datatable delete apis should only delete registered datatables
This commit is contained in:
+39
-51
@@ -61,10 +61,17 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
private final static String DATATABLE_NAME_REGEX_PATTERN = "^[a-zA-Z][a-zA-Z0-9\\-_\\s]{0,48}[a-zA-Z0-9]$";
|
private final static String DATATABLE_NAME_REGEX_PATTERN = "^[a-zA-Z][a-zA-Z0-9\\-_\\s]{0,48}[a-zA-Z0-9]$";
|
||||||
|
|
||||||
private final static Logger logger = LoggerFactory.getLogger(ReadWriteNonCoreDataServiceImpl.class);
|
private final static Logger logger = LoggerFactory.getLogger(ReadWriteNonCoreDataServiceImpl.class);
|
||||||
private final static HashMap<String, String> apiTypeToMySQL = new HashMap<String, String>() {{
|
private final static HashMap<String, String> apiTypeToMySQL = new HashMap<String, String>() {
|
||||||
put("String", "VARCHAR"); put("Number", "INT"); put("Decimal", "DECIMAL"); put("Date", "DATE");
|
|
||||||
put("Text", "TEXT"); put ("Dropdown", "INT");
|
{
|
||||||
}};
|
put("String", "VARCHAR");
|
||||||
|
put("Number", "INT");
|
||||||
|
put("Decimal", "DECIMAL");
|
||||||
|
put("Date", "DATE");
|
||||||
|
put("Text", "TEXT");
|
||||||
|
put("Dropdown", "INT");
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
private final JdbcTemplate jdbcTemplate;
|
private final JdbcTemplate jdbcTemplate;
|
||||||
private final DataSource dataSource;
|
private final DataSource dataSource;
|
||||||
@@ -282,15 +289,19 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
private boolean isRegisteredDataTable(final String name) {
|
||||||
|
// PERMITTED datatables
|
||||||
|
final String sql = "select if((exists (select 1 from x_registered_table where registered_table_name = ?)) = 1, 'true', 'false')";
|
||||||
|
final String isRegisteredDataTable = this.jdbcTemplate.queryForObject(sql, String.class, new Object[] { name });
|
||||||
|
return new Boolean(isRegisteredDataTable);
|
||||||
|
}
|
||||||
|
|
||||||
private void validateDatatableName(final String name) {
|
private void validateDatatableName(final String name) {
|
||||||
|
|
||||||
if (name == null || name.isEmpty()) {
|
if (name == null || name.isEmpty()) {
|
||||||
throw new PlatformDataIntegrityException("error.msg.datatables.datatable.null.name",
|
throw new PlatformDataIntegrityException("error.msg.datatables.datatable.null.name", "Data table name must not be blank.");
|
||||||
"Data table name must not be blank.");
|
} else if (!name.matches(DATATABLE_NAME_REGEX_PATTERN)) { throw new PlatformDataIntegrityException(
|
||||||
} else if (!name.matches(DATATABLE_NAME_REGEX_PATTERN)) {
|
"error.msg.datatables.datatable.invalid.name.regex", "Invalid data table name.", name); }
|
||||||
throw new PlatformDataIntegrityException("error.msg.datatables.datatable.invalid.name.regex",
|
|
||||||
"Invalid data table name.", name);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
private String datatableColumnNameToCodeValueName(final String columnName, final String code) {
|
private String datatableColumnNameToCodeValueName(final String columnName, final String code) {
|
||||||
@@ -318,8 +329,7 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
String mysqlType = apiTypeToMySQL.get(type);
|
