uqa-sql 0.4.0

PostgreSQL-compatible SQL compiler built on libpg_query
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94

//
// Unified Query Algebra
//
// Copyright (c) 2023-2026 Cognica, Inc.
//

//! Session authorization identities and independently restorable role settings.

use super::{identity::RoleBinding, RoleDefinition};
use std::sync::Arc;

#[derive(Clone)]
pub struct SessionAuthorization {
    authenticated: Arc<RoleBinding>,
    session: Arc<RoleBinding>,
    selected: Option<Arc<RoleBinding>>,
    effective: Arc<RoleBinding>,
}

impl Default for SessionAuthorization {
    fn default() -> Self {
        Self::new(
            RoleBinding::from_definition(&RoleDefinition::bootstrap())
                .expect("bootstrap role identity"),
        )
    }
}

impl SessionAuthorization {
    pub fn new(authenticated: RoleBinding) -> Self {
        let authenticated = Arc::new(authenticated);
        Self {
            session: authenticated.clone(),
            effective: authenticated.clone(),
            authenticated,
            selected: None,
        }
    }

    pub fn authenticated(&self) -> &Arc<RoleBinding> {
        &self.authenticated
    }

    pub fn session(&self) -> &Arc<RoleBinding> {
        &self.session
    }

    pub fn outer(&self) -> &Arc<RoleBinding> {
        self.selected.as_ref().unwrap_or(&self.session)
    }

    pub fn current(&self) -> &Arc<RoleBinding> {
        &self.effective
    }

    pub fn selected(&self) -> Option<&Arc<RoleBinding>> {
        self.selected.as_ref()
    }

    pub fn set_role(&mut self, selected: Option<Arc<RoleBinding>>) {
        self.effective = selected.as_ref().unwrap_or(&self.session).clone();
        self.selected = selected;
    }

    /// Session and role assignment commute during transaction-local restoration.
    pub fn restore_session(&mut self, session: Arc<RoleBinding>) {
        if self.selected.is_none() {
            self.effective = session.clone();
        }
        self.session = session;
    }

    pub fn set_session(&mut self, session: Arc<RoleBinding>) {
        self.restore_session(session);
        self.set_role(None);
    }

    pub fn set_effective(&mut self, role: Arc<RoleBinding>) {
        self.effective = role;
    }

    pub fn discard(&mut self) {
        self.set_session(self.authenticated.clone());
    }

    pub fn show_role(&self) -> &str {
        self.selected
            .as_ref()
            .map_or("none", |role| role.name.as_str())
    }
}

#[cfg(test)]
mod tests;