Function alter_function

nodedb/src/control/server/pgwire/ddl/function/alter.rs:14–79

Handle `ALTER FUNCTION OWNER TO `

(
    state: &SharedState,
    identity: &AuthenticatedIdentity,
    parts: &[&str],
)

/// Handle `ALTER FUNCTION <name> OWNER TO <new_owner>`
pub fn alter_function(
    state: &SharedState,
    identity: &AuthenticatedIdentity,
    parts: &[&str],
) -> PgWireResult<Vec<Response>> {
    require_tenant_admin(identity, "alter functions")?;

    if parts.len() < 4 {
        return Err(sqlstate_error(
            "42601",
            "syntax: ALTER FUNCTION <name> OWNER TO <user> | SET (FUEL=N, MEMORY=N)",
        ));
    }

    let name = parts[2].to_lowercase();
    let action = parts[3].to_uppercase();

    // ALTER FUNCTION <name> SET (FUEL = N, MEMORY = N)
    if action == "SET" {
        return alter_function_limits(state, identity, &name, parts);
    }

    // ALTER FUNCTION <name> OWNER TO <new_owner>
    if action != "OWNER" || parts.len() < 6 || !parts[4].eq_ignore_ascii_case("TO") {
        return Err(sqlstate_error(
            "42601",
            "syntax: ALTER FUNCTION <name> OWNER TO <user> | SET (FUEL=N, MEMORY=N)",
        ));
    }

    let new_owner = parts[5].trim_end_matches(';').to_string();

    let tenant_id = identity.tenant_id.as_u64();
    let catalog = state
        .credentials
        .catalog()
        .as_ref()
        .ok_or_else(|| sqlstate_error("XX000", "system catalog not available"))?;

    let mut func = catalog
        .get_function(tenant_id, &name)
        .map_err(|e| sqlstate_error("XX000", &e.to_string()))?
        .ok_or_else(|| sqlstate_error("42883", &format!("function '{name}' does not exist")))?;

    let old_owner = func.owner.clone();
    func.owner = new_owner.clone();
    // Route through the same metadata-raft propose path every other
    // parent-replicated ALTER uses. The applier's
    // `owner::put_parent_owner` companion write rebinds the OWNERS
    // table to the new owner cluster-wide — without this, an
    // ALTER FUNCTION OWNER TO updated only the function row's
    // in-band `owner` field and the OWNERS table still resolved the
    // function to the previous owner, silently breaking permission
    // transfer.
    let entry = crate::control::catalog_entry::CatalogEntry::PutFunction(Box::new(func.clone()));
    super::super::catalog_propose::propose_and_apply(state, &entry)?;

    state.audit_record(