120 lines
9.0 KiB
PL/PgSQL
120 lines
9.0 KiB
PL/PgSQL
-- Admin accounts manage settings and enforcement. Moderators review map submissions.
|
||
alter table public.profiles drop constraint profiles_role_check;
|
||
alter table public.profiles add constraint profiles_role_check
|
||
check (role in ('contributor','moderator','admin'));
|
||
|
||
create or replace function public.publish_dataset(p_dataset uuid,p_reviewer uuid,p_decision text,p_reason text default null) returns void
|
||
language plpgsql security invoker set search_path='' as $$
|
||
declare d public.datasets; m jsonb; rev uuid; first jsonb; count integer;
|
||
begin
|
||
if not exists(select 1 from public.profiles where id=p_reviewer and role in ('moderator','admin')) then raise exception 'Moderator permission required'; end if;
|
||
if p_decision='unpublish' and not exists(select 1 from public.profiles where id=p_reviewer and role='admin') then raise exception 'Admin permission required'; end if;
|
||
select * into d from public.datasets where id=p_dataset and parent_dataset_id is null for update;
|
||
if not found then raise exception 'Map not found'; end if;
|
||
if p_decision='approve' then
|
||
if not(d.state='review' or (d.state='published' and coalesce(d.update_state,'')='review')) then raise exception 'Map is not ready for publication'; end if;
|
||
select manifest into m from public.dataset_inputs where dataset_id=p_dataset and validated;
|
||
count:=jsonb_array_length(m->'viewpoints'); first:=m->'viewpoints'->0;
|
||
if m is null or count<5 or count>24 then raise exception 'Map requires 5–24 validated panoramas'; end if;
|
||
insert into public.revisions(dataset_id,manifest,asset_root) values(p_dataset,m,p_dataset::text) returning id into rev;
|
||
update public.datasets set state='published',revision_id=rev,update_state=null,name=m->>'name',description=m->>'description',panorama_count=count,
|
||
map_path=coalesce(m->>'mapPath',d.map_path),
|
||
cover_path=coalesce(first->>'assetRoot',id::text)||'/'||coalesce(first->>'assetId',first->>'id')||'/preview.webp',rejection_reason=null,updated_at=now() where id=p_dataset;
|
||
elsif p_decision='reject' and (d.state='review' or (d.state='published' and d.update_state='review')) then
|
||
if coalesce(length(trim(p_reason)),0)=0 then raise exception 'Provide a rejection reason'; end if;
|
||
update public.datasets set state=case when state='published' then state else 'rejected' end,update_state=case when state='published' then 'rejected' end,rejection_reason=p_reason,updated_at=now() where id=p_dataset;
|
||
elsif p_decision='unpublish' and d.state='published' then
|
||
update public.datasets set state='unpublished',update_state=null,updated_at=now() where id=p_dataset;
|
||
else raise exception 'Invalid review transition'; end if;
|
||
insert into public.review_decisions(dataset_id,reviewer_id,decision,reason) values(p_dataset,p_reviewer,p_decision,p_reason);
|
||
end; $$;
|
||
|
||
create or replace function public.review_content_report(p_report uuid,p_reviewer uuid,p_decision text,p_reason text) returns void
|
||
language plpgsql security invoker set search_path='' as $$
|
||
declare r public.reports; d public.datasets; map_id uuid; strikes integer;
|
||
begin
|
||
if not exists(select 1 from public.profiles where id=p_reviewer and role = 'admin') then raise exception 'Admin permission required'; end if;
|
||
select dataset_id into map_id from public.reports where id=p_report;
|
||
select * into d from public.datasets where id=map_id for update;
|
||
select * into r from public.reports where id=p_report for update;
|
||
if not found or r.state<>'open' or r.report_cycle<>d.report_cycle then raise exception 'Report is no longer awaiting review'; end if;
|
||
if p_decision is null or p_decision not in ('confirm','dismiss') or coalesce(length(trim(p_reason)),0) not between 10 and 2000 then raise exception 'Provide a review decision and feedback in 10–2000 characters'; end if;
|
||
if p_decision='confirm' then
|
||
if d.banned_at is not null then raise exception 'This map is already banned; dismiss the remaining report or review its appeal'; end if;
|
||
if p_reviewer=r.owner_id or p_reviewer=d.owner_id then raise exception 'An independent moderator must confirm this report'; end if;
|
||
-- Distinct reporters provide each strike, including legacy reports.
