src/include/utils/rangerrest.h

/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

/*-------------------------------------------------------------------------
 *
 * rangerrest.h
 *	routines to interact with Ranger REST API
 *
 *-------------------------------------------------------------------------
 */
#ifndef RANGERREST_H
#define RANGERREST_H

#include <json-c/json.h>
#include <curl/curl.h>
#include "postgres.h"
#include "utils/acl.h"
#include "utils/guc.h"
#include "miscadmin.h"
#include "libpq/libpq-be.h"
#include "tcop/tcopprot.h"

#define HOST_BUFFER_SIZE 1025
#define CURL_RES_BUFFER_SIZE 1024

#define RANGER_LOG DEBUG3

typedef enum
{
  RANGERCHECK_OK = 0,
  RANGERCHECK_NO_PRIV,
  RANGERCHECK_UNKNOWN
} RangerACLResult;

/*
 * Internal buffer for libcurl context
 */
typedef struct curl_context_t
{
  CURL* curl_handle;

  char curl_error_buffer[CURL_ERROR_SIZE];

  int curl_still_running;

  struct
  {
    char* buffer;
    int response_size;
    int buffer_size;
  } response;

  char* last_http_reponse;

  bool hasInited;
  bool talkingWithStandby;      /* if it is talking with standby RPS or not */
  uint64_t lastCheckTimestamp;  /* last check timestamp for master RPS */
} curl_context_t;

typedef curl_context_t* CURL_HANDLE;

typedef struct RangerPrivilegeArgs
{
  AclObjectKind objkind;
  Oid        object_oid;
  Oid            roleid;
  AclMode          mask;
  AclMaskHow        how;
} RangerPrivilegeArgs;

typedef struct RangerPrivilegeResults
{
  RangerACLResult result;
  Oid relOid;

  /* 
   * string_hash of access[i] field of ranger request 
   * use the sign to identify each resource result
   */ 
  uint32 resource_sign;
  uint32 privilege_sign;
} RangerPrivilegeResults;

typedef struct RangerRequestJsonArgs {
  char* user;
  AclObjectKind kind;
  char* object;
  List* actions;
  bool isAll;
} RangerRequestJsonArgs;

extern struct curl_context_t curl_context_ranger;

int check_privilege_from_ranger(List *request_list, List *result_list);

#endif