thohlt/archtika
1
0
Fork 0
mirror of https://github.com/thiloho/archtika.git synced 2025-11-22 02:41:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Rename Postgres tables for better recognition and add additional routes in web app

Browse Source
This commit is contained in:
Thilo Hohlt
2024-07-31 10:29:46 +02:00
parent a7f2fdebf5
commit d21e00a0c3
13 changed files with 601 additions and 243 deletions
Download Patch File Download Diff File Expand all files Collapse all files

144
rest-api/db/migrations/20240720132802_exposed_views_functions.sql
View File

@@ -5,136 +5,136 @@ AS
SELECT id, username
FROM internal.user;
CREATE VIEW api.cms_content
CREATE VIEW api.website
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_content;
FROM internal.website;
CREATE VIEW api.cms_media
CREATE VIEW api.media
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_media;
FROM internal.media;
CREATE VIEW api.cms_settings
CREATE VIEW api.settings
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_settings;
FROM internal.settings;
CREATE VIEW api.cms_header
CREATE VIEW api.header
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_header;
FROM internal.header;
CREATE view api.cms_home
CREATE view api.home
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_home;
FROM internal.home;
CREATE VIEW api.cms_article
CREATE VIEW api.article
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_article;
FROM internal.article;
CREATE VIEW api.cms_footer
CREATE VIEW api.footer
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_footer;
FROM internal.footer;
CREATE VIEW api.cms_collab
CREATE VIEW api.collab
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_collab;
FROM internal.collab;
CREATE VIEW api.cms_change_log
CREATE VIEW api.change_log
WITH (security_invoker = on)
AS
SELECT *
FROM internal.cms_change_log;
FROM internal.change_log;
CREATE FUNCTION
api.create_project(content_type VARCHAR(10), project_name VARCHAR(50), OUT content_id UUID) AS $$
api.create_website(content_type VARCHAR(10), title VARCHAR(50), OUT website_id UUID) AS $$
DECLARE
_content_id UUID;
_website_id UUID;
BEGIN
INSERT INTO internal.cms_content (content_type, project_name)
VALUES (create_project.content_type, create_project.project_name)
RETURNING id INTO _content_id;
INSERT INTO internal.website (content_type, title)
VALUES (create_website.content_type, create_website.title)
RETURNING id INTO _website_id;
INSERT INTO internal.cms_settings (content_id)
VALUES (_content_id);
INSERT INTO internal.settings (website_id)
VALUES (_website_id);
INSERT INTO internal.cms_header (content_id, logo_text)
VALUES (_content_id, 'archtika ' || create_project.content_type);
INSERT INTO internal.header (website_id, logo_text)
VALUES (_website_id, 'archtika ' || create_website.content_type);
INSERT INTO internal.cms_home (content_id, main_content)
INSERT INTO internal.home (website_id, main_content)
VALUES
(_content_id, '## Main content comes in here');
(_website_id, '## Main content comes in here');
INSERT INTO internal.cms_article (content_id, title, meta_description, meta_author, main_content)
INSERT INTO internal.article (website_id, title, meta_description, meta_author, main_content)
VALUES
(_content_id, 'First article', 'This is the first sample article', 'Author Name', '## First article'),
(_content_id, 'Second article', 'This is the second sample article', 'Author Name', '## Second article');
(_website_id, 'First article', 'This is the first sample article', 'Author Name', '## First article'),
(_website_id, 'Second article', 'This is the second sample article', 'Author Name', '## Second article');
INSERT INTO internal.cms_footer (content_id, additional_text)
VALUES (_content_id, 'This website was created with archtika');
INSERT INTO internal.footer (website_id, additional_text)
VALUES (_website_id, 'This website was created with archtika');
content_id := _content_id;
website_id := _website_id;
END;
$$ LANGUAGE plpgsql SECURITY DEFINER;
GRANT EXECUTE ON FUNCTION api.create_project(VARCHAR(10), VARCHAR(50)) TO authenticated_user;
GRANT EXECUTE ON FUNCTION api.create_website(VARCHAR(10), VARCHAR(50)) TO authenticated_user;
-- Security invoker only works on views if the user has access to the underlying table
