ClickHouse/dbms/Parsers/ASTGrantQuery.cpp

#include <Parsers/ASTGrantQuery.h>
#include <Parsers/ASTExtendedRoleSet.h>
#include <Common/quoteString.h>
#include <boost/range/adaptor/map.hpp>
#include <boost/range/algorithm/sort.hpp>
#include <boost/range/algorithm_ext/push_back.hpp>
#include <map>


namespace DB
{
namespace ErrorCodes
{
    extern const int LOGICAL_ERROR;
}

namespace
{
    using KeywordToColumnsMap = std::map<std::string_view /* keyword */, std::vector<std::string_view> /* columns */>;
    using TableToAccessMap = std::map<String /* database_and_table_name */, KeywordToColumnsMap>;

    TableToAccessMap prepareTableToAccessMap(const AccessRightsElements & elements)
    {
        TableToAccessMap res;
        for (const auto & element : elements)
        {
            String database_and_table_name;
            if (element.any_database)
            {
                if (element.any_table)
                    database_and_table_name = "*.*";
                else
                    database_and_table_name = "*." + backQuoteIfNeed(element.table);
            }
            else if (element.database.empty())
            {
                if (element.any_table)
                    database_and_table_name = "*";
                else
                    database_and_table_name = backQuoteIfNeed(element.table);
            }
            else
            {
                if (element.any_table)
                    database_and_table_name = backQuoteIfNeed(element.database) + ".*";
                else
                    database_and_table_name = backQuoteIfNeed(element.database) + "." + backQuoteIfNeed(element.table);
            }

            KeywordToColumnsMap & keyword_to_columns = res[database_and_table_name];
            for (const auto & keyword : element.access_flags.toKeywords())
                boost::range::push_back(keyword_to_columns[keyword], element.columns);
        }

        for (auto & keyword_to_columns : res | boost::adaptors::map_values)
        {
            for (auto & columns : keyword_to_columns | boost::adaptors::map_values)
                boost::range::sort(columns);
        }
        return res;
    }


    void formatColumnNames(const std::vector<std::string_view> & columns, const IAST::FormatSettings & settings)
    {
        if (columns.empty())
            return;

        settings.ostr << "(";
        bool need_comma_after_column_name = false;
        for (const auto & column : columns)
        {
            if (std::exchange(need_comma_after_column_name, true))
                settings.ostr << ", ";
            settings.ostr << backQuoteIfNeed(column);
        }
        settings.ostr << ")";
    }


    void formatAccessRightsElements(const AccessRightsElements & elements, const IAST::FormatSettings & settings)
    {
        bool need_comma = false;
        for (const auto & [database_and_table, keyword_to_columns] : prepareTableToAccessMap(elements))
        {
            for (const auto & [keyword, columns] : keyword_to_columns)
            {
                if (std::exchange(need_comma, true))
                    settings.ostr << ", ";

                settings.ostr << (settings.hilite ? IAST::hilite_keyword : "") << keyword << (settings.hilite ? IAST::hilite_none : "");
                formatColumnNames(columns, settings);
            }

            settings.ostr << (settings.hilite ? IAST::hilite_keyword : "") << " ON " << (settings.hilite ? IAST::hilite_none : "") << database_and_table;
        }
    }


    void formatToRoles(const ASTExtendedRoleSet & to_roles, ASTGrantQuery::Kind kind, const IAST::FormatSettings & settings)
    {
        using Kind = ASTGrantQuery::Kind;
        settings.ostr << (settings.hilite ? IAST::hilite_keyword : "") << ((kind == Kind::GRANT) ? " TO " : " FROM ")
                      << (settings.hilite ? IAST::hilite_none : "");
        to_roles.format(settings);
    }
}


String ASTGrantQuery::getID(char) const
{
    return "GrantQuery";
}


ASTPtr ASTGrantQuery::clone() const
{
    return std::make_shared<ASTGrantQuery>(*this);
}


void ASTGrantQuery::formatImpl(const FormatSettings & settings, FormatState &, FormatStateStacked) const
{
    settings.ostr << (settings.hilite ? IAST::hilite_keyword : "") << (attach ? "ATTACH " : "") << ((kind == Kind::GRANT) ? "GRANT" : "REVOKE")
                  << (settings.hilite ? IAST::hilite_none : "") << " ";

    if (kind == Kind::REVOKE)
    {
        if (grant_option)
            settings.ostr << (settings.hilite ? hilite_keyword : "") << "GRANT OPTION FOR " << (settings.hilite ? hilite_none : "");
        else if (admin_option)
            settings.ostr << (settings.hilite ? hilite_keyword : "") << "ADMIN OPTION FOR " << (settings.hilite ? hilite_none : "");
    }

    if ((!!roles + !access_rights_elements.empty()) != 1)
        throw Exception("Either roles or access rights elements should be set", ErrorCodes::LOGICAL_ERROR);

    if (roles)
        roles->format(settings);
    else
        formatAccessRightsElements(access_rights_elements, settings);

    formatToRoles(*to_roles, kind, settings);

    if (kind == Kind::GRANT)
    {
        if (grant_option)
            settings.ostr << (settings.hilite ? hilite_keyword : "") << " WITH GRANT OPTION" << (settings.hilite ? hilite_none : "");
        else if (admin_option)
            settings.ostr << (settings.hilite ? hilite_keyword : "") << " WITH ADMIN OPTION" << (settings.hilite ? hilite_none : "");
    }
}
}