@contember/engine-content-api 1.2.0-rc.4 → 1.3.0-alpha.1

package/tests/cases/integration/graphQlRequests/update/manyHasManyInverse/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithCategories } from './schema'
@@ -27,17 +27,16 @@ test('delete', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."post"
-              where "id" in (select "root_"."id"
-                             from "public"."post" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."post" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
 			]),
 		],
 		return: {
@@ -50,3 +49,43 @@ test('delete', async () => {
 	})
 })
 
+
+test('delete - denied', async () => {
+	await execute({
+		schema: postWithCategories,
+		query: GQL`mutation {
+        updateCategory(
+            by: {id: "${testUuid(2)}"},
+            data: {posts: [{delete: {id: "${testUuid(1)}"}}]}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updateCategory: {
+					ok: false,
+				},
+			},
+		},
+	})
+})

package/tests/cases/integration/graphQlRequests/update/manyHasManyOwning/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithCategories } from './schema'
@@ -27,17 +27,16 @@ test('delete', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."category"
-              where "id" in (select "root_"."id"
-                             from "public"."category" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."category" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
 			]),
 		],
 		return: {
@@ -50,3 +49,43 @@ test('delete', async () => {
 	})
 })
 
+
+test('delete - denied', async () => {
+	await execute({
+		schema: postWithCategories,
+		query: GQL`mutation {
+        updatePost(
+            by: {id: "${testUuid(2)}"},
+            data: {categories: [{delete: {id: "${testUuid(1)}"}}]}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."category" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updatePost: {
+					ok: false,
+				},
+			},
+		},
+	})
+})

package/tests/cases/integration/graphQlRequests/update/manyHasOne/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithAuthor, postWithNullableAuthor } from './schema'
@@ -36,31 +36,21 @@ test('delete', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."author"
-              where "id" in (select "root_"."id"
-                             from "public"."author" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-					{
-						sql: SQL`
-								with "newdata_" as
-								(select ? :: uuid as "author_id", "root_"."id"
-									from "public"."post" as "root_"
-									where "root_"."author_id" in (?))
-								update "public"."post" set "author_id" = "newdata_"."author_id"
-								from "newdata_"
-								where "post"."id" = "newdata_"."id"`,
-						parameters: [null, testUuid(1)],
-						response: {
-							rowCount: 1,
-						},
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", "root_"."author_id" as "ref", true as "allowed" from "public"."post" as "root_" where "author_id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(2), ref: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."author" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: {  },
+				},
 			]),
 		],
 		return: {
@@ -72,6 +62,7 @@ test('delete', async () => {
 		},
 	})
 })
+
 test('delete with cascade', async () => {
 	await execute({
 		schema: postWithAuthor,
@@ -104,30 +95,21 @@ test('delete with cascade', async () => {
 					parameters: [testUuid(1)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."author"
-              where "id" in (select "root_"."id"
-                             from "public"."author" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-					{
-						sql: SQL`
-								delete from "public"."post"
-								where "id" in
-									(select "root_"."id"
-									from "public"."post" as "root_"
-									where "root_"."author_id" in (?))
-								returning "id"`,
-						parameters: [testUuid(1)],
-						response: {
-							rows: [{ id: testUuid(2) }],
-						},
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", "root_"."author_id" as "ref", true as "allowed" from "public"."post" as "root_" where "author_id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(2), ref: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."author" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: {  },
+				},
 			]),
 		],
 		return: {
@@ -140,3 +122,57 @@ test('delete with cascade', async () => {
 	})
 })
 
+test('delete with cascade - denied', async () => {
+	await execute({
+		schema: postWithAuthor,
+		query: GQL`mutation {
+        updatePost(
+            by: {id: "${testUuid(2)}"},
+            data: {author: {delete: true}}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."author_id"
+                       from "public"."post" as "root_"
+                       where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: {
+						rows: [{ author_id: testUuid(1) }],
+					},
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."author" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", "root_"."author_id" as "ref", true as "allowed" from "public"."post" as "root_" where "author_id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(2), ref: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updatePost: {
+					ok: false,
+				},
+			},
+		},
+	})
+})
+

package/tests/cases/integration/graphQlRequests/update/oneHasMany/combination.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithLocale } from './schema'
@@ -27,17 +27,16 @@ test('delete and create', async () => {
 					parameters: ['cs', testUuid(2)],
 					response: { rows: [{ id: testUuid(9) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."post_locale"
-              where "id" in (select "root_"."id"
-                             from "public"."post_locale" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(9)],
-						response: { rows: [{ id: testUuid(9) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post_locale" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(9)],
+					response: { rows: [{ id: testUuid(9), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."post_locale" where "id" in (?)`,
+					parameters: [testUuid(9)],
+					response: { rows: [{ id: testUuid(9) }] },
+				},
 				{
 					sql: SQL`with "root_" as
 							(select ? :: uuid as "id", ? :: text as "title", ? :: text as "locale", ? :: uuid as "post_id")

