feat(sqlserver): Part 8 — dbt-sqlserver Jinja macro package

crates/dbt-loader/src/dbt_macro_assets/dbt-sqlserver/__init__.py

@@ -0,0 +1,3 @@
+import os
+
+PACKAGE_PATH = os.path.dirname(__file__)

crates/dbt-loader/src/dbt_macro_assets/dbt-sqlserver/dbt_project.yml

@@ -0,0 +1,6 @@
+name: dbt_sqlserver
+version: 1.0
+
+config-version: 2
+
+macro-paths: ["macros"]

crates/dbt-loader/src/dbt_macro_assets/dbt-sqlserver/macros/adapters/apply_grants.sql

@@ -0,0 +1,71 @@
+{% macro sqlserver__apply_grants(relation, grant_config, should_revoke=True) %}
+    {#-- If grant_config is {} or None, this is a no-op --#}
+    {% if grant_config %}
+        {% if should_revoke %}
+            {#-- We think previous grants may have carried over --#}
+            {#-- Show current grants and calculate diffs --#}
+            {% set current_grants_table = run_query(get_show_grant_sql(relation)) %}
+            {% set current_grants_dict = adapter.standardize_grants_dict(current_grants_table) %}
+            {% set needs_granting = diff_of_two_dicts(grant_config, current_grants_dict) %}
+            {% set needs_revoking = diff_of_two_dicts(current_grants_dict, grant_config) %}
+            {% if not (needs_granting or needs_revoking) %}
+                {{ log('On ' ~ relation ~': All grants are in place, no revocation or granting needed.')}}
+            {% endif %}
+        {% else %}
+            {#-- We don't think there's any chance of previous grants having carried over. --#}
+            {#-- Jump straight to granting what the user has configured. --#}
+            {% set needs_revoking = {} %}
+            {% set needs_granting = grant_config %}
+        {% endif %}
+        {% if needs_granting or needs_revoking %}
+            {% set revoke_statement_list = get_dcl_statement_list(relation, needs_revoking, get_revoke_sql) %}
+
+            {% if config.get('auto_provision_aad_principals', False) %}
+                {% set provision_statement_list = get_dcl_statement_list(relation, needs_granting, get_provision_sql) %}
+            {% else %}
+                {% set provision_statement_list = [] %}
+            {% endif %}
+
+            {% set grant_statement_list = get_dcl_statement_list(relation, needs_granting, get_grant_sql) %}
+            {% set dcl_statement_list = revoke_statement_list + provision_statement_list + grant_statement_list %}
+            {% if dcl_statement_list %}
+                {{ call_dcl_statements(dcl_statement_list) }}
+            {% endif %}
+        {% endif %}
+    {% endif %}
+{% endmacro %}
+
+{% macro sqlserver__get_show_grant_sql(relation) %}
+    select
+        GRANTEE as grantee,
+        PRIVILEGE_TYPE as privilege_type
+    from INFORMATION_SCHEMA.TABLE_PRIVILEGES {{ information_schema_hints() }}
+    where TABLE_CATALOG = '{{ relation.database }}'
+      and TABLE_SCHEMA = '{{ relation.schema }}'
+      and TABLE_NAME = '{{ relation.identifier }}'
+{% endmacro %}
+
+{%- macro sqlserver__get_grant_sql(relation, privilege, grantees) -%}
+    {%- set grantees_safe = [] -%}
+    {%- for grantee in grantees -%}
+        {%- set grantee_safe = adapter.quote(grantee) -%}
+        {%- do grantees_safe.append(grantee_safe) -%}
+    {%- endfor -%}
+    grant {{ privilege }} on {{ relation }} to {{ grantees_safe | join(', ') }}
+{%- endmacro -%}
+
+{%- macro sqlserver__get_revoke_sql(relation, privilege, grantees) -%}
+    {%- set grantees_safe = [] -%}
+    {%- for grantee in grantees -%}
+        {%- set grantee_safe = adapter.quote(grantee) -%}
+        {%- do grantees_safe.append(grantee_safe) -%}
+    {%- endfor -%}
+    revoke {{ privilege }} on {{ relation }} from {{ grantees_safe | join(', ') }}
+{%- endmacro -%}
+
+{% macro get_provision_sql(relation, privilege, grantees) %}
+    {% for grantee in grantees %}
+        if not exists(select name from sys.database_principals where name = '{{ grantee }}')
+        create user {{ adapter.quote(grantee) }} from external provider;
+    {% endfor %}
+{% endmacro %}