mirror of
https://github.com/hasura/graphql-engine.git
synced 2024-12-17 12:31:52 +03:00
280 lines
9.4 KiB
Haskell
280 lines
9.4 KiB
Haskell
module Hasura.RQL.DML.Update
|
|
( AnnUpdG(..)
|
|
, traverseAnnUpd
|
|
, execUpdateQuery
|
|
, updateOperatorText
|
|
, runUpdate
|
|
) where
|
|
|
|
import Hasura.Prelude
|
|
|
|
import qualified Data.Environment as Env
|
|
import qualified Data.HashMap.Strict as M
|
|
import qualified Data.Sequence as DS
|
|
import qualified Database.PG.Query as Q
|
|
|
|
import Data.Aeson.Types
|
|
import Data.Text.Extended
|
|
import Instances.TH.Lift ()
|
|
|
|
import qualified Hasura.Backends.Postgres.SQL.DML as S
|
|
import qualified Hasura.Tracing as Tracing
|
|
|
|
import Hasura.Backends.Postgres.SQL.Types
|
|
import Hasura.EncJSON
|
|
import Hasura.RQL.DML.Insert (insertCheckExpr)
|
|
import Hasura.RQL.DML.Internal
|
|
import Hasura.RQL.DML.Mutation
|
|
import Hasura.RQL.DML.Returning
|
|
import Hasura.RQL.DML.Update.Types
|
|
import Hasura.RQL.GBoolExp
|
|
import Hasura.RQL.Instances ()
|
|
import Hasura.RQL.Types
|
|
import Hasura.Server.Version (HasVersion)
|
|
import Hasura.Session
|
|
|
|
|
|
-- NOTE: This function can be improved, because we use
|
|
-- the literal values defined below in the 'updateOperators'
|
|
-- function in 'Hasura.GraphQL.Schema.Mutation'. It would
|
|
-- be nice if we could avoid duplicating the string literal
|
|
-- values
|
|
updateOperatorText :: UpdOpExpG a -> Text
|
|
updateOperatorText (UpdSet _) = "_set"
|
|
updateOperatorText (UpdInc _) = "_inc"
|
|
updateOperatorText (UpdAppend _) = "_append"
|
|
updateOperatorText (UpdPrepend _) = "_prepend"
|
|
updateOperatorText (UpdDeleteKey _) = "_delete_key"
|
|
updateOperatorText (UpdDeleteElem _) = "_delete_elem"
|
|
updateOperatorText (UpdDeleteAtPath _) = "_delete_at_path"
|
|
|
|
traverseAnnUpd
|
|
:: (Applicative f)
|
|
=> (a -> f b)
|
|
-> AnnUpdG backend a
|
|
-> f (AnnUpdG backend b)
|
|
traverseAnnUpd f annUpd =
|
|
AnnUpd tn
|
|
<$> traverse (traverse $ traverse f) opExps
|
|
<*> ((,) <$> traverseAnnBoolExp f whr <*> traverseAnnBoolExp f fltr)
|
|
<*> traverseAnnBoolExp f chk
|
|
<*> traverseMutationOutput f mutOutput
|
|
<*> pure allCols
|
|
where
|
|
AnnUpd tn opExps (whr, fltr) chk mutOutput allCols = annUpd
|
|
|
|
mkUpdateCTE
|
|
:: AnnUpd 'Postgres -> S.CTE
|
|
mkUpdateCTE (AnnUpd tn opExps (permFltr, wc) chk _ columnsInfo) =
|
|
S.CTEUpdate update
|
|
where
|
|
update =
|
|
S.SQLUpdate tn setExp Nothing tableFltr
|
|
. Just
|
|
. S.RetExp
|
|
$ [ S.selectStar
|
|
, S.Extractor (insertCheckExpr "update check constraint failed" checkExpr) Nothing
|
|
]
|
|
setExp = S.SetExp $ map (expandOperator columnsInfo) opExps
|
|
tableFltr = Just $ S.WhereFrag tableFltrExpr
|
|
tableFltrExpr = toSQLBoolExp (S.QualTable tn) $ andAnnBoolExps permFltr wc
|
|
checkExpr = toSQLBoolExp (S.QualTable tn) chk
|
|
|
|
expandOperator :: [ColumnInfo 'Postgres] -> (PGCol, UpdOpExpG S.SQLExp) -> S.SetExpItem
|
|
expandOperator infos (column, op) = S.SetExpItem $ (column,) $ case op of
|
|
UpdSet e -> e
|
|
UpdInc e -> S.mkSQLOpExp S.incOp identifier (asNum e)
|
|
UpdAppend e -> S.mkSQLOpExp S.jsonbConcatOp identifier (asJSON e)
|
|
