xssbook2/db/rest/login/_api_validate_role.sql

30 lines
579 B
PL/PgSQL

CREATE FUNCTION _api.validate_role()
RETURNS TRIGGER
LANGUAGE plpgsql VOLATILE
AS $BODY$
BEGIN
IF NOT EXISTS (
SELECT TRUE
FROM pg_catalog.pg_roles AS r
WHERE r.rolname = NEW.role
) THEN
PERFORM _api.raise(
_err => 500
);
RETURN NULL;
END IF;
RETURN NEW;
END
$BODY$;
CREATE CONSTRAINT TRIGGER api_validate_role_trgr
AFTER INSERT OR UPDATE
ON admin.user
FOR EACH ROW
EXECUTE PROCEDURE _api.validate_role();
GRANT EXECUTE ON FUNCTION _api.validate_role()
TO rest_anon, rest_user;
GRANT SELECT ON TABLE pg_catalog.pg_roles
TO rest_anon, rest_user;