76 lines
1.8 KiB
PL/PgSQL
Executable File
76 lines
1.8 KiB
PL/PgSQL
Executable File
-- Type: DO
|
|
-- Name: users
|
|
-- Description: users table
|
|
|
|
BEGIN;
|
|
|
|
CREATE ROLE omnivore_user;
|
|
CREATE EXTENSION "pgcrypto";
|
|
CREATE EXTENSION "uuid-ossp";
|
|
|
|
CREATE SCHEMA omnivore;
|
|
|
|
GRANT usage ON SCHEMA omnivore TO omnivore_user;
|
|
|
|
CREATE OR REPLACE FUNCTION omnivore.set_claims(
|
|
user_id uuid,
|
|
user_role text
|
|
) RETURNS VOID AS $$
|
|
BEGIN
|
|
EXECUTE format('set local omnivore_user.uid to %I', user_id);
|
|
EXECUTE format('set local role %I', user_role);
|
|
END;
|
|
$$ LANGUAGE plpgsql;
|
|
|
|
CREATE OR REPLACE FUNCTION omnivore.get_current_user_id()
|
|
RETURNS uuid AS $$
|
|
BEGIN
|
|
RETURN COALESCE(NULLIF(current_setting('omnivore_user.uid', true), '')::uuid, UUID('00000000-0000-0000-0000-000000000000'));
|
|
END;
|
|
$$ LANGUAGE plpgsql;
|
|
|
|
CREATE OR REPLACE FUNCTION update_updated_at_column()
|
|
RETURNS TRIGGER AS $$
|
|
BEGIN
|
|
NEW.updated_at = now();
|
|
RETURN NEW;
|
|
END;
|
|
$$ language 'plpgsql';
|
|
|
|
CREATE TYPE registration_type AS ENUM ('EMAIL', 'GOOGLE', 'TWITTER');
|
|
|
|
CREATE TABLE omnivore.user (
|
|
id uuid PRIMARY KEY DEFAULT uuid_generate_v1mc(),
|
|
first_name text,
|
|
last_name text,
|
|
username text NOT NULL,
|
|
bio text,
|
|
source registration_type NOT NULL,
|
|
email text,
|
|
phone text,
|
|
picture text,
|
|
twitter_id text NOT NULL UNIQUE,
|
|
created_at timestamptz NOT NULL default current_timestamp
|
|
);
|
|
|
|
CREATE TRIGGER update_user_modtime BEFORE UPDATE ON omnivore.user FOR EACH ROW EXECUTE PROCEDURE update_updated_at_column();
|
|
|
|
ALTER TABLE omnivore.user ENABLE ROW LEVEL SECURITY;
|
|
|
|
CREATE POLICY read_user on omnivore.user
|
|
FOR SELECT TO omnivore_user
|
|
USING (true);
|
|
|
|
CREATE POLICY create_user on omnivore.user
|
|
FOR INSERT TO omnivore_user
|
|
WITH CHECK (true);
|
|
|
|
CREATE POLICY update_user on omnivore.user
|
|
FOR UPDATE TO omnivore_user
|
|
USING (id = omnivore.get_current_user_id());
|
|
|
|
GRANT SELECT, INSERT, UPDATE ON omnivore.user TO omnivore_user;
|
|
|
|
|
|
COMMIT;
|