GRANT SELECT ON internal.user TO authenticated_user;
GRANT SELECT ON api.user TO authenticated_user;
GRANT SELECT, UPDATE, DELETE ON internal.cms_content TO authenticated_user;
GRANT SELECT, UPDATE, DELETE ON api.cms_content TO authenticated_user;
GRANT SELECT, INSERT ON internal.cms_media TO authenticated_user;
GRANT SELECT, INSERT ON api.cms_media TO authenticated_user;
GRANT SELECT, UPDATE ON internal.cms_settings TO authenticated_user;
GRANT SELECT, UPDATE ON api.cms_settings TO authenticated_user;
GRANT SELECT, UPDATE ON internal.cms_header TO authenticated_user;
GRANT SELECT, UPDATE ON api.cms_header TO authenticated_user;
GRANT SELECT, UPDATE ON internal.cms_home TO authenticated_user;
GRANT SELECT, UPDATE ON api.cms_home TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON internal.cms_article TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON api.cms_article TO authenticated_user;
GRANT SELECT, UPDATE ON internal.cms_footer TO authenticated_user;
GRANT SELECT, UPDATE ON api.cms_footer TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON internal.cms_collab TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON api.cms_collab TO authenticated_user;
GRANT SELECT ON internal.cms_change_log TO authenticated_user;
GRANT SELECT ON api.cms_change_log TO authenticated_user;
GRANT SELECT, UPDATE, DELETE ON internal.website TO authenticated_user;
GRANT SELECT, UPDATE, DELETE ON api.website TO authenticated_user;
GRANT SELECT, INSERT ON internal.media TO authenticated_user;
GRANT SELECT, INSERT ON api.media TO authenticated_user;
GRANT SELECT, UPDATE ON internal.settings TO authenticated_user;
GRANT SELECT, UPDATE ON api.settings TO authenticated_user;
GRANT SELECT, UPDATE ON internal.header TO authenticated_user;
GRANT SELECT, UPDATE ON api.header TO authenticated_user;
GRANT SELECT, UPDATE ON internal.home TO authenticated_user;
GRANT SELECT, UPDATE ON api.home TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON internal.article TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON api.article TO authenticated_user;
GRANT SELECT, UPDATE ON internal.footer TO authenticated_user;
GRANT SELECT, UPDATE ON api.footer TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON internal.collab TO authenticated_user;
GRANT SELECT, INSERT, UPDATE, DELETE ON api.collab TO authenticated_user;
GRANT SELECT ON internal.change_log TO authenticated_user;
GRANT SELECT ON api.change_log TO authenticated_user;
-- migrate:down
REVOKE SELECT ON internal.user FROM authenticated_user;
REVOKE SELECT, UPDATE, DELETE ON internal.cms_content FROM authenticated_user;
REVOKE SELECT, INSERT ON internal.cms_media FROM authenticated_user;
REVOKE SELECT, UPDATE ON internal.cms_settings FROM authenticated_user;
REVOKE SELECT, UPDATE ON internal.cms_header FROM authenticated_user;
REVOKE SELECT, INSERT, UPDATE, DELETE ON internal.cms_article FROM authenticated_user;
REVOKE SELECT, UPDATE ON internal.cms_footer FROM authenticated_user;
REVOKE SELECT, INSERT, UPDATE, DELETE ON internal.cms_collab FROM authenticated_user;
REVOKE SELECT ON internal.cms_change_log FROM authenticated_user;
REVOKE SELECT, UPDATE, DELETE ON internal.website FROM authenticated_user;
REVOKE SELECT, INSERT ON internal.media FROM authenticated_user;
REVOKE SELECT, UPDATE ON internal.settings FROM authenticated_user;
REVOKE SELECT, UPDATE ON internal.header FROM authenticated_user;
REVOKE SELECT, INSERT, UPDATE, DELETE ON internal.article FROM authenticated_user;
REVOKE SELECT, UPDATE ON internal.footer FROM authenticated_user;
REVOKE SELECT, INSERT, UPDATE, DELETE ON internal.collab FROM authenticated_user;
REVOKE SELECT ON internal.change_log FROM authenticated_user;
DROP FUNCTION api.create_project(VARCHAR(10), VARCHAR(50));
DROP FUNCTION api.create_website(VARCHAR(10), VARCHAR(50));
DROP VIEW api.cms_change_log;
DROP VIEW api.cms_collab;
DROP VIEW api.cms_footer;
DROP VIEW api.cms_home;
DROP VIEW api.cms_article;
DROP VIEW api.cms_header;
DROP VIEW api.cms_settings;
DROP VIEW api.cms_media;
DROP VIEW api.cms_content;
DROP VIEW api.change_log;
DROP VIEW api.collab;
DROP VIEW api.footer;
DROP VIEW api.home;
DROP VIEW api.article;
DROP VIEW api.header;
DROP VIEW api.settings;
DROP VIEW api.media;
DROP VIEW api.website;
DROP VIEW api.user;