src/db/rest/user/api_user_delete.sql


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

CREATE FUNCTION _api.user_delete()
RETURNS TRIGGER
LANGUAGE plpgsql VOLATILE
AS $BODY$
DECLARE
	_user_id INTEGER;
BEGIN
	_user_id = _api.get_user_id();

	IF OLD.id <> _user_id THEN
		PERFORM _api.raise_deny();
	END IF;

	UPDATE xssbook.user SET
		deleted = TRUE,
		modified = clock_timestamp()
		WHERE id = _user_id;
END
$BODY$;

GRANT EXECUTE ON FUNCTION _api.user_delete()
	TO rest_user;
GRANT DELETE ON TABLE api.user
	TO rest_user;
GRANT UPDATE ON TABLE xssbook.user
	TO rest_user;

CREATE TRIGGER api_user_delete_trgr
	INSTEAD OF DELETE
			ON api.user
			FOR EACH ROW
				EXECUTE PROCEDURE _api.user_delete();