uqa-execution 0.4.5

Volcano physical operators with row-batch pipelines
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

//
// Unified Query Algebra
//
// Copyright (c) 2023-2026 Cognica, Inc.
//

//! Retained grant targets and state publication inputs for native privilege execution.
use super::super::{
    sequence_lifecycle::SequencePrivilegeContext,
    table_inquiry::{TablePrivilegeRegistry, TablePrivilegeState},
};
use crate::{
    catalog::view::ViewRegistryState,
    row_locks::{
        binding::{RelationLockCatalog, RelationLockSession},
        session::RowLockSession,
    },
    schema::{
        foreign_table_alteration::ForeignTableAlterPublication, namespaces::SchemaStatementWriter,
        publication::dependencies::CatalogPublicationChanges,
    },
};
use std::ops::DerefMut;
use uqa_core::RelationIdentity;
use uqa_sql::catalog::{
    roles::{guards::RoleCatalogGuards, RoleReferenceNames},
    security::{
        grants::GrantNamespace, table_grants::targets::TableGrantResolution, BoundTableSecurity,
    },
};
use uqa_storage::CatalogFacade;
pub type TableSecurityWrite<'a> = Box<dyn DerefMut<Target = BoundTableSecurity> + 'a>;
pub trait TableGrantState: TablePrivilegeState {
    fn security_write(&self) -> TableSecurityWrite<'_>;
    fn persistence(&self) -> uqa_sql::ast::RelationPersistence;
}
pub trait TableGrantRead<'a> {
    fn keys(&self) -> Box<dyn Iterator<Item = &RelationIdentity> + '_>;
    fn retained(&self, relation: &RelationIdentity) -> Option<Box<dyn TableGrantState + 'a>>;
}
pub trait TableGrantRegistry {
    fn tables(&self) -> Box<dyn TableGrantRead<'_> + '_>;
}
/// Persist one bound ACL tuple through the session's catalog before publishing live security.
pub trait TableGrantPersistence {
    fn persist_relation_acl(
        &self,
        relation: &RelationIdentity,
        column: Option<&str>,
        entry: &uqa_storage::catalog::relation_acl::RelationAclTuple,
    ) -> uqa_storage::StorageBackendResult<()>;
}
pub use crate::catalog::notices::CatalogNotices as TableGrantNotices;
pub struct TableGrantContext<'a> {
    pub writer: &'a dyn SchemaStatementWriter,
    pub bindings: &'a dyn RelationLockCatalog,
    pub locks: &'a dyn RelationLockSession,
    pub shared_locks: &'a dyn crate::row_locks::shared_objects::SharedObjectLockSession,
    pub rows: &'a dyn RowLockSession,
    pub system: &'a dyn super::super::system_relations::SystemRelationSecurityState,
    pub resolution: &'a dyn TableGrantResolution,
    pub namespaces: &'a dyn GrantNamespace,
    pub names: &'a dyn RoleReferenceNames,
    pub roles: &'a dyn RoleCatalogGuards,
    pub registry: &'a dyn TablePrivilegeRegistry,
    pub tables: &'a dyn TableGrantRegistry,
    pub views: &'a dyn ViewRegistryState,
    pub foreign: &'a dyn ForeignTableAlterPublication,
    pub acls: &'a dyn TableGrantPersistence,
    pub catalog: Option<&'a dyn CatalogFacade>,
    pub changes: &'a dyn CatalogPublicationChanges,
    pub notices: &'a dyn TableGrantNotices,
    pub sequences: SequencePrivilegeContext<'a>,
}
pub trait TableGrantInputs {
    fn table_grant_context(&self) -> TableGrantContext<'_>;
}