uqa-engine 0.3.0

Engine: schema-aware table store, catalog restore, transactions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107

//
// Unified Query Algebra
//
// Copyright (c) 2023-2026 Cognica, Inc.
//

//! Bind database privilege inquiry, publication and restoration to live catalog state.

use crate::Engine;
use uqa_sql::{
    catalog::security::{
        database::DatabaseAclPrivilege,
        database_inquiry::{
            DatabasePrivilegeCatalog, DatabasePrivilegeInquiry, DatabaseSecurityRead,
        },
    },
    SQLError,
};

impl DatabasePrivilegeCatalog for Engine {
    fn refresh_privilege_catalog(&self) -> Result<(), SQLError> {
        self.synchronize_catalog_registries().map_err(|error| {
            SQLError::Internal(format!("load database privileges for inquiry: {error}"))
        })
    }
    fn security(&self) -> DatabaseSecurityRead<'_> {
        Box::new(self.durable.database_security.read())
    }
}
impl Engine {
    pub(crate) fn database_privilege_inquiry(&self) -> DatabasePrivilegeInquiry<'_> {
        DatabasePrivilegeInquiry {
            catalog: self,
            names: self,
            roles: self,
        }
    }
    pub(crate) fn ensure_database_privilege(
        &self,
        role: &str,
        privilege: DatabaseAclPrivilege,
    ) -> Result<(), SQLError> {
        self.database_privilege_inquiry()
            .ensure_database_privilege(role, privilege)
    }
}

use uqa_execution::catalog::security::database_lifecycle::{
    self, DatabasePrivilegeContext, DatabasePrivilegePublication, DatabaseSecurityRegistry,
    DatabaseSecurityWrite, DATABASE_SECURITY_METADATA_KEY,
};
use uqa_sql::catalog::security::database::DatabaseSecurity;
use uqa_storage::{CatalogFacade, StorageBackendResult};

impl DatabaseSecurityRegistry for Engine {
    fn security_read(&self) -> DatabaseSecurityRead<'_> {
        Box::new(self.durable.database_security.read())
    }
    fn security_write(&self) -> DatabaseSecurityWrite<'_> {
        Box::new(self.durable.database_security.write())
    }
}
impl DatabasePrivilegePublication for Engine {
    fn prepare_writer(&self) -> Result<(), SQLError> {
        self.prepare_explicit_transaction_writer().map(|_| ())
    }
    fn refresh_catalog(&self) -> StorageBackendResult<()> {
        self.synchronize_catalog_registries()
    }
    fn persist_security(&self, security: &DatabaseSecurity) -> Result<(), SQLError> {
        let Some(catalog) = self.storage.catalog.as_ref() else {
            return Ok(());
        };
        let json = serde_json::to_string(security).map_err(|error| {
            SQLError::Internal(format!("serialize database privileges: {error}"))
        })?;
        catalog
            .set_metadata(DATABASE_SECURITY_METADATA_KEY, &json)
            .map_err(|error| SQLError::Internal(format!("persist database privileges: {error}")))
    }

    fn catalog_changed(&self) {
        self.note_catalog_registry_changed();
    }
    fn notice(&self, level: &str, message: &str) {
        self.push_sql_notice(level, message);
    }
}
impl Engine {
    pub(crate) fn database_privilege_context(&self) -> DatabasePrivilegeContext<'_> {
        DatabasePrivilegeContext {
            names: self,
            roles: self,
            registry: self,
            publication: self,
        }
    }
    pub(crate) fn restore_database_security_from_metadata(
        &self,
        catalog: &dyn CatalogFacade,
    ) -> StorageBackendResult<()> {
        database_lifecycle::restore_database_security_from_metadata(
            &self.database_privilege_context(),
            catalog,
        )
    }
}