api-foundry-query-engine 0.8.44__tar.gz → 0.8.45__tar.gz

{api_foundry_query_engine-0.8.44 → api_foundry_query_engine-0.8.45}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: api-foundry-query-engine
-Version: 0.8.44
+Version: 0.8.45
 Summary: The AWS lambda service handler use by the `api_foundry` project is a powerful tool designed to automate the deployment of REST APIs on AWS using Lambda services to access and interact with relational databases (RDBMS). This project leverages the OpenAPI specification to define and manage the APIs
 Project-URL: Documentation, https://github.com/DanRepik/api-foundry
 Project-URL: Source, https://github.com/DanRepik/api-foundry

api_foundry_query_engine-0.8.45/api_foundry_query_engine/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.8.45"

{api_foundry_query_engine-0.8.44 → api_foundry_query_engine-0.8.45}/api_foundry_query_engine/dao/sql_insert_query_handler.py

@@ -1,4 +1,4 @@
-from typing import Optional
+from typing import Dict, Optional
 from api_foundry_query_engine.dao.sql_query_handler import SQLSchemaQueryHandler
 from api_foundry_query_engine.operation import Operation
 from api_foundry_query_engine.utils.app_exception import ApplicationException
@@ -42,6 +42,28 @@ class SQLInsertSchemaQueryHandler(SQLSchemaQueryHandler):
                 + f"property: {self.concurrency_property.api_name}",
             )
 
+    @property
+    def selection_results(self) -> Dict:
+        """
+        Override parent to combine read+write permissions for INSERT RETURNING.
+        Returns all columns the user can read OR write.
+        """
+        if not hasattr(self, "_insert_selection_results"):
+            # Get both read and write permissions
+            write_props = self.check_permissions(
+                "write",
+                self.schema_object.permissions,
+                self.schema_object.properties,
+            )
+            read_props = self.check_permissions(
+                "read",
+                self.schema_object.permissions,
+                self.schema_object.properties,
+            )
+            # Combine both (union of read and write)
+            self._insert_selection_results = {**read_props, **write_props}
+        return self._insert_selection_results
+
     @property
     def sql(self) -> str:
         self.concurrency_property = self.schema_object.concurrency_property
@@ -70,24 +92,21 @@ class SQLInsertSchemaQueryHandler(SQLSchemaQueryHandler):
 
     def _get_returning_clause(self) -> str:
         """
-        Get RETURNING clause based on read permissions.
-        Returns all fields the user has read access to.
+        Get RETURNING clause with combined read+write permissions.
+        Returns all fields the user can read OR write.
         """
-        # Get properties user has read permissions for
-        allowed_properties = self.check_permissions(
-            "read",
-            self.schema_object.permissions,
-            self.schema_object.properties,
-        )
+        # Use the combined selection_results (read + write)
+        allowed_properties = self.selection_results
 
         if allowed_properties:
-            # Return all readable columns
+            # Return all accessible columns
             columns = [
                 prop.column_name for prop in allowed_properties.values()
             ]
             return f"RETURNING {', '.join(columns)}"
 
-        # Fallback to primary key if no read permissions
+        # Fallback to primary key if no permissions
+        # (shouldn't happen if user can INSERT)
         pk_property = self.schema_object.primary_key
         if pk_property:
             return f"RETURNING {pk_property.column_name}"

api_foundry_query_engine-0.8.44/api_foundry_query_engine/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.8.44"