Merge branch 'dev' of https://github.com/ThalesGroup/sql-data-guard into dev

closes #7; Added test_duckdb.py and modified test.yaml to install test dependencies

Author: MohamedFaheemM

src/sql_data_guard/__init__.py

@@ -1 +1 @@
-from .sql_data_guard import verify_sql
+from .sql_data_guard import verify_sql

src/sql_data_guard/restriction_validation.py

@@ -0,0 +1,23 @@
+class UnsupportedRestrictionError(Exception):
+    pass
+
+
+def validate_restrictions(config: dict):
+    """
+    Validates the restrictions in the configuration to ensure only supported operations are used.
+
+    Args:
+        config (dict): The configuration containing the restrictions to validate.
+
+    Raises:
+        UnsupportedRestrictionError: If an unsupported restriction operation is found.
+    """
+    supported_operations = ["=", ">", "<", ">=", "<=", "!="]  # Allowed operations
+
+    for table in config["tables"]:
+        for restriction in table.get("restrictions", []):
+            operation = restriction.get("operation")
+            if operation and operation.lower() not in supported_operations:
+                raise UnsupportedRestrictionError(
+                    f"Invalid restriction: 'operation={operation}' is not supported."
+                )

src/sql_data_guard/sql_data_guard.py

@@ -5,7 +5,8 @@
 import sqlglot.expressions as expr
 from sqlglot.optimizer.simplify import simplify
 
-from sql_data_guard.verification_context import VerificationContext
+from .verification_context import VerificationContext
+from .restriction_validation import validate_restrictions, UnsupportedRestrictionError
 
 
 def verify_sql(sql: str, config: dict, dialect: str = None) -> dict:
@@ -24,6 +25,13 @@ def verify_sql(sql: str, config: dict, dialect: str = None) -> dict:
             - "fixed" (Optional[str]): The fixed query if modifications were made.
             - "risk" (float): Verification risk score (0 - no risk, 1 - high risk)
     """
+
+    # First, validate restrictions
+    try:
+        validate_restrictions(config)
+    except UnsupportedRestrictionError as e:
+        return {"allowed": False, "errors": [str(e)], "fixed": None, "risk": 1.0}
+    # ___
     result = VerificationContext(config, dialect)
     try:
         parsed = sqlglot.parse_one(sql, dialect=dialect)

test/test_sql_guard_validation_unit.py

@@ -0,0 +1,43 @@
+import pytest
+from sql_data_guard.restriction_validation import (
+    validate_restrictions,
+    UnsupportedRestrictionError,
+)
+
+
+def test_valid_restrictions():
+    config = {
+        "tables": [
+            {
+                "table_name": "products",
+                "restrictions": [
+                    {"column": "price", "value": 100, "operation": ">="},
+                    {"column": "category", "value": "A", "operation": "="},
+                ],
+            }
+        ]
+    }
+
+    try:
+        validate_restrictions(config)
+    except UnsupportedRestrictionError as e:
+        pytest.fail(f"Unexpected error: {e}")
+
+
+def test_invalid_restriction():
+    config = {
+        "tables": [
+            {
+                "table_name": "products",
+                "restrictions": [
+                    {"column": "price", "value": [80, 150], "operation": "BETWEEN"},
+                ],
+            }
+        ]
+    }
+
+    with pytest.raises(
+        UnsupportedRestrictionError,
+        match="Invalid restriction: 'operation=BETWEEN' is not supported.",
+    ):
+        validate_restrictions(config)