api-foundry-query-engine 0.8.36__tar.gz → 0.8.38__tar.gz

{api_foundry_query_engine-0.8.36 → api_foundry_query_engine-0.8.38}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: api-foundry-query-engine
-Version: 0.8.36
+Version: 0.8.38
 Summary: The AWS lambda service handler use by the `api_foundry` project is a powerful tool designed to automate the deployment of REST APIs on AWS using Lambda services to access and interact with relational databases (RDBMS). This project leverages the OpenAPI specification to define and manage the APIs
 Project-URL: Documentation, https://github.com/DanRepik/api-foundry
 Project-URL: Source, https://github.com/DanRepik/api-foundry

{api_foundry_query_engine-0.8.36 → api_foundry_query_engine-0.8.38}/api_foundry_query_engine/dao/sql_delete_query_handler.py

@@ -110,7 +110,7 @@ class SQLDeleteSchemaQueryHandler(SQLSchemaQueryHandler):
     def sql(self) -> str:
         if not self.check_permission():
             raise ApplicationException(
-                402, f"Subject is not allowed to delete {self.schema_object.api_name}"
+                403, f"Subject is not allowed to delete {self.schema_object.api_name}"
             )
 
         concurrency_property = self.schema_object.concurrency_property

{api_foundry_query_engine-0.8.36 → api_foundry_query_engine-0.8.38}/api_foundry_query_engine/dao/sql_insert_query_handler.py

@@ -45,10 +45,14 @@ class SQLInsertSchemaQueryHandler(SQLSchemaQueryHandler):
     @property
     def sql(self) -> str:
         self.concurrency_property = self.schema_object.concurrency_property
+        # Get columns to return - use read permissions if available,
+        # otherwise fall back to primary key
+        returning_clause = self._get_returning_clause()
+        
         if not self.concurrency_property:
             return (
                 f"INSERT INTO {self.table_expression}{self.insert_values} "
-                + f"RETURNING {self.select_list}"
+                + returning_clause
             )
 
         if self.operation.store_params.get(self.concurrency_property.api_name):
@@ -61,9 +65,32 @@ class SQLInsertSchemaQueryHandler(SQLSchemaQueryHandler):
             )
         return (
             f"INSERT INTO {self.table_expression}{self.insert_values}"
-            + f" RETURNING {self.select_list}"
+            + returning_clause
         )
 
+    def _get_returning_clause(self) -> str:
+        """
+        Get RETURNING clause with fallback to primary key
+        if no read permissions.
+        """
+        try:
+            select_list = self.select_list
+            if select_list:
+                return f"RETURNING {select_list}"
+        except ApplicationException:
+            # If read permissions filter everything,
+            # return at least the primary key
+            pass
+        
+        # Fallback to primary key
+        pk_property = self.schema_object.primary_key_property
+        if pk_property:
+            return f"RETURNING {pk_property.column_name}"
+        
+        # Last resort - return nothing
+        # (should never happen with properly defined schemas)
+        return ""
+
     @property
     def insert_values(self) -> str:
         self.store_placeholders = {}
@@ -106,7 +133,7 @@ class SQLInsertSchemaQueryHandler(SQLSchemaQueryHandler):
                     raise ApplicationException(400, f"Invalid property: {name}")
                 else:
                     raise ApplicationException(
-                        402,
+                        403,
                         f"Subject is not allowed to create with property: {parts[0]}",
                     )
 

{api_foundry_query_engine-0.8.36 → api_foundry_query_engine-0.8.38}/api_foundry_query_engine/dao/sql_restore_query_handler.py

@@ -171,8 +171,9 @@ class SQLRestoreSchemaQueryHandler(SQLSchemaQueryHandler):
     def sql(self) -> str:
         if not self.check_permission():
             raise ApplicationException(
-                402,
-                "Subject is not allowed to restore " + f"{self.schema_object.api_name}",
+                403,
+                f"Subject is not allowed to restore "
+                f"{self.schema_object.api_name}",
             )
 
         if not self.schema_object.has_soft_delete_support():

{api_foundry_query_engine-0.8.36 → api_foundry_query_engine-0.8.38}/api_foundry_query_engine/dao/sql_select_query_handler.py

@@ -283,7 +283,7 @@ class SQLSelectSchemaQueryHandler(SQLSchemaQueryHandler):
 
             if len(self._selection_results) == 0:
                 raise ApplicationException(
-                    402,
+                    403,
                     (
                         "After applying permissions there are no properties "
                         "returned in response"

{api_foundry_query_engine-0.8.36 → api_foundry_query_engine-0.8.38}/api_foundry_query_engine/dao/sql_update_query_handler.py

@@ -169,8 +169,9 @@ class SQLUpdateSchemaQueryHandler(SQLSchemaQueryHandler):
 
         if invalid_columns:
             raise ApplicationException(
-                402,
-                f"Subject does not have permission to update properties: {invalid_columns}",
+                403,
+                f"Subject does not have permission to update properties: "
+                f"{invalid_columns}",
             )
         return f" SET {', '.join(columns)}"
 

{api_foundry_query_engine-0.8.36 → api_foundry_query_engine-0.8.38}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "api-foundry-query-engine"
-version = "0.8.36"
+version = "0.8.38"
 authors = [
     { name="Daniel Repik", email="danrepik@icloud.com" },
 ]