hostsharing/hs.hsadmin.ng
6
0
Fork 0
Code Pull Requests 3 Activity

hoist select queryAccessibleObjectUuidsOfSubjectIds(...) into WITH CTE for better performance

Browse Source
This commit is contained in:
Michael Hoennig 2022-10-17 12:18:12 +02:00
parent 368da1cc95
commit 63db939583
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/main/resources/db/changelog/058-rbac-generators.sql
View File

@ -143,15 +143,17 @@ begin
/* /*
Creates a restricted view based on the 'view' permission of the current subject. Creates a restricted view based on the 'view' permission of the current subject.
*/ */
-- TODO.refa: hoist `select queryAccessibleObjectUuidsOfSubjectIds(...)` into WITH CTE for performance
sql := format($sql$ sql := format($sql$
set session session authorization default; set session session authorization default;
create view %1$s_rv as create view %1$s_rv as
select target.* with accessibleObjects as (
from %1$s as target select queryAccessibleObjectUuidsOfSubjectIds('view', '%1$s', currentSubjectsUuids())
where target.uuid in (select queryAccessibleObjectUuidsOfSubjectIds('view', '%1$s', currentSubjectsUuids())) )
order by %2$s; select target.*
grant all privileges on %1$s_rv to restricted; from %1$s as target
where target.uuid in (select * from accessibleObjects)
order by %2$s;
grant all privileges on %1$s_rv to restricted;
$sql$, targetTable, orderBy); $sql$, targetTable, orderBy);
execute sql; execute sql;