uqa-engine 0.3.0

Engine: schema-aware table store, catalog restore, transactions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

//
// Unified Query Algebra
//
// Copyright (c) 2023-2026 Cognica, Inc.
//

//! Retain table generations and lend live catalog guards to native GRANT execution.
use crate::{Engine, TableState};
use parking_lot::RwLockReadGuard;
use std::{collections::BTreeMap, sync::Arc};
use uqa_core::RelationIdentity;
use uqa_execution::catalog::security::{
    table_grants::context::{
        TableGrantContext, TableGrantInputs, TableGrantNotices, TableGrantRead, TableGrantRegistry,
        TableGrantState, TableSecurityWrite,
    },
    table_inquiry::TablePrivilegeState,
};
use uqa_sql::{
    catalog::{
        resolution::RelationResolution,
        security::{table_grants::targets::TableGrantResolution, TableSecurity},
    },
    SQLError,
};
use uqa_storage::StorageBackendResult;
struct GrantTable<'a> {
    engine: &'a Engine,
    state: Arc<TableState>,
}
struct GrantTables<'a> {
    engine: &'a Engine,
    guard: RwLockReadGuard<'a, BTreeMap<RelationIdentity, Arc<TableState>>>,
}
impl TableGrantRegistry for Engine {
    fn tables(&self) -> Box<dyn TableGrantRead<'_> + '_> {
        Box::new(GrantTables {
            engine: self,
            guard: self.storage.tables.read(),
        })
    }
}
impl<'a> TableGrantRead<'a> for GrantTables<'a> {
    fn keys(&self) -> Box<dyn Iterator<Item = &RelationIdentity> + '_> {
        Box::new(self.guard.keys())
    }
    fn retained(&self, relation: &RelationIdentity) -> Option<Box<dyn TableGrantState + 'a>> {
        self.guard.get(relation).cloned().map(|state| {
            Box::new(GrantTable {
                engine: self.engine,
                state,
            }) as Box<dyn TableGrantState + 'a>
        })
    }
}
impl TablePrivilegeState for GrantTable<'_> {
    fn role_owner(&self) -> String {
        self.state.role_owner()
    }
    fn columns(&self) -> uqa_execution::catalog::security::table_inquiry::TableColumnsRead<'_> {
        Box::new(self.state.columns.read())
    }
    fn security(&self) -> TableSecurity {
        self.state.security()
    }
    fn column_names(&self) -> Vec<String> {
        TablePrivilegeState::column_names(self.state.as_ref())
    }
}
impl TableGrantState for GrantTable<'_> {
    fn security_write(&self) -> TableSecurityWrite<'_> {
        Box::new(self.state.security.write())
    }
    fn persist_security(&self, name: &str, security: &TableSecurity) -> StorageBackendResult<()> {
        let table = self.state.as_ref();
        let columns = table.columns.read().clone();
        let constraints = uqa_sql::ast::TableConstraintSet {
            columns_declared: Some(*table.columns_declared.read()),
            checks: table.table_checks.read().clone(),
            foreign_keys: table.foreign_keys.read().clone(),
            key_constraints: table.key_constraints.read().clone(),
            persistence: table.persistence,
            on_commit: table.on_commit,
            hierarchy: table.hierarchy.read().clone(),
        };
        self.engine
            .try_save_table_schema_with_components_and_security(
                name,
                table,
                &columns,
                &constraints,
                security,
            )
    }
}
impl TableGrantResolution for Engine {
    fn resolve_visible_relation_kind(&self, name: &str) -> Result<RelationResolution, SQLError> {
        Engine::resolve_visible_relation_kind(self, name)
    }
}
impl TableGrantNotices for Engine {
    fn notice(&self, level: &str, message: &str) {
        self.push_sql_notice(level, message);
    }
}
impl TableGrantInputs for Engine {
    fn table_grant_context(&self) -> TableGrantContext<'_> {
        TableGrantContext {
            writer: self,
            resolution: self,
            namespaces: self,
            names: self,
            roles: self,
            registry: self,
            tables: self,
            views: self,
            foreign: self,
            catalog: self.storage.catalog.as_deref(),
            changes: self,
            notices: self,
            sequences: self.sequence_privilege_context(),
        }
    }
}