uqa-execution 0.4.0

Volcano physical operators with row-batch pipelines
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

//
// Unified Query Algebra
//
// Copyright (c) 2023-2026 Cognica, Inc.
//

//! Bind legacy sequence ACL endpoints only during complete initial catalog restoration.

use std::collections::BTreeMap;
use uqa_sql::catalog::{
    roles::RoleDefinition,
    security::{BoundSequenceSecurity, SequenceSecurity},
};
use uqa_storage::{SequenceSecurityRow, StorageBackendError, StorageBackendResult};

pub(super) fn restore_security(
    row: &SequenceSecurityRow,
    roles: &BTreeMap<String, RoleDefinition>,
    allow_migration: bool,
) -> StorageBackendResult<BoundSequenceSecurity> {
    let security = match row {
        SequenceSecurityRow::Bound(row) => BoundSequenceSecurity::from_row(row.clone()),
        SequenceSecurityRow::Legacy(row) => {
            if !allow_migration {
                return Err(StorageBackendError::Other(
                    "sequence security requires initial catalog migration".into(),
                ));
            }
            BoundSequenceSecurity::bind(
                &SequenceSecurity {
                    role_owner: row.role_owner.clone(),
                    acl: row.acl.clone(),
                },
                roles,
            )
            .map_err(StorageBackendError::Other)?
        }
    };
    security
        .validate(roles)
        .map_err(StorageBackendError::Other)?;
    Ok(security)
}