mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-09-30 05:30:51 +00:00
75 lines
2.4 KiB
C++
75 lines
2.4 KiB
C++
#include <Interpreters/InterpreterDropAccessEntityQuery.h>
|
|
#include <Parsers/ASTDropAccessEntityQuery.h>
|
|
#include <Interpreters/Context.h>
|
|
#include <Interpreters/DDLWorker.h>
|
|
#include <Access/AccessControlManager.h>
|
|
#include <Access/AccessFlags.h>
|
|
#include <Access/User.h>
|
|
#include <Access/Role.h>
|
|
#include <Access/Quota.h>
|
|
#include <Access/RowPolicy.h>
|
|
#include <Access/SettingsProfile.h>
|
|
|
|
|
|
namespace DB
|
|
{
|
|
namespace ErrorCodes
|
|
{
|
|
extern const int NOT_IMPLEMENTED;
|
|
}
|
|
|
|
using EntityType = IAccessEntity::Type;
|
|
|
|
|
|
BlockIO InterpreterDropAccessEntityQuery::execute()
|
|
{
|
|
auto & query = query_ptr->as<ASTDropAccessEntityQuery &>();
|
|
auto & access_control = context.getAccessControlManager();
|
|
context.checkAccess(getRequiredAccess());
|
|
|
|
if (!query.cluster.empty())
|
|
return executeDDLQueryOnCluster(query_ptr, context);
|
|
|
|
if (query.type == EntityType::ROW_POLICY)
|
|
{
|
|
Strings names;
|
|
for (auto & name_parts : query.row_policies_name_parts)
|
|
{
|
|
if (name_parts.database.empty())
|
|
name_parts.database = context.getCurrentDatabase();
|
|
names.emplace_back(name_parts.getName());
|
|
}
|
|
if (query.if_exists)
|
|
access_control.tryRemove(access_control.find<RowPolicy>(names));
|
|
else
|
|
access_control.remove(access_control.getIDs<RowPolicy>(names));
|
|
return {};
|
|
}
|
|
|
|
if (query.if_exists)
|
|
access_control.tryRemove(access_control.find(query.type, query.names));
|
|
else
|
|
access_control.remove(access_control.getIDs(query.type, query.names));
|
|
return {};
|
|
}
|
|
|
|
|
|
AccessRightsElements InterpreterDropAccessEntityQuery::getRequiredAccess() const
|
|
{
|
|
const auto & query = query_ptr->as<const ASTDropAccessEntityQuery &>();
|
|
AccessRightsElements res;
|
|
switch (query.type)
|
|
{
|
|
case EntityType::USER: res.emplace_back(AccessType::DROP_USER); return res;
|
|
case EntityType::ROLE: res.emplace_back(AccessType::DROP_ROLE); return res;
|
|
case EntityType::SETTINGS_PROFILE: res.emplace_back(AccessType::DROP_SETTINGS_PROFILE); return res;
|
|
case EntityType::ROW_POLICY: res.emplace_back(AccessType::DROP_ROW_POLICY); return res;
|
|
case EntityType::QUOTA: res.emplace_back(AccessType::DROP_QUOTA); return res;
|
|
case EntityType::MAX: break;
|
|
}
|
|
throw Exception(
|
|
toString(query.type) + ": type is not supported by DROP query", ErrorCodes::NOT_IMPLEMENTED);
|
|
}
|
|
|
|
}
|