UpdPrepend e -> S.mkSQLOpExp S.jsonbConcatOp (asJSON e) identifier
|
|
UpdDeleteKey e -> S.mkSQLOpExp S.jsonbDeleteOp identifier (asText e)
|
|
UpdDeleteElem e -> S.mkSQLOpExp S.jsonbDeleteOp identifier (asInt e)
|
|
UpdDeleteAtPath a -> S.mkSQLOpExp S.jsonbDeleteAtPathOp identifier (asArray a)
|
|
where
|
|
identifier = S.SEIdentifier $ toIdentifier column
|
|
asInt e = S.SETyAnn e S.intTypeAnn
|
|
asText e = S.SETyAnn e S.textTypeAnn
|
|
asJSON e = S.SETyAnn e S.jsonbTypeAnn
|
|
asArray a = S.SETyAnn (S.SEArray a) S.textArrTypeAnn
|
|
asNum e = S.SETyAnn e $
|
|
case find (\info -> pgiColumn info == column) infos <&> pgiType of
|
|
Just (PGColumnScalar s) -> S.mkTypeAnn $ PGTypeScalar s
|
|
_ -> S.numericTypeAnn
|
|
|
|
convInc
|
|
:: (QErrM m)
|
|
=> (PGColumnType -> Value -> m S.SQLExp)
|
|
-> PGCol
|
|
-> PGColumnType
|
|
-> Value
|
|
-> m (PGCol, S.SQLExp)
|
|
convInc f col colType val = do
|
|
prepExp <- f colType val
|
|
return (col, S.SEOpApp S.incOp [S.mkSIdenExp col, prepExp])
|
|
|
|
convMul
|
|
:: (QErrM m)
|
|
=> (PGColumnType -> Value -> m S.SQLExp)
|
|
-> PGCol
|
|
-> PGColumnType
|
|
-> Value
|
|
-> m (PGCol, S.SQLExp)
|
|
convMul f col colType val = do
|
|
prepExp <- f colType val
|
|
return (col, S.SEOpApp S.mulOp [S.mkSIdenExp col, prepExp])
|
|
|
|
convSet
|
|
:: (QErrM m)
|
|
=> (PGColumnType -> Value -> m S.SQLExp)
|
|
-> PGCol
|
|
-> PGColumnType
|
|
-> Value
|
|
-> m (PGCol, S.SQLExp)
|
|
convSet f col colType val = do
|
|
prepExp <- f colType val
|
|
return (col, prepExp)
|
|
|
|
convDefault :: (Monad m) => PGCol -> PGColumnType -> () -> m (PGCol, S.SQLExp)
|
|
convDefault col _ _ = return (col, S.SEUnsafe "DEFAULT")
|
|
|
|
convOp
|
|
:: (UserInfoM m, QErrM m)
|
|
=> FieldInfoMap (FieldInfo 'Postgres)
|
|
-> [PGCol]
|
|
-> UpdPermInfo 'Postgres
|
|
-> [(PGCol, a)]
|
|
-> (PGCol -> PGColumnType -> a -> m (PGCol, S.SQLExp))
|
|
-> m [(PGCol, S.SQLExp)]
|
|
convOp fieldInfoMap preSetCols updPerm objs conv =
|
|
forM objs $ \(pgCol, a) -> do
|
|
-- if column has predefined value then throw error
|
|
when (pgCol `elem` preSetCols) $ throwNotUpdErr pgCol
|
|
checkPermOnCol PTUpdate allowedCols pgCol
|
|
colType <- askPGType fieldInfoMap pgCol relWhenPgErr
|
|
res <- conv pgCol colType a
|
|
-- build a set expression's entry
|
|
withPathK (getPGColTxt pgCol) $ return res
|
|
where
|
|
allowedCols = upiCols updPerm
|
|
relWhenPgErr = "relationships can't be updated"
|
|
throwNotUpdErr c = do
|
|
roleName <- _uiRole <$> askUserInfo
|
|
throw400 NotSupported $ "column " <> c <<> " is not updatable"
|
|
<> " for role " <> roleName <<> "; its value is predefined in permission"
|
|
|
|
validateUpdateQueryWith
|
|
:: (UserInfoM m, QErrM m, CacheRM m)
|
|
=> SessVarBldr 'Postgres m
|
|
-> (PGColumnType -> Value -> m S.SQLExp)
|
|
-> UpdateQuery
|
|
-> m (AnnUpd 'Postgres)
|
|
validateUpdateQueryWith sessVarBldr prepValBldr uq = do
|
|
let tableName = uqTable uq
|
|
tableInfo <- withPathK "table" $ askTabInfo tableName
|
|
let coreInfo = _tiCoreInfo tableInfo
|
|
|
|
-- If it is view then check if it is updatable
|
|
mutableView tableName viIsUpdatable
|
|
(_tciViewInfo coreInfo) "updatable"
|
|
|
|
-- Check if the role has update permissions
|
|
updPerm <- askUpdPermInfo tableInfo
