From 55782b32400acbfad8b7f896cbd089814db1b6ad Mon Sep 17 00:00:00 2001 From: Pierre Bastianelli Date: Fri, 12 Mar 2021 17:09:11 -0800 Subject: [PATCH] feat: removing certifier policy on application_revision table --- .../application_revision_policies_001.sql | 8 ++++++++ .../application_revision_policies_001.sql | 18 ++++++++++++++++++ schema/sqitch.plan | 1 + .../application_revision_policies_001.sql | 7 +++++++ 4 files changed, 34 insertions(+) create mode 100644 schema/deploy/policies/application_revision_policies_001.sql create mode 100644 schema/revert/policies/application_revision_policies_001.sql create mode 100644 schema/verify/policies/application_revision_policies_001.sql diff --git a/schema/deploy/policies/application_revision_policies_001.sql b/schema/deploy/policies/application_revision_policies_001.sql new file mode 100644 index 0000000000..b25da455e8 --- /dev/null +++ b/schema/deploy/policies/application_revision_policies_001.sql @@ -0,0 +1,8 @@ +-- Deploy ggircs-portal:policies/application_revision_policies_001 to pg +-- requires: policies/application_revision_policies + +BEGIN; + +drop policy certifier_select_application_revision on ggircs_portal.application_revision; + +COMMIT; diff --git a/schema/revert/policies/application_revision_policies_001.sql b/schema/revert/policies/application_revision_policies_001.sql new file mode 100644 index 0000000000..db822e6b47 --- /dev/null +++ b/schema/revert/policies/application_revision_policies_001.sql @@ -0,0 +1,18 @@ +-- Revert ggircs-portal:policies/application_revision_policies_001 from pg + +BEGIN; + +do +$policy$ +declare certifier_user_statement text; +begin + +certifier_user_statement := 'application_id in (select ggircs_portal_private.get_valid_applications_for_certifier())'; + +-- ciip_industry_user (certifier) RLS +perform ggircs_portal_private.upsert_policy('certifier_select_application_revision', 'application_revision', 'select', 'ciip_industry_user', certifier_user_statement); + +end +$policy$; + +COMMIT; diff --git a/schema/sqitch.plan b/schema/sqitch.plan index 2fe010c819..d80059a4f5 100644 --- a/schema/sqitch.plan +++ b/schema/sqitch.plan @@ -279,3 +279,4 @@ database_functions/verify_type_not_present 2021-03-12T22:17:37Z Pierre Bastianel types/search_certification_url_result [types/search_certification_url_result@v1.16.0] 2021-03-12T22:13:32Z Pierre Bastianelli # removing type as part of the certifier role deprecation database_functions/verify_policy_not_present 2021-03-13T00:18:59Z Pierre Bastianelli # function to verify a policy doesn't exist on the system policies/application_policies_001 [policies/application_policies] 2021-03-12T23:54:50Z Pierre Bastianelli # dropping certifier policies on application table +policies/application_revision_policies_001 [policies/application_revision_policies] 2021-03-13T01:03:12Z Pierre Bastianelli # removing the application revision policies linked to the certifier role diff --git a/schema/verify/policies/application_revision_policies_001.sql b/schema/verify/policies/application_revision_policies_001.sql new file mode 100644 index 0000000000..bb74d22bcf --- /dev/null +++ b/schema/verify/policies/application_revision_policies_001.sql @@ -0,0 +1,7 @@ +-- Verify ggircs-portal:policies/application_revision_policies_001 on pg + +BEGIN; + +select ggircs_portal_private.verify_policy_not_present('certifier_select_application_revision', 'ggircs_portal.application_revision'); + +ROLLBACK;