String mysqlType = apiTypeToMySQL.get(type);
|
||||||
sqlBuilder = sqlBuilder.append("`" + name + "` " + mysqlType);
|
sqlBuilder = sqlBuilder.append("`" + name + "` " + mysqlType);
|
||||||
|
|
||||||
if (type != null)
|
if (type != null) {
|
||||||
{
|
|
||||||
if (type.equals("String")) {
|
if (type.equals("String")) {
|
||||||
sqlBuilder = sqlBuilder.append("(" + length + ")");
|
sqlBuilder = sqlBuilder.append("(" + length + ")");
|
||||||
} else if (type.equals("Decimal")) {
|
} else if (type.equals("Decimal")) {
|
||||||
@@ -368,12 +378,10 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
sqlBuilder = sqlBuilder.append("CREATE TABLE `" + datatableName + "` (");
|
sqlBuilder = sqlBuilder.append("CREATE TABLE `" + datatableName + "` (");
|
||||||
|
|
||||||
if (multiRow) {
|
if (multiRow) {
|
||||||
sqlBuilder = sqlBuilder
|
sqlBuilder = sqlBuilder.append("`id` BIGINT(20) NOT NULL AUTO_INCREMENT, ").append(
|
||||||
.append("`id` BIGINT(20) NOT NULL AUTO_INCREMENT, ")
|
"`" + fkColumnName + "` BIGINT(20) NOT NULL, ");
|
||||||
.append("`" + fkColumnName + "` BIGINT(20) NOT NULL, ");
|
|
||||||
} else {
|
} else {
|
||||||
sqlBuilder = sqlBuilder
|
sqlBuilder = sqlBuilder.append("`" + fkColumnName + "` BIGINT(20) NOT NULL, ");
|
||||||
.append("`" + fkColumnName + "` BIGINT(20) NOT NULL, ");
|
|
||||||
}
|
}
|
||||||
|
|
||||||
for (JsonElement column : columns) {
|
for (JsonElement column : columns) {
|
||||||
@@ -384,18 +392,13 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
sqlBuilder = sqlBuilder.delete(sqlBuilder.length() - 2, sqlBuilder.length());
|
sqlBuilder = sqlBuilder.delete(sqlBuilder.length() - 2, sqlBuilder.length());
|
||||||
|
|
||||||
if (multiRow) {
|
if (multiRow) {
|
||||||
sqlBuilder = sqlBuilder
|
sqlBuilder = sqlBuilder.append(", PRIMARY KEY (`id`)")
|
||||||
.append(", PRIMARY KEY (`id`)")
|
|
||||||
.append(", KEY `fk_" + apptableName.substring(2) + "_id` (`" + fkColumnName + "`)")
|
.append(", KEY `fk_" + apptableName.substring(2) + "_id` (`" + fkColumnName + "`)")
|
||||||
.append(", CONSTRAINT `fk_" + fkName + "` ")
|
.append(", CONSTRAINT `fk_" + fkName + "` ").append("FOREIGN KEY (`" + fkColumnName + "`) ")
|
||||||
.append("FOREIGN KEY (`" + fkColumnName + "`) ")
|
|
||||||
.append("REFERENCES `" + apptableName + "` (`id`)");
|
.append("REFERENCES `" + apptableName + "` (`id`)");
|
||||||
} else {
|
} else {
|
||||||
sqlBuilder = sqlBuilder
|
sqlBuilder = sqlBuilder.append(", PRIMARY KEY (`" + fkColumnName + "`)").append(", CONSTRAINT `fk_" + fkName + "` ")
|
||||||
.append(", PRIMARY KEY (`" + fkColumnName + "`)")
|
.append("FOREIGN KEY (`" + fkColumnName + "`) ").append("REFERENCES `" + apptableName + "` (`id`)");
|
||||||
.append(", CONSTRAINT `fk_" + fkName + "` ")
|
|
||||||
.append("FOREIGN KEY (`" + fkColumnName + "`) ")
|
|
||||||
.append("REFERENCES `" + apptableName + "` (`id`)");
|
|
||||||
}
|
}
|
||||||
|
|
||||||
sqlBuilder = sqlBuilder.append(") ENGINE=InnoDB DEFAULT CHARSET=utf8;");
|
sqlBuilder = sqlBuilder.append(") ENGINE=InnoDB DEFAULT CHARSET=utf8;");
|
||||||
@@ -410,17 +413,13 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
if (realCause.getMessage().toLowerCase().contains("duplicate column name")) {
|
