summaryrefslogtreecommitdiff
path: root/src/db/rest/post
diff options
context:
space:
mode:
Diffstat (limited to 'src/db/rest/post')
-rw-r--r--src/db/rest/post/api_post.sql37
-rw-r--r--src/db/rest/post/api_post_delete.sql32
-rw-r--r--src/db/rest/post/api_post_insert.sql46
-rw-r--r--src/db/rest/post/api_post_update.sql51
4 files changed, 166 insertions, 0 deletions
diff --git a/src/db/rest/post/api_post.sql b/src/db/rest/post/api_post.sql
new file mode 100644
index 0000000..0d60473
--- /dev/null
+++ b/src/db/rest/post/api_post.sql
@@ -0,0 +1,37 @@
+CREATE VIEW api.post AS
+ SELECT
+ p.id,
+ p.user_id,
+ p.content,
+ p.created,
+ p.modified,
+ COALESCE(c.cc, 0)
+ AS comment_count
+ FROM
+ admin.post p
+ LEFT JOIN (
+ SELECT
+ COUNT(c.id) as cc,
+ c.post_id
+ FROM
+ admin.comment c
+ GROUP BY
+ c.post_id
+ ) c
+ ON
+ p.id = c.post_id
+ LEFT JOIN
+ admin.user u
+ ON
+ u.id = p.user_id
+ WHERE
+ p.deleted <> TRUE
+ AND
+ u.deleted <> TRUE
+ ORDER BY
+ p.id DESC;
+
+GRANT SELECT ON TABLE api.post
+ TO rest_anon, rest_user;
+GRANT SELECT ON TABLE admin.post
+ TO rest_anon, rest_user;
diff --git a/src/db/rest/post/api_post_delete.sql b/src/db/rest/post/api_post_delete.sql
new file mode 100644
index 0000000..8f26b40
--- /dev/null
+++ b/src/db/rest/post/api_post_delete.sql
@@ -0,0 +1,32 @@
+CREATE FUNCTION _api.post_delete()
+RETURNS TRIGGER
+LANGUAGE plpgsql VOLATILE
+AS $BODY$
+DECLARE
+ _user_id INTEGER;
+BEGIN
+ _user_id = _api.get_user_id();
+
+ IF OLD.user_id <> _user_id THEN
+ PERFORM _api.raise_deny();
+ END IF;
+
+ UPDATE admin.post SET
+ deleted = TRUE,
+ modified = clock_timestamp()
+ WHERE id = OLD.id;
+END
+$BODY$;
+
+GRANT EXECUTE ON FUNCTION _api.post_delete()
+ TO rest_user;
+GRANT DELETE ON TABLE api.post
+ TO rest_user;
+GRANT UPDATE ON TABLE admin.post
+ TO rest_user;
+
+CREATE TRIGGER api_post_delete_trgr
+ INSTEAD OF DELETE
+ ON api.post
+ FOR EACH ROW
+ EXECUTE PROCEDURE _api.post_delete();
diff --git a/src/db/rest/post/api_post_insert.sql b/src/db/rest/post/api_post_insert.sql
new file mode 100644
index 0000000..e0594dc
--- /dev/null
+++ b/src/db/rest/post/api_post_insert.sql
@@ -0,0 +1,46 @@
+CREATE FUNCTION _api.post_insert()
+RETURNS TRIGGER
+LANGUAGE plpgsql VOLATILE
+AS $BODY$
+DECLARE
+ _user_id INTEGER;
+BEGIN
+ _user_id = _api.get_user_id();
+
+ NEW.content := _api.trim(NEW.content);
+
+ PERFORM _api.validate_text(
+ _text => NEW.content,
+ _column => 'content',
+ _min => 1,
+ _max => 4096
+ );
+
+ INSERT INTO admin.post (
+ user_id,
+ content
+ ) VALUES (
+ _user_id,
+ NEW.content
+ )
+ RETURNING id
+ INTO NEW.id;
+
+ RETURN NEW;
+END
+$BODY$;
+
+GRANT EXECUTE ON FUNCTION _api.post_insert()
+ TO rest_user;
+GRANT INSERT ON TABLE api.post
+ TO rest_user;
+GRANT INSERT ON TABLE admin.post
+ TO rest_user;
+GRANT UPDATE ON TABLE sys.post_id_seq
+ TO rest_user;
+
+CREATE TRIGGER api_post_insert_trgr
+ INSTEAD OF INSERT
+ ON api.post
+ FOR EACH ROW
+ EXECUTE PROCEDURE _api.post_insert();
diff --git a/src/db/rest/post/api_post_update.sql b/src/db/rest/post/api_post_update.sql
new file mode 100644
index 0000000..7b4360d
--- /dev/null
+++ b/src/db/rest/post/api_post_update.sql
@@ -0,0 +1,51 @@
+CREATE FUNCTION _api.post_update()
+RETURNS TRIGGER
+LANGUAGE plpgsql VOLATILE
+AS $BODY$
+DECLARE
+ _user_id INTEGER;
+ _changed BOOLEAN;
+BEGIN
+ _user_id = _api.get_user_id();
+ _changed = FALSE;
+
+ IF OLD.user_id <> _user_id THEN
+ PERFORM _api.raise_deny();
+ END IF;
+
+ NEW.content = COALESCE(NEW.content, OLD.content);
+ NEW.content := _api.trim(NEW.content);
+ PERFORM _api.validate_text(
+ _text => NEW.content,
+ _column => 'content',
+ _min => 1,
+ _max => 4096
+ );
+
+ IF NEW.content IS DISTINCT FROM OLD.content THEN
+ _changed = TRUE;
+ END IF;
+
+ IF _changed THEN
+ UPDATE admin.post SET
+ content = NEW.content,
+ modified = clock_timestamp()
+ WHERE id = OLD.id;
+ END IF;
+
+ RETURN NEW;
+END
+$BODY$;
+
+GRANT EXECUTE ON FUNCTION _api.post_update()
+ TO rest_user;
+GRANT UPDATE ON TABLE api.post
+ TO rest_user;
+GRANT UPDATE ON TABLE admin.post
+ TO rest_user;
+
+CREATE TRIGGER api_post_update_trgr
+ INSTEAD OF UPDATE
+ ON api.post
+ FOR EACH ROW
+ EXECUTE PROCEDURE _api.post_update();