pg_examiner 0.5.0 → 0.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0f0b45d7de01a4c4c9eb219e9af2230c1be298054b0536532f0b8df59acfb975
-  data.tar.gz: 480c34dce57910a34684d4628d59091c628cfc1c19d639609ce82f4f6642a1fa
+  metadata.gz: 97dbbbfede24a927c3f330b55b3ccf5df361d2fecd607fcd6a0567dfeb81ba00
+  data.tar.gz: f9dab98fdf931d26a2fb75d8e89f3b2ccd528fea1017619b618d154c697bdbbf
 SHA512:
-  metadata.gz: aa526ad1672741dc313073398ddebc053fda99ea83cbe79e3fda05f66d96937ce28639e4e0fe86408520527ff897e35e00db44929fa73a74e63062e425567596
-  data.tar.gz: 1a0a64fd9889d84d553a32c9bc8ff0e348b0460a94a1b4e782fd888c45598ebbafcb1405c10ff1538df1bb62575e09b148d2c1e1d92c15c7b18a985241e143b8
+  metadata.gz: 83409a8174c21bd6885f3cfc858fa6aba351188804ca235ac6e37f1d06316602dccddaae115f11e74f034ebd8d8e9b289c861841362904080bad10d375b11c42
+  data.tar.gz: da864e8f1ccdfdf7f014a2f56fa3657b35182c11e4d84b2017e30a7c79c7812847a3c214f042043902f7e85a960596b45c2bcc8d9934a825d81c872eae50b581

data/lib/pg_examiner/result/table.rb

@@ -9,6 +9,7 @@ module PGExaminer
           "indexes"     => "indexes",
           "constraints" => "constraints",
           "triggers"    => "triggers",
+          "permissions" => "permissions",
         }
       end
 
@@ -43,6 +44,43 @@ module PGExaminer
           t['tgrelid'] == oid
         end.map{|row| Trigger.new(result, row, self)}.sort_by(&:name)
       end
+
+      def permissions
+        @permissions ||= begin
+          if acl = @row["relacl"]
+            acl[/^{(.*)}$/, 1].split(",").map{|acl| Permission.new(acl)}.sort_by(&:name)
+          else
+            []
+          end
+        end
+      end
+
+      class Permission < Base
+        attr_accessor :name, :grantor, :permissions
+
+        CHARS_TO_LABELS = {
+          "r" => "SELECT", # "read"
+          "w" => "UPDATE", # "write"
+          "a" => "INSERT", # "append"
+          "d" => "DELETE",
+          "D" => "TRUNCATE",
+          "x" => "REFERENCES",
+          "t" => "TRIGGER",
+        }.freeze
+
+        def initialize(acl)
+          @name, permissions = acl.split("=")
+          permissions, @grantor = permissions.split("/")
+          @permissions = permissions.split("").map{|char| CHARS_TO_LABELS.fetch(char)}
+        end
+
+        def diffable_methods
+          {
+            "grantor"     => "grantor",
+            "permissions" => "permissions",
+          }
+        end
+      end
     end
   end
 end

data/lib/pg_examiner/result.rb

@@ -64,7 +64,7 @@ module PGExaminer
       SQL
 
       @pg_class = load_table @pg_namespace.map{|ns| ns['oid']}, <<-SQL
-        SELECT oid, relname AS name, relkind, relpersistence, reloptions, relnamespace
+        SELECT oid, relname AS name, relkind, relpersistence, reloptions, relnamespace, relacl
         FROM pg_class
         WHERE relnamespace IN (?)
       SQL

data/lib/pg_examiner/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PGExaminer
-  VERSION = '0.5.0'
+  VERSION = '0.5.1'
 end

data/spec/role_and_permissions_spec.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PGExaminer do
+  it "should be able to tell when roles have different permissions on tables" do
+    a = examine <<-SQL
+      CREATE ROLE user_1;
+
+      CREATE TABLE test_table (
+        id integer
+      );
+
+      GRANT SELECT ON test_table TO user_1;
+    SQL
+
+    b = examine <<-SQL
+      CREATE ROLE user_1;
+
+      CREATE TABLE test_table (
+        id integer
+      );
+
+      GRANT SELECT, UPDATE ON test_table TO user_1;
+    SQL
+
+    a.diff(b).should == {"schemas"=>{"public"=>{"tables"=>{"test_table"=>{"permissions"=>{"user_1"=>{"permissions"=>{["SELECT"]=>["SELECT", "UPDATE"]}}}}}}}}
+  end
+
+  it "should ignore inconsequential differences in permissions" do
+    a = examine <<-SQL
+      CREATE ROLE user_1;
+
+      CREATE TABLE test_table (
+        id integer
+      );
+
+      GRANT UPDATE, SELECT ON test_table TO user_1;
+    SQL
+
+    b = examine <<-SQL
+      CREATE ROLE user_1;
+
+      CREATE TABLE test_table (
+        id integer
+      );
+
+      GRANT SELECT, UPDATE ON test_table TO user_1;
+    SQL
+
+    a.diff(b).should == {}
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pg_examiner
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.5.1
 platform: ruby
 authors:
 - Chris Hanks
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-10-23 00:00:00.000000000 Z
+date: 2019-02-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pg
@@ -115,6 +115,7 @@ files:
 - spec/function_spec.rb
 - spec/index_spec.rb
 - spec/language_spec.rb
+- spec/role_and_permissions_spec.rb
 - spec/schema_spec.rb
 - spec/sequence_spec.rb
 - spec/spec_helper.rb
@@ -150,6 +151,7 @@ test_files:
 - spec/function_spec.rb
 - spec/index_spec.rb
 - spec/language_spec.rb
+- spec/role_and_permissions_spec.rb
 - spec/schema_spec.rb
 - spec/sequence_spec.rb
 - spec/spec_helper.rb