Method grantRoutine

server/node/grant.go:329–365

grantRoutine handles *GrantRoutine from within RowIter.

(ctx *sql.Context)

// grantRoutine handles *GrantRoutine from within RowIter.
func (g *Grant) grantRoutine(ctx *sql.Context) error {
	roles, userRole, err := g.common(ctx)
	if err != nil {
		return err
	}
	for _, role := range roles {
		for _, routine := range g.GrantRoutine.Routines {
			schemaName, err := core.GetSchemaName(ctx, nil, routine.Schema)
			if err != nil {
				return err
			}
			key := auth.RoutinePrivilegeKey{
				Role:     userRole.ID(),
				Schema:   schemaName,
				Name:     routine.Name,
				ArgTypes: routine.ArgTypes,
			}
			for _, privilege := range g.GrantRoutine.Privileges {
				grantedBy := auth.HasRoutinePrivilegeGrantOption(key, privilege)
				if !grantedBy.IsValid() {
					// TODO: grab the actual error message
					return errors.Errorf(`role "%s" does not have permission to grant this privilege`, userRole.Name)
				}
				auth.AddRoutinePrivilege(auth.RoutinePrivilegeKey{
					Role:     role.ID(),
					Schema:   schemaName,
					Name:     routine.Name,
					ArgTypes: routine.ArgTypes,
				}, auth.GrantedPrivilege{
					Privilege: privilege,
					GrantedBy: grantedBy,
				}, g.WithGrantOption)
			}
		}
	}
	return nil
}

// grantRole handles *GrantRole from within RowIter.
func (g *Grant) grantRole(ctx *sql.Context) error {