|
||
if exists(select 1 from public.reports where dataset_id=d.id and owner_id=r.owner_id and report_cycle=d.report_cycle and state='confirmed') then raise exception 'This reporter already contributed a strike'; end if;
|
||
strikes:=d.report_strikes+1;
|
||
update public.datasets set report_strikes=strikes,
|
||
state=case when strikes>=3 then 'unpublished' else state end,
|
||
update_state=case when strikes>=3 then null else update_state end,
|
||
banned_at=case when strikes>=3 then now() end,
|
||
ban_reason=case when strikes>=3 then trim(p_reason) end,updated_at=now() where id=d.id;
|
||
end if;
|
||
update public.reports set state=case when p_decision='confirm' then 'confirmed' else 'dismissed' end,
|
||
reviewer_id=p_reviewer,reviewed_at=now(),review_reason=trim(p_reason) where id=r.id;
|
||
end; $$;
|
||
|
||
create or replace function public.review_map_appeal(p_appeal uuid,p_reviewer uuid,p_decision text,p_reason text) returns void
|
||
language plpgsql security invoker set search_path='' as $$
|
||
declare a public.map_appeals; d public.datasets; map_id uuid;
|
||
begin
|
||
if not exists(select 1 from public.profiles where id=p_reviewer and role = 'admin') then raise exception 'Admin permission required'; end if;
|
||
select dataset_id into map_id from public.map_appeals where id=p_appeal;
|
||
select * into d from public.datasets where id=map_id for update;
|
||
select * into a from public.map_appeals where id=p_appeal for update;
|
||
if not found or a.state<>'open' or d.banned_at is null or a.report_cycle<>d.report_cycle then raise exception 'Appeal is no longer awaiting review'; end if;
|
||
if p_reviewer=d.owner_id then raise exception 'An independent moderator must review your appeal'; end if;
|
||
if p_decision is null or p_decision not in ('approve','reject') or coalesce(length(trim(p_reason)),0) not between 10 and 2000 then raise exception 'Provide an appeal decision and feedback in 10–2000 characters'; end if;
|
||
if p_decision='approve' then
|
||
if d.revision_id is null then raise exception 'Map has no approved version to restore'; end if;
|
||
update public.datasets set report_strikes=0,report_cycle=report_cycle+1,banned_at=null,ban_reason=null,state='published',updated_at=now() where id=d.id;
|
||
update public.reports set state='dismissed',reviewer_id=p_reviewer,reviewed_at=now(),review_reason='Closed when the map ban appeal was approved.' where dataset_id=d.id and report_cycle=d.report_cycle and state='open';
|
||
end if;
|
||
update public.map_appeals set state=case when p_decision='approve' then 'approved' else 'rejected' end,reviewer_id=p_reviewer,reviewed_at=now(),review_reason=trim(p_reason) where id=a.id;
|
||
end; $$;
|
||
|
||
create or replace function public.set_beta_badge(p_reviewer uuid, p_enabled boolean)
|
||
returns boolean language plpgsql security invoker set search_path = '' as $$
|
||
begin
|
||
if not exists (
|
||
select 1 from public.profiles where id = p_reviewer and role = 'admin'
|
||
) then
|
||
raise exception 'Admin permission required';
|
||
end if;
|
||
if p_enabled is null then
|
||
raise exception 'Beta badge visibility is required';
|
||
end if;
|
||
update public.site_settings
|
||
set beta_badge_enabled = p_enabled, updated_at = now(), updated_by = p_reviewer
|
||
where id = true;
|
||
if not found then raise exception 'Site settings not found'; end if;
|
||
return p_enabled;
|
||
end;
|
||
$$;
|
||
|
||
create or replace function public.set_user_prefix(p_reviewer uuid,p_user uuid,p_prefix text,p_icon text) returns void
|
||
language plpgsql security invoker set search_path='' as $$
|
||
begin
|
||
if not exists(select 1 from public.profiles where id=p_reviewer and role = 'admin') then raise exception 'Admin permission required'; end if;
|
||
if p_icon not in ('star','crown','heart','flame','gem','trophy','sparkles') or p_icon is null then raise exception 'Invalid prefix icon'; end if;
|
||
if p_prefix is not null and (length(btrim(p_prefix)) not between 1 and 24 or p_prefix ~ '[[:cntrl:]]') then raise exception 'Invalid custom prefix'; end if;
|
||
update public.profiles set custom_prefix=case when p_prefix is null then null else btrim(p_prefix) end,custom_prefix_icon=p_icon where id=p_user;
|
||
if not found then raise exception 'Player not found'; end if;
|
||
end; $$;
|
||
|
||
revoke all on function public.publish_dataset(uuid,uuid,text,text) from public,anon,authenticated;
|
||
grant execute on function public.publish_dataset(uuid,uuid,text,text) to service_role;
|
||
|
||
revoke all on function public.review_content_report(uuid,uuid,text,text) from public,anon,authenticated;
|
||
grant execute on function public.review_content_report(uuid,uuid,text,text) to service_role;
|
||
|
||
revoke all on function public.review_map_appeal(uuid,uuid,text,text) from public,anon,authenticated;
|
||
grant execute on function public.review_map_appeal(uuid,uuid,text,text) to service_role;
|
||
|
||
revoke all on function public.set_beta_badge(uuid,boolean) from public,anon,authenticated;
|
||
grant execute on function public.set_beta_badge(uuid,boolean) to service_role;
|
||
|
||
revoke all on function public.set_user_prefix(uuid,uuid,text,text) from public,anon,authenticated;
|
||
grant execute on function public.set_user_prefix(uuid,uuid,text,text) to service_role;
|