Function validateAlterOperation

edgraph/server.go:198–232

validateAlterOperation validates the given operation for alter. The structural checks (field set, health, drop consistency, mutations-allowed) always run; the admin-IP-whitelist and ACL authorization checks run only when doAuth is NeedAuthorize. doAuth is NoAuthorize for trusted in-process callers (

(ctx context.Context, op *api.Operation, doAuth AuthMode)

// when doAuth is NeedAuthorize. doAuth is NoAuthorize for trusted in-process
// callers (see AlterNoAuth) that run with a context carrying no gRPC peer.
func validateAlterOperation(ctx context.Context, op *api.Operation, doAuth AuthMode) error {
	// The following code block checks if the operation should run or not.
	if op.Schema == "" && op.DropAttr == "" && !op.DropAll && op.DropOp == api.Operation_NONE {
		// Must have at least one field set. This helps users if they attempt
		// to set a field but use the wrong name (could be decoded from JSON).
		return errors.Errorf("Operation must have at least one field set")
	}
	if err := x.HealthCheck(); err != nil {
		return err
	}

	if isDropAll(op) && op.DropOp == api.Operation_DATA {
		return errors.Errorf("Only one of DropAll and DropData can be true")
	}

	if !isMutationAllowed(ctx) {
		return errors.Errorf("No mutations allowed by server.")
	}

	if doAuth == NoAuthorize {
		return nil
	}

	if _, err := hasAdminAuth(ctx, "Alter"); err != nil {
		glog.Warningf("Alter denied with error: %v\n", err)
		return err
	}

	if err := authorizeAlter(ctx, op); err != nil {
		glog.Warningf("Alter denied with error: %v\n", err)
		return err
	}

	return nil
}

// parseSchemaFromAlterOperation parses the string schema given in input operation to a Go
// struct, and performs some checks to make sure that the schema is valid.