#!/bin/sh -e
#
# 2011 Steven Armstrong (steven-cdist at armstrong.cc)
#
# This file is part of cdist.
#
# cdist is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# cdist is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.	See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
#

case $(cat "${__global:?}/explorer/os")
in
	(netbsd)
		postgres_user='pgsql'
		;;
	(openbsd)
		postgres_user='_postgresql'
		;;
	(*)
		postgres_user='postgres'
		;;
esac


rolename=${__object_id:?}
state_is=$(cat "${__object:?}/explorer/state")
state_should=$(cat "${__object:?}/parameter/state")

if test "${state_is}" = "${state_should}"
then
	exit 0
fi

case ${state_should}
in
	(present)
		if test -f "${__object:?}/parameter/password"
		then
			password=$(cat "${__object:?}/parameter/password")
		fi
		booleans=
		for boolean in login createdb createrole superuser
		do
			if test ! -f "${__object:?}/parameter/${boolean}"
			then
				boolean="no${boolean}"
			fi
			booleans="${booleans} $(echo ${boolean} | tr '[:lower:]' '[:upper:]')"
		done

		[ -n "${password}" ] && password="PASSWORD '${password}'"
		cat << EOF
su - '${postgres_user}' -c "psql postgres -wc 'CREATE ROLE \\"${rolename}\\" WITH ${password} ${booleans};'"
EOF
		;;
	(absent)
		cat << EOF
su - '${postgres_user}' -c "dropuser '${rolename}'"
EOF
		;;
esac