|
|
|
|
-- Check if all dependent headers are present
|
|
validateHeaders $ upiRequiredHeaders updPerm
|
|
|
|
-- Check if select is allowed
|
|
selPerm <- modifyErr (<> selNecessaryMsg) $
|
|
askSelPermInfo tableInfo
|
|
|
|
let fieldInfoMap = _tciFieldInfoMap coreInfo
|
|
allCols = getCols fieldInfoMap
|
|
preSetObj = upiSet updPerm
|
|
preSetCols = M.keys preSetObj
|
|
|
|
-- convert the object to SQL set expression
|
|
setItems <- withPathK "$set" $
|
|
convOp fieldInfoMap preSetCols updPerm (M.toList $ uqSet uq) $ convSet prepValBldr
|
|
|
|
incItems <- withPathK "$inc" $
|
|
convOp fieldInfoMap preSetCols updPerm (M.toList $ uqInc uq) $ convInc prepValBldr
|
|
|
|
mulItems <- withPathK "$mul" $
|
|
convOp fieldInfoMap preSetCols updPerm (M.toList $ uqMul uq) $ convMul prepValBldr
|
|
|
|
defItems <- withPathK "$default" $
|
|
convOp fieldInfoMap preSetCols updPerm ((,()) <$> uqDefault uq) convDefault
|
|
|
|
-- convert the returning cols into sql returing exp
|
|
mAnnRetCols <- forM mRetCols $ \retCols ->
|
|
withPathK "returning" $ checkRetCols fieldInfoMap selPerm retCols
|
|
|
|
resolvedPreSetItems <- M.toList <$>
|
|
mapM (convPartialSQLExp sessVarBldr) preSetObj
|
|
|
|
let setExpItems = resolvedPreSetItems ++
|
|
setItems ++
|
|
incItems ++
|
|
mulItems ++
|
|
defItems
|
|
|
|
when (null setExpItems) $
|
|
throw400 UnexpectedPayload "atleast one of $set, $inc, $mul has to be present"
|
|
|
|
-- convert the where clause
|
|
annSQLBoolExp <- withPathK "where" $
|
|
convBoolExp fieldInfoMap selPerm (uqWhere uq) sessVarBldr prepValBldr
|
|
|
|
resolvedUpdFltr <- convAnnBoolExpPartialSQL sessVarBldr $
|
|
upiFilter updPerm
|
|
resolvedUpdCheck <- fromMaybe gBoolExpTrue <$>
|
|
traverse (convAnnBoolExpPartialSQL sessVarBldr)
|
|
(upiCheck updPerm)
|
|
|
|
return $ AnnUpd
|
|
tableName
|
|
(fmap UpdSet <$> setExpItems)
|
|
(resolvedUpdFltr, annSQLBoolExp)
|
|
resolvedUpdCheck
|
|
(mkDefaultMutFlds mAnnRetCols)
|
|
allCols
|
|
where
|
|
mRetCols = uqReturning uq
|
|
selNecessaryMsg =
|
|
"; \"update\" is only allowed if the role "
|
|
<> "has \"select\" permission as \"where\" can't be used "
|
|
<> "without \"select\" permission on the table"
|
|
|
|
validateUpdateQuery
|
|
:: (QErrM m, UserInfoM m, CacheRM m)
|
|
=> UpdateQuery -> m (AnnUpd 'Postgres, DS.Seq Q.PrepArg)
|
|
validateUpdateQuery =
|
|
runDMLP1T . validateUpdateQueryWith sessVarFromCurrentSetting binRHSBuilder
|
|
|
|
execUpdateQuery
|
|
::
|
|
( HasVersion
|
|
, MonadTx m
|
|
, MonadIO m
|
|
, Tracing.MonadTrace m
|
|
)
|
|
=> Env.Environment
|
|
-> Bool
|
|
-> Maybe MutationRemoteJoinCtx
|
|
-> (AnnUpd 'Postgres, DS.Seq Q.PrepArg)
|
|
-> m EncJSON
|
|
execUpdateQuery env strfyNum remoteJoinCtx (u, p) =
|
|
runMutation env $ mkMutation remoteJoinCtx (uqp1Table u) (updateCTE, p)
|
|
(uqp1Output u) (uqp1AllCols u) strfyNum
|
|
where
|
|
updateCTE = mkUpdateCTE u
|
|
|
|
runUpdate
|
|
:: ( HasVersion, QErrM m, UserInfoM m, CacheRM m
|
|
, MonadTx m, HasSQLGenCtx m, MonadIO m
|
|
, Tracing.MonadTrace m
|
|
)
|
|
=> Env.Environment -> UpdateQuery -> m EncJSON
|
|
runUpdate env q = do
|
|
strfyNum <- stringifyNum <$> askSQLGenCtx
|
|
validateUpdateQuery q >>= execUpdateQuery env strfyNum Nothing
|