Method getInstanceRoles

backend/plugin/db/cockroachdb/role.go:16–88

(ctx context.Context)

)

func (d *Driver) getInstanceRoles(ctx context.Context) ([]*storepb.InstanceRole, error) {
	query := `
		SELECT r.rolname, r.rolsuper, r.rolinherit, r.rolcreaterole, r.rolcreatedb, r.rolcanlogin, r.rolreplication, r.rolvaliduntil, r.rolbypassrls
		FROM pg_catalog.pg_roles r
		WHERE r.rolname !~ '^pg_';
	`
	var instanceRoles []*storepb.InstanceRole
	if err := crdb.Execute(func() error {
		rows, err := d.db.QueryContext(ctx, query)
		if err != nil {
			return err
		}
		defer rows.Close()
		for rows.Next() {
			var role string
			var super, inherit, createRole, createDB, canLogin, replication, bypassRLS bool
			var rolValidUntil sql.NullString
			if err := rows.Scan(
				&role,
				&super,
				&inherit,
				&createRole,
				&createDB,
				&canLogin,
				&replication,
				&rolValidUntil,
				&bypassRLS,
			); err != nil {
				return err
			}
			if pgparser.IsSystemUser(role) {
				continue
			}

			var attributes []string
			if super {
				attributes = append(attributes, "Superuser")
			}
			if !inherit {
				attributes = append(attributes, "No inheritance")
			}
			if createRole {
				attributes = append(attributes, "Create role")
			}
			if createDB {
				attributes = append(attributes, "Create DB")
			}
			if !canLogin {
				attributes = append(attributes, "Cannot login")
			}
			if replication {
				attributes = append(attributes, "Replication")
			}
			if rolValidUntil.Valid {
				attributes = append(attributes, fmt.Sprintf("Password valid until %s", rolValidUntil.String))
			}
			if bypassRLS {
				attributes = append(attributes, "Bypass RLS+")