Function TestCreatePolicyWithPgquery

database/postgres/parser_test.go:215–298

(t *testing.T)

}

func TestCreatePolicyWithPgquery(t *testing.T) {
	t.Setenv("PSQLDEF_PARSER", "pgquery")

	tests := []struct {
		name           string
		sql            string
		wantTable      string
		wantPermissive parser.Permissive
		wantScope      string
		wantRoles      []string
		wantUsing      string
		wantWithCheck  string
	}{
		{
			name: "permissive policy with public role and predicates",
			sql: `
CREATE POLICY tenant_isolation_policy ON public.test_table AS PERMISSIVE FOR ALL TO public
USING ((tenant_id)::uuid = tenant_uuid)
WITH CHECK (tenant_id > 0);
`,
			wantTable:      "public.test_table",
			wantPermissive: parser.Permissive("PERMISSIVE"),
			wantScope:      "ALL",
			wantRoles:      []string{"public"},
			wantUsing:      "tenant_id::uuid = tenant_uuid",
			wantWithCheck:  "tenant_id > 0",
		},
		{
			name: "restrictive policy with named role and using only",
			sql: `
CREATE POLICY p_users ON users AS RESTRICTIVE FOR SELECT TO postgres
USING (id = 1);
`,
			wantTable:      "users",
			wantPermissive: parser.Permissive("RESTRICTIVE"),
			wantScope:      "SELECT",
			wantRoles:      []string{"postgres"},
			wantUsing:      "id = 1",
		},
		{
			name: "policy without roles or predicates",
			sql: `
CREATE POLICY p_all ON users;
`,
			wantTable:      "users",
			wantPermissive: parser.Permissive("PERMISSIVE"),
			wantScope:      "ALL",
			wantRoles:      []string{"public"},
		},
	}

	sqlParser := NewParserWithMode(PsqldefParserModePgquery)
	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			statements, err := sqlParser.Parse(tt.sql)
			require.NoError(t, err)
			require.Len(t, statements, 1)