@contember/engine-content-api 1.2.0-rc.3 → 1.3.0-alpha.1

package/tests/cases/integration/graphQlRequests/insert/manyHasOne/connectOrCreate.test.ts

@@ -0,0 +1,106 @@
+import { test } from 'vitest'
+import { execute, sqlTransaction } from '../../../../../src/test'
+import { SchemaBuilder } from '@contember/schema-definition'
+import { Model } from '@contember/schema'
+import { GQL, SQL } from '../../../../../src/tags'
+import { testUuid } from '@contember/engine-api-tester'
+
+test('create posts and connect/create author (exists, many has one)', async () => {
+	await execute({
+		schema: new SchemaBuilder()
+			.entity('Post', e =>
+				e.column('publishedAt', c => c.type(Model.ColumnType.DateTime)).manyHasOne('author', r => r.target('Author')),
+			)
+			.entity('Author', e => e.column('name', c => c.type(Model.ColumnType.String).unique()))
+			.buildSchema(),
+		query: GQL`
+        mutation {
+          createPost(data: {
+            publishedAt: "2018-06-11",
+            author: {connectOrCreate: {connect: {name: "John"}, create: {name: "John"}}}
+          }) {
+			ok
+          }
+        }
+      `,
+		executes: [
+			...sqlTransaction([
+				{
+					sql: `select "root_"."id" from "public"."author" as "root_" where "root_"."name" = ?`,
+					parameters: ['John'],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: `with "root_" as (select ? :: uuid as "id", ? :: timestamptz as "published_at", ? :: uuid as "author_id")
+					insert into  "public"."post" ("id", "published_at", "author_id") select "root_"."id", "root_"."published_at", "root_"."author_id"  from "root_"  returning "id"`,
+					parameters: [testUuid(1), '2018-06-11', testUuid(2)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				createPost: {
+					ok: true,
+				},
+			},
+		},
+	})
+})
+
+
+test('create posts and connect/create author (not exists, many has one)', async () => {
+	await execute({
+		schema: new SchemaBuilder()
+			.entity('Post', e =>
+				e.column('publishedAt', c => c.type(Model.ColumnType.DateTime)).manyHasOne('author', r => r.target('Author')),
+			)
+			.entity('Author', e => e.column('name', c => c.type(Model.ColumnType.String).unique()))
+			.buildSchema(),
+		query: GQL`
+        mutation {
+          createPost(data: {
+            publishedAt: "2018-06-11",
+            author: {connectOrCreate: {connect: {name: "John"}, create: {name: "John"}}}
+          }) {
+			ok
+          }
+        }
+      `,
+		executes: [
+			...sqlTransaction([
+				{
+					sql: `select "root_"."id" from "public"."author" as "root_" where "root_"."name" = ?`,
+					parameters: ['John'],
+					response: { rows: [] },
+				},
+				{
+					sql: SQL`with "root_" as
+						(select ? :: uuid as "id", ? :: text as "name")
+						insert into "public"."author" ("id", "name")
+						select "root_"."id", "root_"."name"
+            from "root_"
+						returning "id"`,
+					parameters: [testUuid(2), 'John'],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: `with "root_" as (select ? :: uuid as "id", ? :: timestamptz as "published_at", ? :: uuid as "author_id")
+					insert into  "public"."post" ("id", "published_at", "author_id") select "root_"."id", "root_"."published_at", "root_"."author_id"  from "root_"  returning "id"`,
+					parameters: [testUuid(1), '2018-06-11', testUuid(2)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				createPost: {
+					ok: true,
+				},
+			},
+		},
+	})
+})
+
+
+

package/tests/cases/integration/graphQlRequests/update/manyHasManyInverse/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithCategories } from './schema'
@@ -27,17 +27,16 @@ test('delete', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."post"
-              where "id" in (select "root_"."id"
-                             from "public"."post" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."post" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
 			]),
 		],
 		return: {
@@ -50,3 +49,43 @@ test('delete', async () => {
 	})
 })
 
+
+test('delete - denied', async () => {
+	await execute({
+		schema: postWithCategories,
+		query: GQL`mutation {
+        updateCategory(
+            by: {id: "${testUuid(2)}"},
+            data: {posts: [{delete: {id: "${testUuid(1)}"}}]}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updateCategory: {
+					ok: false,
+				},
+			},
+		},
+	})
+})

package/tests/cases/integration/graphQlRequests/update/manyHasManyOwning/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithCategories } from './schema'
@@ -27,17 +27,16 @@ test('delete', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."category"
-              where "id" in (select "root_"."id"
-                             from "public"."category" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."category" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
 			]),
 		],
 		return: {
@@ -50,3 +49,43 @@ test('delete', async () => {
 	})
 })
 
