Method grantDatabase

server/node/grant.go:261–289

grantDatabase handles *GrantDatabase from within RowIter.

(ctx *sql.Context)

// grantDatabase handles *GrantDatabase from within RowIter.
func (g *Grant) grantDatabase(ctx *sql.Context) error {
	roles, userRole, err := g.common(ctx)
	if err != nil {
		return err
	}
	for _, role := range roles {
		for _, database := range g.GrantDatabase.Databases {
			key := auth.DatabasePrivilegeKey{
				Role: userRole.ID(),
				Name: database,
			}
			for _, privilege := range g.GrantDatabase.Privileges {
				grantedBy := auth.HasDatabasePrivilegeGrantOption(key, privilege)
				if !grantedBy.IsValid() {
					// TODO: grab the actual error message
					return errors.Errorf(`role "%s" does not have permission to grant this privilege`, userRole.Name)
				}
				auth.AddDatabasePrivilege(auth.DatabasePrivilegeKey{
					Role: role.ID(),
					Name: database,
				}, auth.GrantedPrivilege{
					Privilege: privilege,
					GrantedBy: grantedBy,
				}, g.WithGrantOption)
			}
		}
	}
	return nil
}

// grantSequence handles *GrantSequence from within RowIter.
func (g *Grant) grantSequence(ctx *sql.Context) error {