if (realCause.getMessage().toLowerCase().contains("duplicate column name")) {
|
||||||
baseDataValidator.reset().parameter("name").failWithCode("duplicate.column.name");
|
baseDataValidator.reset().parameter("name").failWithCode("duplicate.column.name");
|
||||||
} else if (realCause.getMessage().contains("Table") && realCause.getMessage().contains("already exists")) {
|
} else if (realCause.getMessage().contains("Table") && realCause.getMessage().contains("already exists")) {
|
||||||
baseDataValidator.reset().parameter("datatableName").value(datatableName)
|
baseDataValidator.reset().parameter("datatableName").value(datatableName).failWithCode("datatable.already.exists");
|
||||||
.failWithCode("datatable.already.exists");
|
|
||||||
}
|
}
|
||||||
|
|
||||||
throwExceptionIfValidationWarningsExist(dataValidationErrors);
|
throwExceptionIfValidationWarningsExist(dataValidationErrors);
|
||||||
}
|
}
|
||||||
|
|
||||||
return new CommandProcessingResultBuilder()
|
return new CommandProcessingResultBuilder().withCommandId(command.commandId()).withResourceIdAsString(datatableName).build();
|
||||||
.withCommandId(command.commandId())
|
|
||||||
.withResourceIdAsString(datatableName)
|
|
||||||
.build();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
private void parseDatatableColumnForUpdate(final JsonObject column,
|
private void parseDatatableColumnForUpdate(final JsonObject column,
|
||||||
@@ -445,10 +444,8 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!mapColumnNameDefinition.containsKey(name)) {
|
if (!mapColumnNameDefinition.containsKey(name)) { throw new PlatformDataIntegrityException(
|
||||||
throw new PlatformDataIntegrityException("error.msg.datatable.column.missing.update.parse",
|
"error.msg.datatable.column.missing.update.parse", "Column " + name + " does not exist.", name); }
|
||||||
"Column " + name + " does not exist.", name);
|
|
||||||
}
|
|
||||||
|
|
||||||
String type = mapColumnNameDefinition.get(name).getColumnType();
|
String type = mapColumnNameDefinition.get(name).getColumnType();
|
||||||
if (length == null && type.toLowerCase().equals("varchar")) {
|
if (length == null && type.toLowerCase().equals("varchar")) {
|
||||||
@@ -554,22 +551,17 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
StringBuilder sqlBuilder = new StringBuilder();
|
StringBuilder sqlBuilder = new StringBuilder();
|
||||||
|
|
||||||
if (mapColumnNameDefinition.containsKey("id")) {
|
if (mapColumnNameDefinition.containsKey("id")) {
|
||||||
sqlBuilder = sqlBuilder
|
sqlBuilder = sqlBuilder.append("ALTER TABLE `" + datatableName + "` ").append("DROP KEY `fk_" + oldFKName + "`,")
|
||||||
.append("ALTER TABLE `" + datatableName + "` ")
|
|
||||||
.append("DROP KEY `fk_" + oldFKName + "`,")
|
|
||||||
.append("DROP FOREIGN KEY `fk_" + oldConstraintName + "`,")
|
.append("DROP FOREIGN KEY `fk_" + oldConstraintName + "`,")
|
||||||
.append("CHANGE COLUMN `" + oldFKName + "` `" + newFKName + "` BIGINT(20) NOT NULL,")
|
.append("CHANGE COLUMN `" + oldFKName + "` `" + newFKName + "` BIGINT(20) NOT NULL,")
|
||||||
.append("ADD KEY `fk_" + newFKName + "` (`" + newFKName + "`),")
|
.append("ADD KEY `fk_" + newFKName + "` (`" + newFKName + "`),")
|
||||||
