CREATE FUNCTION _api.comment_delete()
RETURNS TRIGGER
LANGUAGE plpgsql VOLATILE
AS $BODY$
DECLARE
	_user_id INTEGER;
BEGIN
	_user_id = _api.get_user_id();

	IF OLD.user_id <> _user_id THEN
		PERFORM _api.raise_deny();
	END IF;

	UPDATE xssbook.comment SET
		deleted = TRUE,
		modified = clock_timestamp()
		WHERE id = OLD.id;
END
$BODY$;

GRANT EXECUTE ON FUNCTION _api.comment_delete()
	TO rest_user;
GRANT DELETE ON TABLE api.comment
	TO rest_user;
GRANT UPDATE ON TABLE xssbook.comment
	TO rest_user;

CREATE TRIGGER api_comment_delete_trgr
	INSTEAD OF DELETE
			ON api.comment
			FOR EACH ROW
				EXECUTE PROCEDURE _api.comment_delete();