+
+test('delete - denied', async () => {
+	await execute({
+		schema: postWithCategories,
+		query: GQL`mutation {
+        updatePost(
+            by: {id: "${testUuid(2)}"},
+            data: {categories: [{delete: {id: "${testUuid(1)}"}}]}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updatePost: {
+					ok: false,
+				},
+			},
+		},
+	})
+})

package/tests/cases/integration/graphQlRequests/update/manyHasOne/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithAuthor, postWithNullableAuthor } from './schema'
@@ -36,31 +36,21 @@ test('delete', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."author"
-              where "id" in (select "root_"."id"
-                             from "public"."author" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-					{
-						sql: SQL`
-								with "newdata_" as
-								(select ? :: uuid as "author_id", "root_"."id"
-									from "public"."post" as "root_"
-									where "root_"."author_id" in (?))
-								update "public"."post" set "author_id" = "newdata_"."author_id"
-								from "newdata_"
-								where "post"."id" = "newdata_"."id"`,
-						parameters: [null, testUuid(1)],
-						response: {
-							rowCount: 1,
-						},
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", "root_"."author_id" as "ref", true as "allowed" from "public"."post" as "root_" where "author_id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(2), ref: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."author" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: {  },
+				},
 			]),
 		],
 		return: {
@@ -72,6 +62,7 @@ test('delete', async () => {
 		},
 	})
 })
+
 test('delete with cascade', async () => {
 	await execute({
 		schema: postWithAuthor,
@@ -104,30 +95,21 @@ test('delete with cascade', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."author"
-              where "id" in (select "root_"."id"
-                             from "public"."author" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-					{
-						sql: SQL`
-								delete from "public"."post"
-								where "id" in
-									(select "root_"."id"
-									from "public"."post" as "root_"
-									where "root_"."author_id" in (?))
-								returning "id"`,
-						parameters: [testUuid(1)],
-						response: {
-							rows: [{ id: testUuid(2) }],
-						},
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", "root_"."author_id" as "ref", true as "allowed" from "public"."post" as "root_" where "author_id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(2), ref: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."author" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: {  },
+				},
 			]),
 		],
 		return: {
@@ -140,3 +122,57 @@ test('delete with cascade', async () => {
 	})
 })
 
+test('delete with cascade - denied', async () => {
+	await execute({
+		schema: postWithAuthor,
+		query: GQL`mutation {
+        updatePost(
+            by: {id: "${testUuid(2)}"},
+            data: {author: {delete: true}}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."author_id"
+                       from "public"."post" as "root_"
+                       where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: {
+						rows: [{ author_id: testUuid(1) }],
+					},
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", "root_"."author_id" as "ref", true as "allowed" from "public"."post" as "root_" where "author_id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(2), ref: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updatePost: {
+					ok: false,
+				},
+			},
+		},
+	})
+})
+

package/tests/cases/integration/graphQlRequests/update/oneHasMany/combination.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithLocale } from './schema'
@@ -27,17 +27,16 @@ test('delete and create', async () => {
 					parameters: ['cs', testUuid(2)],
 					response: { rows: [{ id: testUuid(9) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."post_locale"
-              where "id" in (select "root_"."id"
-                             from "public"."post_locale" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(9)],
-						response: { rows: [{ id: testUuid(9) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post_locale" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(9)],
+					response: { rows: [{ id: testUuid(9), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."post_locale" where "id" in (?)`,
+					parameters: [testUuid(9)],
+					response: { rows: [{ id: testUuid(9) }] },
+				},
 				{
 					sql: SQL`with "root_" as
 							(select ? :: uuid as "id", ? :: text as "title", ? :: text as "locale", ? :: uuid as "post_id")

package/tests/cases/integration/graphQlRequests/update/oneHasMany/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithLocale } from './schema'
@@ -27,17 +27,16 @@ test('delete', async () => {
 					parameters: ['cs', testUuid(2)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."post_locale"
-              where "id" in (select "root_"."id"
-                             from "public"."post_locale" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post_locale" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."post_locale" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
 			]),
 		],
 		return: {
@@ -50,3 +49,43 @@ test('delete', async () => {
 	})
 })
 
+
+test('delete - denied', async () => {
+	await execute({
+		schema: postWithLocale,
+		query: GQL`mutation {
+        updatePost(
+            by: {id: "${testUuid(2)}"},
+            data: {locales: [{delete: {locale: "cs"}}]}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."post_locale" as "root_" where "root_"."locale" = ? and "root_"."post_id" = ?`,
+					parameters: ['cs', testUuid(2)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post_locale" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updatePost: {
+					ok: false,
+				},
+			},
+		},
+	})
+})