uqa-sql 0.4.0

PostgreSQL-compatible SQL compiler built on libpg_query
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123

//
// Unified Query Algebra
//
// Copyright (c) 2023-2026 Cognica, Inc.
//

//! Object-privilege recipients preserve PUBLIC separately from named and session roles.

use super::RoleSpecification;
use serde::{Deserialize, Deserializer, Serialize};

#[derive(Debug, Clone, PartialEq, Eq, Serialize)]
#[serde(tag = "kind", content = "role", rename_all = "snake_case")]
pub enum AclRoleSpecification {
    Public,
    Role(RoleSpecification),
}

impl From<RoleSpecification> for AclRoleSpecification {
    fn from(role: RoleSpecification) -> Self {
        Self::Role(role)
    }
}

impl From<String> for AclRoleSpecification {
    fn from(name: String) -> Self {
        Self::Role(RoleSpecification::Named(name))
    }
}

impl From<&str> for AclRoleSpecification {
    fn from(name: &str) -> Self {
        Self::from(name.to_owned())
    }
}

impl<'de> Deserialize<'de> for AclRoleSpecification {
    fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
        #[derive(Deserialize)]
        #[serde(
            tag = "kind",
            content = "role",
            rename_all = "snake_case",
            deny_unknown_fields
        )]
        enum Tagged {
            Public,
            Role(RoleSpecification),
        }
        #[derive(Deserialize)]
        #[serde(untagged)]
        enum Stored {
            Tagged(Tagged),
            Legacy(String),
        }
        Ok(match Stored::deserialize(deserializer)? {
            Stored::Tagged(Tagged::Public) => Self::Public,
            Stored::Tagged(Tagged::Role(role)) => Self::Role(role),
            Stored::Legacy(name) => match name.as_str() {
                "PUBLIC" => Self::Public,
                "CURRENT_USER" => Self::Role(RoleSpecification::CurrentUser),
                "SESSION_USER" => Self::Role(RoleSpecification::SessionUser),
                _ => Self::Role(RoleSpecification::Named(name)),
            },
        })
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn quoted_role_names_public_and_session_keywords_remain_distinct() {
        let specifications = [
            AclRoleSpecification::Public,
            AclRoleSpecification::from("PUBLIC"),
            AclRoleSpecification::from("CURRENT_USER"),
            AclRoleSpecification::from("SESSION_USER"),
            AclRoleSpecification::from(RoleSpecification::CurrentUser),
            AclRoleSpecification::from(RoleSpecification::SessionUser),
        ];
        let mut encodings = std::collections::BTreeSet::new();
        for specification in specifications {
            let json = serde_json::to_string(&specification).unwrap();
            assert!(encodings.insert(json.clone()));
            assert_eq!(
                serde_json::from_str::<AclRoleSpecification>(&json).unwrap(),
                specification
            );
        }
    }

    #[test]
    fn legacy_object_grant_statements_keep_their_previous_keyword_meanings() {
        for (name, expected) in [
            ("PUBLIC", AclRoleSpecification::Public),
            ("CURRENT_USER", RoleSpecification::CurrentUser.into()),
            ("SESSION_USER", RoleSpecification::SessionUser.into()),
            ("reader", AclRoleSpecification::from("reader")),
        ] {
            let json = serde_json::to_string(name).unwrap();
            assert_eq!(
                serde_json::from_str::<AclRoleSpecification>(&json).unwrap(),
                expected
            );
        }
        for json in [
            r#"{"kind":"unknown","role":"PUBLIC"}"#,
            r#"{"kind":"role"}"#,
            r#"{"kind":"public","role":"reader"}"#,
            r#"{"role":"PUBLIC"}"#,
            r#"{"kind":"role","role":{"kind":"named","name":"PUBLIC","extra":true}}"#,
            r#"{"kind":"role","role":{"kind":"current_user","name":"PUBLIC"}}"#,
            "null",
        ] {
            assert!(
                serde_json::from_str::<AclRoleSpecification>(json).is_err(),
                "{json}"
            );
        }
    }
}