Initial commit
This commit is contained in:
69
node_modules/drizzle-orm/neon/rls.js
generated
vendored
Normal file
69
node_modules/drizzle-orm/neon/rls.js
generated
vendored
Normal file
@ -0,0 +1,69 @@
|
||||
import { is } from "../entity.js";
|
||||
import { pgPolicy } from "../pg-core/index.js";
|
||||
import { PgRole, pgRole } from "../pg-core/roles.js";
|
||||
import { sql } from "../sql/sql.js";
|
||||
const crudPolicy = (options) => {
|
||||
if (options.read === void 0) {
|
||||
throw new Error("crudPolicy requires a read policy");
|
||||
}
|
||||
if (options.modify === void 0) {
|
||||
throw new Error("crudPolicy requires a modify policy");
|
||||
}
|
||||
let read;
|
||||
if (options.read === true) {
|
||||
read = sql`true`;
|
||||
} else if (options.read === false) {
|
||||
read = sql`false`;
|
||||
} else if (options.read !== null) {
|
||||
read = options.read;
|
||||
}
|
||||
let modify;
|
||||
if (options.modify === true) {
|
||||
modify = sql`true`;
|
||||
} else if (options.modify === false) {
|
||||
modify = sql`false`;
|
||||
} else if (options.modify !== null) {
|
||||
modify = options.modify;
|
||||
}
|
||||
let rolesName = "";
|
||||
if (Array.isArray(options.role)) {
|
||||
rolesName = options.role.map((it) => {
|
||||
return is(it, PgRole) ? it.name : it;
|
||||
}).join("-");
|
||||
} else {
|
||||
rolesName = is(options.role, PgRole) ? options.role.name : options.role;
|
||||
}
|
||||
return [
|
||||
read && pgPolicy(`crud-${rolesName}-policy-select`, {
|
||||
for: "select",
|
||||
to: options.role,
|
||||
using: read
|
||||
}),
|
||||
modify && pgPolicy(`crud-${rolesName}-policy-insert`, {
|
||||
for: "insert",
|
||||
to: options.role,
|
||||
withCheck: modify
|
||||
}),
|
||||
modify && pgPolicy(`crud-${rolesName}-policy-update`, {
|
||||
for: "update",
|
||||
to: options.role,
|
||||
using: modify,
|
||||
withCheck: modify
|
||||
}),
|
||||
modify && pgPolicy(`crud-${rolesName}-policy-delete`, {
|
||||
for: "delete",
|
||||
to: options.role,
|
||||
using: modify
|
||||
})
|
||||
].filter(Boolean);
|
||||
};
|
||||
const authenticatedRole = pgRole("authenticated").existing();
|
||||
const anonymousRole = pgRole("anonymous").existing();
|
||||
const authUid = (userIdColumn) => sql`(select auth.user_id() = ${userIdColumn})`;
|
||||
export {
|
||||
anonymousRole,
|
||||
authUid,
|
||||
authenticatedRole,
|
||||
crudPolicy
|
||||
};
|
||||
//# sourceMappingURL=rls.js.map
|
||||
Reference in New Issue
Block a user