package/tests/cases/integration/graphQlRequests/update/oneHasMany/delete.test.ts

@@ -1,5 +1,5 @@
 import { test } from 'vitest'
-import { execute, sqlDeferred, sqlTransaction } from '../../../../../src/test'
+import { execute, failedTransaction, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
 import { postWithLocale } from './schema'
@@ -27,17 +27,16 @@ test('delete', async () => {
 					parameters: ['cs', testUuid(2)],
 					response: { rows: [{ id: testUuid(1) }] },
 				},
-				...sqlDeferred([
-					{
-						sql: SQL`delete from "public"."post_locale"
-              where "id" in (select "root_"."id"
-                             from "public"."post_locale" as "root_"
-                             where "root_"."id" = ?)
-              returning "id"`,
-						parameters: [testUuid(1)],
-						response: { rows: [{ id: testUuid(1) }] },
-					},
-				]),
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post_locale" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: true }] },
+				},
+				{
+					sql: SQL`delete from "public"."post_locale" where "id" in (?)`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
 			]),
 		],
 		return: {
@@ -50,3 +49,43 @@ test('delete', async () => {
 	})
 })
 
+
+test('delete - denied', async () => {
+	await execute({
+		schema: postWithLocale,
+		query: GQL`mutation {
+        updatePost(
+            by: {id: "${testUuid(2)}"},
+            data: {locales: [{delete: {locale: "cs"}}]}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...failedTransaction([
+				{
+					sql: SQL`select "root_"."id" from "public"."post" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" from "public"."post_locale" as "root_" where "root_"."locale" = ? and "root_"."post_id" = ?`,
+					parameters: ['cs', testUuid(2)],
+					response: { rows: [{ id: testUuid(1) }] },
+				},
+				{
+					sql: SQL`select "root_"."id" as "id", true as "allowed" from "public"."post_locale" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: { rows: [{ id: testUuid(1), allowed: false }] },
+				},
+			]),
+		],
+		return: {
+			data: {
+				updatePost: {
+					ok: false,
+				},
+			},
+		},
+	})
+})

package/tests/cases/integration/graphQlRequests/update/oneHasOneInverse/connect.test.ts

@@ -2,7 +2,7 @@ import { test } from 'vitest'
 import { execute, sqlTransaction } from '../../../../../src/test'
 import { GQL, SQL } from '../../../../../src/tags'
 import { testUuid } from '../../../../../src/testUuid'
-import { siteSettingSchema } from './schema'
+import { siteSettingSchema, siteSettingSchemaWithOrphanRemoval } from './schema'
 
 test('connect - same owner', async () => {
 	await execute({
@@ -107,6 +107,7 @@ test('connect - no owner', async () => {
 		},
 	})
 })
+
 test('connect - different owner', async () => {
 	await execute({
 		schema: siteSettingSchema,
@@ -179,3 +180,107 @@ test('connect - different owner', async () => {
 	})
 })
 
