From 92bff1b7c5a78beadb8042086a8b80e131553a9b Mon Sep 17 00:00:00 2001
From: Stacy Ho <stacyho@mit.edu>
Date: Wed, 2 Nov 2016 20:49:17 -0400
Subject: [PATCH] grant create privilege to collaborator

---
 src/browser/templates/repo-settings.html |  5 +++++
 src/core/db/backend/pg.py                | 15 +++++++++++++++
 src/core/db/manager.py                   |  2 +-
 3 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/src/browser/templates/repo-settings.html b/src/browser/templates/repo-settings.html
index 0557f079..c6d906a0 100644
--- a/src/browser/templates/repo-settings.html
+++ b/src/browser/templates/repo-settings.html
@@ -83,6 +83,11 @@ <h4>Add Collaborators</h4>
                                 <input type="checkbox" name="db_privileges" value="TRIGGER" checked/> trigger
                             </label>
                         </div>
+                        <div class="checkbox">
+                            <label title="Allows ability to create tables in the repo.">
+                                <input type="checkbox" name="db_privileges" value="CREATE" checked/> create
+                            </label>
+                        </div>
                         <p class="help-block">Permissions for repo files:</p>
                         <div class="checkbox">
                             <label title="Allows read access to files and cards in the repo">
diff --git a/src/core/db/backend/pg.py b/src/core/db/backend/pg.py
index 31256945..641e078b 100644
--- a/src/core/db/backend/pg.py
+++ b/src/core/db/backend/pg.py
@@ -208,6 +208,12 @@ def add_collaborator(self, repo, collaborator, db_privileges=[]):
         for privilege in db_privileges:
             self._check_for_injections(privilege)
 
+        grantCreatePrivilege = False
+        if 'CREATE' in db_privileges:
+            grantCreatePrivilege = True
+            db_privileges.remove('CREATE')
+
+
         query = ('BEGIN;'
                  'GRANT USAGE ON SCHEMA %s TO %s;'
                  'GRANT %s ON ALL TABLES IN SCHEMA %s TO %s;'
@@ -221,6 +227,15 @@ def add_collaborator(self, repo, collaborator, db_privileges=[]):
                   collaborator, repo, privileges_str, collaborator]
         params = tuple(map(lambda x: AsIs(x), params))
         res = self.execute_sql(query, params)
+
+        query = ('BEGIN;'
+                 'GRANT CREATE ON SCHEMA %s TO %s;'
+                 'COMMIT;'
+                 )
+        params = [repo, collaborator]
+        params = tuple(map(lambda x: AsIs(x), params))
+        res = self.execute_sql(query, params)
+
         return res['status']
 
     def delete_collaborator(self, repo, collaborator):
diff --git a/src/core/db/manager.py b/src/core/db/manager.py
index d845ac85..1cdaaa38 100644
--- a/src/core/db/manager.py
+++ b/src/core/db/manager.py
@@ -395,7 +395,7 @@ def add_collaborator(
 
         invalid_db_privileges = set(db_privileges) - {
             'SELECT', 'INSERT', 'UPDATE', 'DELETE',
-            'TRUNCATE', 'REFERENCES', 'TRIGGER'}
+            'TRUNCATE', 'REFERENCES', 'TRIGGER', 'CREATE'}
         if len(invalid_db_privileges) > 0:
             raise ValueError(
                 "Unsupported db privileges: \"{0}\"".format(