Mercurial > gemma
view schema/search.sql @ 1798:40cbfd268aa9
Row level security for import jobs
Add imports to database as the actual login user. sys_admin then
only needs to read and update (state) import job data.
The way the policies for import_logs and track_imports are implemented
has the side effect, that a sys_admin can do anything with all of
them. More fine-grainded policies and changes to Go code are needed, if
this is a concern.
author | Tom Gottfried <tom@intevation.de> |
---|---|
date | Mon, 14 Jan 2019 17:43:28 +0100 |
parents | 2304778c4432 |
children |
line wrap: on
line source
-- This is Free Software under GNU Affero General Public License v >= 3.0 -- without warranty, see README.md and license for details. -- SPDX-License-Identifier: AGPL-3.0-or-later -- License-Filename: LICENSES/AGPL-3.0.txt -- Copyright (C) 2018 by via donau -- – Österreichische Wasserstraßen-Gesellschaft mbH -- Software engineering by Intevation GmbH -- Author(s): -- * Sascha Wilde <wilde@intevation.de> CREATE FUNCTION search_bottlenecks(search_string text) RETURNS jsonb LANGUAGE plpgsql AS $$ DECLARE _result jsonb; BEGIN SELECT COALESCE(json_agg(r),'[]') INTO _result FROM (SELECT objnam AS name, ST_AsGeoJSON(ST_Centroid(area))::json AS geom, 'bottleneck' AS type FROM waterway.bottlenecks WHERE objnam ILIKE '%' || search_string || '%' ORDER BY name) r; RETURN _result; END; $$; CREATE FUNCTION search_cities(search_string text) RETURNS jsonb LANGUAGE plpgsql AS $$ DECLARE _result jsonb; BEGIN SELECT COALESCE(json_agg(r),'[]') INTO _result FROM (SELECT name || ' (' || country_code || ')' AS name, ST_AsGeoJSON(location)::json AS geom, 'city' AS type FROM waterway.geonames WHERE feature_code IN ('PPLA', 'PPLA1', 'PPLA2', 'PPLA3', 'PPLC') AND (name ILIKE '%' || search_string || '%' OR alternatenames ~* ('(^|,)' || search_string || '($|,)')) ORDER BY array_position(ARRAY['PPLC', 'PPLA', 'PPLA1', 'PPLA2', 'PPLA3'], feature_code::text), name) r; RETURN _result; END; $$; CREATE FUNCTION search_most(search_string text) RETURNS jsonb LANGUAGE plpgsql AS $$ BEGIN RETURN search_bottlenecks(search_string) || search_cities(search_string); END; $$;