound {
						ac: name,
						ns: ns.to_string(),
						db: db.to_string(),
					}));
				}
			};
			// Delete the definition
			txn.del_db_access(ns, db, &ac.name).await?;
			// Clear the cache
			txn.clear_cache();
			// Ok all good
			Ok(Value::None)
		}
	}
}