surrealdb_core/sql/statements/remove/
access.rs

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
use crate::ctx::Context;
use crate::dbs::Options;
use crate::err::Error;
use crate::iam::{Action, ResourceKind};
use crate::sql::{Base, Ident, Value};
use derive::Store;
use revision::revisioned;
use serde::{Deserialize, Serialize};
use std::fmt::{self, Display, Formatter};

#[revisioned(revision = 2)]
#[derive(Clone, Debug, Default, Eq, PartialEq, PartialOrd, Serialize, Deserialize, Store, Hash)]
#[cfg_attr(feature = "arbitrary", derive(arbitrary::Arbitrary))]
#[non_exhaustive]
pub struct RemoveAccessStatement {
	pub name: Ident,
	pub base: Base,
	#[revision(start = 2)]
	pub if_exists: bool,
}

impl RemoveAccessStatement {
	/// Process this type returning a computed simple Value
	pub(crate) async fn compute(&self, ctx: &Context, opt: &Options) -> Result<Value, Error> {
		let future = async {
			// Allowed to run?
			opt.is_allowed(Action::Edit, ResourceKind::Actor, &self.base)?;
			// Check the statement type
			match &self.base {
				Base::Root => {
					// Get the transaction
					let txn = ctx.tx();
					// Get the definition
					let ac = txn.get_root_access(&self.name).await?;
					// Delete the definition
					let key = crate::key::root::ac::new(&ac.name);
					txn.del(key).await?;
					// Delete any associated data including access grants.
					let key = crate::key::root::access::all::new(&ac.name);
					txn.delp(key).await?;
					// Clear the cache
					txn.clear();
					// Ok all good
					Ok(Value::None)
				}
				Base::Ns => {
					// Get the transaction
					let txn = ctx.tx();
					// Get the definition
					let ac = txn.get_ns_access(opt.ns()?, &self.name).await?;
					// Delete the definition
					let key = crate::key::namespace::ac::new(opt.ns()?, &ac.name);
					txn.del(key).await?;
					// Delete any associated data including access grants.
					let key = crate::key::namespace::access::all::new(opt.ns()?, &ac.name);
					txn.delp(key).await?;
					// Clear the cache
					txn.clear();
					// Ok all good
					Ok(Value::None)
				}
				Base::Db => {
					// Get the transaction
					let txn = ctx.tx();
					// Get the definition
					let ac = txn.get_db_access(opt.ns()?, opt.db()?, &self.name).await?;
					// Delete the definition
					let key = crate::key::database::ac::new(opt.ns()?, opt.db()?, &ac.name);
					txn.del(key).await?;
					// Delete any associated data including access grants.
					let key =
						crate::key::database::access::all::new(opt.ns()?, opt.db()?, &ac.name);
					txn.delp(key).await?;
					// Clear the cache
					txn.clear();
					// Ok all good
					Ok(Value::None)
				}
				_ => Err(Error::InvalidLevel(self.base.to_string())),
			}
		}
		.await;
		match future {
			Err(e) if self.if_exists => match e {
				Error::AccessRootNotFound {
					..
				} => Ok(Value::None),
				Error::AccessNsNotFound {
					..
				} => Ok(Value::None),
				Error::AccessDbNotFound {
					..
				} => Ok(Value::None),
				e => Err(e),
			},
			v => v,
		}
	}
}

impl Display for RemoveAccessStatement {
	fn fmt(&self, f: &mut Formatter) -> fmt::Result {
		write!(f, "REMOVE ACCESS")?;
		if self.if_exists {
			write!(f, " IF EXISTS")?
		}
		write!(f, " {} ON {}", self.name, self.base)?;
		Ok(())
	}
}