authen.public

Parameters

Name	Type	Mode
v_group_id	integer	IN
v_prop_id	integer	IN
v_codes	text[]	IN
v_revoke_all	boolean	IN
v_app_code	text	IN
v_group_id	integer	IN
v_prop_id	integer	IN
v_codes	text[]	IN
v_revoke_all	boolean	IN (DEFAULT false)

Definition

DECLARE
    v_is_standard boolean;
    v_role_app text;
    v_app text := COALESCE(NULLIF(v_app_code, ''), 'pms');
BEGIN
    SELECT (prop_id IS NULL), app_code
    INTO v_is_standard, v_role_app
    FROM public.user_group
    WHERE id = v_group_id;

IF v_is_standard IS NULL
       OR (v_role_app IS NOT NULL AND v_role_app <> v_app) THEN
        RAISE EXCEPTION USING ERRCODE = '22023', MESSAGE = 'Role does not belong to app';
    END IF;

IF v_is_standard THEN
        INSERT INTO public.group_permission_override(group_id, prop_id, code, perm_id, action_type)
        SELECT v_group_id, v_prop_id, p.code, p.id, 'deny'
        FROM public.permission p
        WHERE p.app_code = v_app
          AND (v_revoke_all OR p.code = ANY(v_codes))
        ON CONFLICT ON CONSTRAINT group_permission_override_pkey DO UPDATE
        SET code = EXCLUDED.code, action_type = 'deny', updated_at = now();
    ELSE
        DELETE FROM public.group_permission gp
        USING public.permission p
        WHERE gp.group_id = v_group_id
          AND p.id = gp.perm_id
          AND p.app_code = v_app
          AND (v_revoke_all OR gp.code = ANY(v_codes));
    END IF;

PERFORM public.sp_reset_user_permissions(ur.user_id, ur.prop_id)
    FROM public.user_roles ur
    WHERE ur.group_id = v_group_id AND ur.prop_id = v_prop_id AND ur.active;
END;

fn_role_revoke_permissions

Parameters

Definition