.append("ADD CONSTRAINT `fk_" + newConstraintName + "` ")
|
.append("ADD CONSTRAINT `fk_" + newConstraintName + "` ").append("FOREIGN KEY (`" + newFKName + "`) ")
|
||||||
.append("FOREIGN KEY (`" + newFKName + "`) ")
|
|
||||||
.append("REFERENCES `" + apptableName + "` (`id`)");
|
.append("REFERENCES `" + apptableName + "` (`id`)");
|
||||||
} else {
|
} else {
|
||||||
sqlBuilder = sqlBuilder
|
sqlBuilder = sqlBuilder.append("ALTER TABLE `" + datatableName + "` ")
|
||||||
.append("ALTER TABLE `" + datatableName + "` ")
|
|
||||||
.append("DROP FOREIGN KEY `fk_" + oldConstraintName + "`,")
|
.append("DROP FOREIGN KEY `fk_" + oldConstraintName + "`,")
|
||||||
.append("CHANGE COLUMN `" + oldFKName + "` `" + newFKName + "` BIGINT(20) NOT NULL,")
|
.append("CHANGE COLUMN `" + oldFKName + "` `" + newFKName + "` BIGINT(20) NOT NULL,")
|
||||||
.append("ADD CONSTRAINT `fk_" + newConstraintName + "` ")
|
.append("ADD CONSTRAINT `fk_" + newConstraintName + "` ").append("FOREIGN KEY (`" + newFKName + "`) ")
|
||||||
.append("FOREIGN KEY (`" + newFKName + "`) ")
|
|
||||||
.append("REFERENCES `" + apptableName + "` (`id`)");
|
.append("REFERENCES `" + apptableName + "` (`id`)");
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -580,9 +572,7 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if (changeColumns == null && addColumns == null && dropColumns == null) {
|
if (changeColumns == null && addColumns == null && dropColumns == null) { return; }
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (dropColumns != null) {
|
if (dropColumns != null) {
|
||||||
|
|
||||||
@@ -655,17 +645,15 @@ public class ReadWriteNonCoreDataServiceImpl implements ReadWriteNonCoreDataServ
|
|||||||
|
|
||||||
try {
|
try {
|
||||||
context.authenticatedUser();
|
context.authenticatedUser();
|
||||||
|
if (!isRegisteredDataTable(datatableName)) { throw new DatatableNotFoundException(datatableName); }
|
||||||
validateDatatableName(datatableName);
|
validateDatatableName(datatableName);
|
||||||
deregisterDatatable(datatableName);
|
deregisterDatatable(datatableName);
|
||||||
|
|
||||||
String sql = "DROP TABLE `" + datatableName + "`";
|
String sql = "DROP TABLE `" + datatableName + "`";
|
||||||
this.jdbcTemplate.execute(sql);
|
this.jdbcTemplate.execute(sql);
|
||||||
} catch (SQLGrammarException e) {
|
} catch (SQLGrammarException e) {
|
||||||
Throwable realCause = e.getCause();
|
Throwable realCause = e.getCause();
|
||||||
List<ApiParameterError> dataValidationErrors = new ArrayList<ApiParameterError>();
|
List<ApiParameterError> dataValidationErrors = new ArrayList<ApiParameterError>();
|
||||||
final DataValidatorBuilder baseDataValidator = new DataValidatorBuilder(dataValidationErrors).resource("datatable");
|
final DataValidatorBuilder baseDataValidator = new DataValidatorBuilder(dataValidationErrors).resource("datatable");
|
||||||
|
|
||||||
if (realCause.getMessage().contains("Unknown table")) {
|
if (realCause.getMessage().contains("Unknown table")) {
|
||||||
baseDataValidator.reset().parameter("datatableName").failWithCode("does.not.exist");
|
baseDataValidator.reset().parameter("datatableName").failWithCode("does.not.exist");
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user