+test('connect - different owner & orphan removal enabled', async () => {
+	await execute({
+		schema: siteSettingSchemaWithOrphanRemoval,
+		query: GQL`mutation {
+        updateSiteSetting(
+            by: {id: "${testUuid(2)}"},
+            data: {site: {connect: {id: "${testUuid(1)}"}}}
+          ) {
+          ok
+        }
+      }`,
+		executes: [
+			...sqlTransaction([
+				// inverse side
+				{
+					sql: SQL`select "root_"."id" from "public"."site_setting" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(2)],
+					response: { rows: [{ id: testUuid(2) }] },
+				},
+				// new owner
+				{
+					sql: SQL`select "root_"."id" from "public"."site" as "root_" where "root_"."id" = ?`,
+					parameters: [testUuid(1)],
+					response: {
+						rows: [{ id: testUuid(1) }],
+					},
+				},
+				// current owner
+				{
+					sql: SQL`select "root_"."id"
+                       from "public"."site" as "root_"
+                       where "root_"."setting_id" = ?`,
+					parameters: [testUuid(2)],
+					response: {
+						rows: [{ id: testUuid(3) }],
+					},
+				},
+				// set current owner to null
+				{
+					sql: SQL`with "newData_" as
+              (select
+                 ? :: uuid as "setting_id",
+                 "root_"."id",
+                 "root_"."name"
+               from "public"."site" as "root_"
+               where "root_"."id" = ?) update "public"."site"
+              set "setting_id" = "newData_"."setting_id" from "newData_"
+              where "site"."id" = "newData_"."id"`,
+					parameters: [null, testUuid(3)],
+					response: { rowCount: 1 },
+				},
+				// current inverse of new owner
+				{
+					sql: 'select "root_"."setting_id"  from "public"."site" as "root_"   where "root_"."id" = ?',
+					parameters: [testUuid(1)],
+					response: { rows: [{ setting_id: testUuid(4) }] },
+				},
+				// update inverse of new owner
+				{
+					sql: SQL`with "newData_" as
+              (select
+                 ? :: uuid as "setting_id",
+                 "root_"."id",
+                 "root_"."name"
+               from "public"."site" as "root_"
+               where "root_"."id" = ?) update "public"."site"
+              set "setting_id" = "newData_"."setting_id" from "newData_"
+              where "site"."id" = "newData_"."id"`,
+					parameters: [testUuid(2), testUuid(1)],
+					response: { rowCount: 1 },
+				},
+				{
+					sql: 'select "root_"."id"  from "public"."site_setting" as "root_"   where "root_"."id" = ?',
+					parameters: [testUuid(4)],
+					response: { rows: [{ id: testUuid(4) }] },
+				},
+				// delete orphaned inverse side
+				{
+					sql: 'select "root_"."id" as "id", true as "allowed" from "public"."site_setting" as "root_" where "root_"."id" = ?',
+					parameters: [testUuid(4)],
+					response: { rows: [{ id: testUuid(4), allowed: true }] },
+				},
+				{
+					sql: 'select "root_"."id" as "id", "root_"."setting_id" as "ref" from "public"."site" as "root_" where "setting_id" in (?)',
+					parameters: [testUuid(4)],
+					response: { rows: [] },
+				},
+				{
+					sql: 'DELETE FROM "public"."site_setting" WHERE "id" IN (?)',
+					parameters: [testUuid(4)],
+					response: { rowCount: 1 },
+				},
+
+			]),
+		],
+		return: {
+			data: {
+				updateSiteSetting: {
+					ok: true,
+				},
+			},
+		},
+	})
+})

package/tests/cases/integration/graphQlRequests/update/oneHasOneInverse/create.test.ts

@@ -5,11 +5,14 @@ import { testUuid } from '../../../../../src/testUuid'
 import { siteSettingSchema } from './schema'
 
 test('create', async () => {
+	const settingId = testUuid(2)
+	const oldSiteId = testUuid(3)
+	const newSiteId = testUuid(1)
 	await execute({
 		schema: siteSettingSchema,
 		query: GQL`mutation {
         updateSiteSetting(
-            by: {id: "${testUuid(2)}"},
+            by: {id: "${settingId}"},
             data: {site: {create: {name: "Mangoweb"}}}
           ) {
           ok
@@ -19,8 +22,8 @@ test('create', async () => {
 			...sqlTransaction([
 				{
 					sql: SQL`select "root_"."id" from "public"."site_setting" as "root_" where "root_"."id" = ?`,
-					parameters: [testUuid(2)],
-					response: { rows: [{ id: testUuid(2) }] },
+					parameters: [settingId],
+					response: { rows: [{ id: settingId }] },
 				},
 				// {
 				// 	sql: SQL`select "root_"."id" as "root_id", "root_"."id" as "root_id" from "public"."site_setting" as "root_" where "root_"."id" = ?`,
@@ -40,19 +43,22 @@ test('create', async () => {
 					sql: SQL`select "root_"."id"
                        from "public"."site" as "root_"
                        where "root_"."setting_id" = ?`,
-					parameters: [testUuid(2)],
+					parameters: [settingId],
 					response: {
-						rows: [{ id: testUuid(3) }],
+						rows: [{ id: oldSiteId }],
 					},
 				},
 				{
-					sql: SQL`
-						with "newData_" as
-						(select ? :: uuid as "setting_id", "root_"."id", "root_"."name"  from "public"."site" as "root_"  where "root_"."id" = ?)
-						update  "public"."site" set  "setting_id" =  "newData_"."setting_id"
-						from "newData_"  where "site"."id" = "newData_"."id"
-					`,
-					parameters: [null, testUuid(3)],
+					sql: SQL`with "newData_" as
+              (select
+                 ? :: uuid as "setting_id",
+                 "root_"."id",
+                 "root_"."name"
+               from "public"."site" as "root_"
+               where "root_"."id" = ?) update "public"."site"
+              set "setting_id" = "newData_"."setting_id" from "newData_"
+              where "site"."id" = "newData_"."id"`,
+					parameters: [null, oldSiteId],
 					response: { rowCount: 1 },
 				},
 				{
@@ -62,8 +68,8 @@ test('create', async () => {
 							select "root_"."id", "root_"."name", "root_"."setting_id"
               from "root_"
 							returning "id"`,
-					parameters: [testUuid(1), 'Mangoweb', testUuid(2)],
-					response: { rows: [{ id: testUuid(1) }] },
+					parameters: [newSiteId, 'Mangoweb', settingId],
+					response: { rows: [{ id: newSiteId }] },
 				},
 			]),
 		],