Files
scylladb/cql3/statements/grant_statement.cc
Pavel Emelyanov 60a834d9fa cql3: Add cql_config parameter to parsed_statement::prepare()
Pass cql_config to prepare() so that statement preparation can use
CQL-specific configuration rather than reaching into db::config
directly.

Callers that use default_cql_config:
- db/view/view.cc: builds a SELECT statement internally to compute view
  restrictions, not in response to a user query
- cql3/statements/create_view_statement.cc: same -- parses the view's
  WHERE clause as a synthetic SELECT to extract restrictions
- tools/schema_loader.cc: offline schema loading tool, no runtime
  config available
- tools/scylla-sstable.cc: offline sstable inspection tool, no runtime
  config available

Signed-off-by: Pavel Emelyanov <xemul@scylladb.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-16 07:57:25 +03:00

37 lines
1.5 KiB
C++

/*
* Copyright 2016-present ScyllaDB
*
* Modified by ScyllaDB
*/
/*
* SPDX-License-Identifier: (LicenseRef-ScyllaDB-Source-Available-1.1 and Apache-2.0)
*/
#include "grant_statement.hh"
#include "auth/authorizer.hh"
#include "cql3/statements/prepared_statement.hh"
#include "service/query_state.hh"
#include "service/raft/raft_group0_client.hh"
std::unique_ptr<cql3::statements::prepared_statement> cql3::statements::grant_statement::prepare(
data_dictionary::database db, cql_stats& stats, const cql_config& cfg) {
return std::make_unique<prepared_statement>(audit_info(), ::make_shared<grant_statement>(*this));
}
future<::shared_ptr<cql_transport::messages::result_message>>
cql3::statements::grant_statement::execute(query_processor&, service::query_state& state, const query_options& options, std::optional<service::group0_guard> guard) const {
auto& auth_service = *state.get_client_state().get_auth_service();
try {
service::group0_batch mc{std::move(guard)};
co_await auth::grant_permissions(auth_service, _role_name, _permissions, _resource, mc);
co_await auth::commit_mutations(auth_service, std::move(mc));
} catch (const auth::nonexistant_role& e) {
throw exceptions::invalid_request_exception(e.what());
} catch (const auth::unsupported_authorization_operation& e) {
throw exceptions::invalid_request_exception(e.what());
}
co_return ::shared_ptr<cql_transport::messages::result_message>();
}