src/db/rest/comment/api_comment_delete.sql


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

CREATE FUNCTION _api.comment_delete()
RETURNS TRIGGER
LANGUAGE plpgsql VOLATILE
AS $BODY$
DECLARE
	_user_id INTEGER;
BEGIN
	_user_id = _api.get_user_id();

	IF OLD.user_id <> _user_id THEN
		PERFORM _api.raise_deny();
	END IF;

	UPDATE xssbook.comment SET
		deleted = TRUE,
		modified = clock_timestamp()
		WHERE id = OLD.id;
END
$BODY$;

GRANT EXECUTE ON FUNCTION _api.comment_delete()
	TO rest_user;
GRANT DELETE ON TABLE api.comment
	TO rest_user;
GRANT UPDATE ON TABLE xssbook.comment
	TO rest_user;

CREATE TRIGGER api_comment_delete_trgr
	INSTEAD OF DELETE
			ON api.comment
			FOR EACH ROW
				EXECUTE PROCEDURE _api.comment_delete();