src/db/rest/post/api_post_delete.sql


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

CREATE FUNCTION _api.post_delete()
RETURNS TRIGGER
LANGUAGE plpgsql VOLATILE
AS $BODY$
DECLARE
	_user_id INTEGER;
BEGIN
	_user_id = _api.get_user_id();

	IF OLD.user_id <> _user_id THEN
		PERFORM _api.raise_deny();
	END IF;

	UPDATE xssbook.post SET
		deleted = TRUE,
		modified = clock_timestamp()
		WHERE id = OLD.id;
END
$BODY$;

GRANT EXECUTE ON FUNCTION _api.post_delete()
	TO rest_user;
GRANT DELETE ON TABLE api.post
	TO rest_user;
GRANT UPDATE ON TABLE xssbook.post
	TO rest_user;

CREATE TRIGGER api_post_delete_trgr
	INSTEAD OF DELETE
			ON api.post
			FOR EACH ROW
				EXECUTE PROCEDURE _api.post_delete();