uqa-storage 0.4.8

Document store, inverted index, IVF/HNSW vectors, B-tree, R*Tree, catalog
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120

//
// Unified Query Algebra
//
// Copyright (c) 2023-2026 Cognica, Inc.
//

use super::*;
use uqa_core::{
    catalog_role::{BoundAclEntry, RoleIdentity},
    catalog_sequence::SequencePrivileges,
};

fn row(security: SequenceSecurityRow) -> crate::SequenceRow {
    crate::SequenceRow {
        relation: crate::RelationIdentity::new("public", "ids"),
        security,
        object_id: [1; 16],
        definition_generation: [2; 16],
        start: 1,
        increment: 1,
        current: 5,
        called: true,
        log_count: 3,
        persistence: "p".into(),
        owner: None,
        options: crate::SequenceOptions::default(),
    }
}

#[test]
fn sequence_records_round_trip_bound_and_legacy_authority_without_mixing_them() {
    let mut bound = BoundSequenceSecurity::owner(RoleIdentity::BOOTSTRAP);
    bound.acl = Some(vec![BoundAclEntry {
        role: None,
        grantor: RoleIdentity::BOOTSTRAP,
        privileges: SequencePrivileges::ALL,
        grant_options: SequencePrivileges::default(),
    }]);
    for security in [
        SequenceSecurityRow::Bound(bound),
        SequenceSecurityRow::bootstrap(),
        SequenceSecurityRow::legacy("owner"),
    ] {
        let original = row(security.clone());
        let encoded = serde_json::to_value(&original).unwrap();
        assert_eq!(
            serde_json::from_value::<crate::SequenceRow>(encoded.clone()).unwrap(),
            original
        );
        assert_eq!(
            encoded.get("sequence_security_format").is_some(),
            matches!(security, SequenceSecurityRow::Bound(_))
        );
        let mut corrupt = encoded;
        corrupt["unexpected_security_field"] = serde_json::json!(true);
        assert!(serde_json::from_value::<crate::SequenceRow>(corrupt).is_err());
    }
}

#[test]
fn current_sequence_marker_and_required_endpoints_never_fall_back_to_names() {
    let original = serde_json::to_value(row(SequenceSecurityRow::bootstrap())).unwrap();
    assert!(original.get("acl").is_some());
    for field in ["role_owner", "acl"] {
        let mut incomplete = original.clone();
        incomplete.as_object_mut().unwrap().remove(field);
        assert!(
            serde_json::from_value::<crate::SequenceRow>(incomplete).is_err(),
            "{field}"
        );
    }
    for value in [
        serde_json::json!(null),
        serde_json::json!(0),
        serde_json::json!(2),
        serde_json::json!("1"),
    ] {
        let mut unsupported = original.clone();
        unsupported["sequence_security_format"] = value;
        assert!(serde_json::from_value::<crate::SequenceRow>(unsupported).is_err());
    }
    let mut mixed = original.clone();
    mixed["role_owner"] = serde_json::json!("uqa");
    assert!(serde_json::from_value::<crate::SequenceRow>(mixed).is_err());
    let mut unmarked = original;
    unmarked
        .as_object_mut()
        .unwrap()
        .remove("sequence_security_format");
    assert!(serde_json::from_value::<crate::SequenceRow>(unmarked).is_err());
}

#[test]
fn missing_bound_grantee_is_corrupt_while_explicit_null_is_public() {
    let mut security = BoundSequenceSecurity::owner(RoleIdentity::BOOTSTRAP);
    security.acl = Some(vec![BoundAclEntry {
        role: None,
        grantor: RoleIdentity::BOOTSTRAP,
        privileges: SequencePrivileges::ALL,
        grant_options: SequencePrivileges::default(),
    }]);
    let encoded = serde_json::to_value(row(security.into())).unwrap();
    assert!(serde_json::from_value::<crate::SequenceRow>(encoded.clone()).is_ok());
    for field in ["role", "grantor"] {
        let mut incomplete = encoded.clone();
        incomplete["acl"][0].as_object_mut().unwrap().remove(field);
        assert!(
            serde_json::from_value::<crate::SequenceRow>(incomplete).is_err(),
            "{field}"
        );
    }
}

#[test]
fn historic_sequences_without_authority_remain_legacy_until_initial_restoration() {
    let mut encoded = serde_json::to_value(row(SequenceSecurityRow::legacy("uqa"))).unwrap();
    encoded.as_object_mut().unwrap().remove("role_owner");
    let restored: crate::SequenceRow = serde_json::from_value(encoded).unwrap();
    assert_eq!(restored.security, SequenceSecurityRow::legacy("uqa"));
}