5eab624d3c
This adds a bunch of checks to migrations that may create or drop triggers. Dropping triggers/functions is done using "IF EXISTS" so we don't throw an error if the object in question has already been dropped. We now also raise a custom error (message) when the user does not have TRIGGER privileges. This should prevent the schema from entering an inconsistent state while also providing the user with enough information on how to solve the problem. The recommendation of using SUPERUSER permissions is a bit extreme but we require this anyway (Omnibus also configures users with this permission). Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/36633
34 lines
890 B
Ruby
34 lines
890 B
Ruby
module Gitlab
|
|
module Database
|
|
# Model that can be used for querying permissions of a SQL user.
|
|
class Grant < ActiveRecord::Base
|
|
self.table_name =
|
|
if Database.postgresql?
|
|
'information_schema.role_table_grants'
|
|
else
|
|
'mysql.user'
|
|
end
|
|
|
|
def self.scope_to_current_user
|
|
if Database.postgresql?
|
|
where('grantee = user')
|
|
else
|
|
where("CONCAT(User, '@', Host) = current_user()")
|
|
end
|
|
end
|
|
|
|
# Returns true if the current user can create and execute triggers on the
|
|
# given table.
|
|
def self.create_and_execute_trigger?(table)
|
|
priv =
|
|
if Database.postgresql?
|
|
where(privilege_type: 'TRIGGER', table_name: table)
|
|
else
|
|
where(Trigger_priv: 'Y')
|
|
end
|
|
|
|
priv.scope_to_current_user.any?
|
|
end
|
|
end
|
|
end
|
|
end
|