Function resolve_views_for_sub

crates/expr/src/rls.rs:15–54

The main driver of RLS resolution for subscription queries. Mainly a wrapper around [resolve_views_for_expr].

(
    tx: &impl SchemaView,
    expr: ProjectName,
    auth: &AuthCtx,
    has_param: &mut bool,
)

/// The main driver of RLS resolution for subscription queries.
/// Mainly a wrapper around [resolve_views_for_expr].
pub fn resolve_views_for_sub(
    tx: &impl SchemaView,
    expr: ProjectName,
    auth: &AuthCtx,
    has_param: &mut bool,
) -> anyhow::Result<Vec<ProjectName>> {
    // RLS does not apply to the database owner
    if auth.bypass_rls() {
        return Ok(vec![expr]);
    }

    let Some(return_name) = expr.return_name().cloned() else {
        anyhow::bail!("Could not determine return type during RLS resolution")
    };

    // Unwrap the underlying `RelExpr`
    let expr = match expr {
        ProjectName::None(expr) | ProjectName::Some(expr, _) => expr,
    };

    resolve_views_for_expr(
        tx,
        expr,
        // Do not ignore the return table when checking for RLS rules
        None,
        // Resolve list is empty as we are not yet resolving any RLS rules
        Rc::new(ResolveList::None),
        has_param,
        &mut 0,
        auth,
    )
    .map(|fragments| {
        fragments
            .into_iter()
            // The expanded fragments could be join trees,
            // so wrap each of them in an outer project.
            .map(|expr| ProjectName::Some(expr, return_name.clone()))
            .collect()
    })
}

/// The main driver of RLS resolution for sql queries.
/// Mainly a wrapper around [resolve_views_for_expr].