EBI view for data-out

deploy/images/db/download.sql

@@ -54,7 +54,6 @@ SELECT id,
 FROM local_ega.main
 WHERE status = 'READY';
 
-
 -- Insert new request, and return some vault information
 CREATE TYPE request_type AS (req_id                    INTEGER,
                              header                    TEXT,

deploy/images/db/ebi.sql

@@ -0,0 +1,15 @@
+-- SET search_path TO local_ega_download;
+
+-- Used by EBI
+CREATE VIEW local_ega_download.ebi_files AS
+SELECT stable_id                 AS file_id,
+       CASE
+       WHEN (vault_file_type = 'S3') THEN 's3://'
+       ELSE 'file://' -- enum: if not s3, then it's POSIX
+       END || vault_file_reference AS file_name,
+       vault_file_size           AS file_size,
+       header                    AS header,
+       vault_file_checksum       AS unencrypted_checksum,
+       vault_file_checksum_type  AS unencrypted_checksum_type
+FROM local_ega.main
+WHERE status = 'READY';

deploy/images/db/entrypoint.sh

@@ -63,6 +63,7 @@ EOSQL
 # Run sql commands (in order!)
 DB_FILES=(/docker-entrypoint-initdb.d/main.sql
 	  /docker-entrypoint-initdb.d/download.sql
+	  /docker-entrypoint-initdb.d/ebi.sql
 	  /docker-entrypoint-initdb.d/qc.sql
 	  /docker-entrypoint-initdb.d/grants.sql)
 

deploy/images/db/grants.sql

@@ -13,13 +13,13 @@ CREATE USER lega_in;
 CREATE USER lega_out;
 
 -- Set up rights access for local_ega schema
-GRANT USAGE ON SCHEMA local_ega TO lega_in, lega_out;
+GRANT USAGE ON SCHEMA local_ega TO lega_in;
 GRANT ALL PRIVILEGES ON ALL TABLES    IN SCHEMA local_ega TO lega_in; -- Read/Write access on local_ega.* for lega_in
 GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA local_ega TO lega_in; -- Don't forget the sequences
 
--- Set up rights access for audit schema
+-- Set up rights access for download schema
 GRANT USAGE ON SCHEMA local_ega_download TO lega_out;
-GRANT ALL PRIVILEGES ON ALL TABLES    IN SCHEMA local_ega_download TO lega_out; -- Read/Write on audit.* for lega_out
+GRANT ALL PRIVILEGES ON ALL TABLES    IN SCHEMA local_ega_download TO lega_out; -- Read/Write on local_ega_download.* for lega_out
 GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA local_ega_download TO lega_out; -- Don't forget the sequences
 
-GRANT SELECT ON local_ega.main TO lega_out; -- Read-Only access for lega_out, through the view local_ega_download.files
+GRANT SELECT ON local_ega.main TO lega_out; -- Read-Only access for lega_out, through the views inside local_ega_download