31 lines
579 B
PL/PgSQL
31 lines
579 B
PL/PgSQL
CREATE FUNCTION _api.validate_role()
|
|
RETURNS TRIGGER
|
|
LANGUAGE plpgsql VOLATILE
|
|
AS $BODY$
|
|
BEGIN
|
|
IF NOT EXISTS (
|
|
SELECT TRUE
|
|
FROM pg_catalog.pg_roles AS r
|
|
WHERE r.rolname = NEW.role
|
|
) THEN
|
|
PERFORM _api.raise(
|
|
_err => 500
|
|
);
|
|
RETURN NULL;
|
|
END IF;
|
|
|
|
RETURN NEW;
|
|
END
|
|
$BODY$;
|
|
|
|
CREATE CONSTRAINT TRIGGER api_validate_role_trgr
|
|
AFTER INSERT OR UPDATE
|
|
ON admin.user
|
|
FOR EACH ROW
|
|
EXECUTE PROCEDURE _api.validate_role();
|
|
|
|
GRANT EXECUTE ON FUNCTION _api.validate_role()
|
|
TO rest_anon, rest_user;
|
|
GRANT SELECT ON TABLE pg_catalog.pg_roles
|
|
TO rest_anon, rest_user;
|