Allow PATCH/DELETE w/o Prefer when no SELECT privs
PATCH/DELETE can now be done without adding Prefer return=minimal when the user doesn't have SELECT privileges. * Also fix PATCH wrong HTTP status code
This commit is contained in:
committed by
Steve Chávez
parent
337f821e00
commit
ed2bfc09a6
Vendored
+5
@@ -507,3 +507,8 @@ INSERT INTO web_content VALUES (1, 'fezz', 0);
|
||||
INSERT INTO web_content VALUES (2, 'foo', 0);
|
||||
INSERT INTO web_content VALUES (3, 'bar', 0);
|
||||
INSERT INTO web_content VALUES (4, 'wut', 1);
|
||||
|
||||
TRUNCATE TABLE app_users CASCADE;
|
||||
INSERT INTO app_users (id, email, "password") VALUES (1, 'test@123.com','pass');
|
||||
INSERT INTO app_users (id, email, "password") VALUES (2, 'abc@123.com','pass');
|
||||
INSERT INTO app_users (id, email, "password") VALUES (3, 'def@123.com','pass');
|
||||
|
||||
Vendored
+4
@@ -123,6 +123,10 @@ GRANT SELECT (article_id, user_id) ON TABLE limited_article_stars TO postgrest_t
|
||||
GRANT INSERT (article_id, user_id) ON TABLE limited_article_stars TO postgrest_test_anonymous;
|
||||
GRANT UPDATE (article_id, user_id) ON TABLE limited_article_stars TO postgrest_test_anonymous;
|
||||
|
||||
GRANT SELECT(id, email) ON TABLE app_users TO postgrest_test_anonymous;
|
||||
GRANT INSERT, UPDATE ON TABLE app_users TO postgrest_test_anonymous;
|
||||
GRANT DELETE ON TABLE app_users TO postgrest_test_anonymous;
|
||||
|
||||
REVOKE EXECUTE ON FUNCTION privileged_hello(text) FROM PUBLIC; -- All functions are available to every role(PUBLIC) by default
|
||||
GRANT EXECUTE ON FUNCTION privileged_hello(text) TO postgrest_test_author;
|
||||
|
||||
|
||||
Vendored
+6
@@ -1753,3 +1753,9 @@ CREATE TABLE web_content (
|
||||
CREATE FUNCTION getallusers() RETURNS SETOF users AS $$
|
||||
SELECT * FROM test.users;
|
||||
$$ LANGUAGE sql;
|
||||
|
||||
create table app_users (
|
||||
id integer primary key,
|
||||
email text unique not null,
|
||||
password text not null
|
||||
);
|
||||
|
||||
Reference in New Issue
Block a user