Add federation sync configuration SQL table and RPC endpoints

perms/perms.go

@@ -188,6 +188,14 @@ var (
 			Entity: "universe",
 			Action: "read",
 		}},
+		"/universerpc.Universe/SetFederationSyncConfig": {{
+			Entity: "universe",
+			Action: "write",
+		}},
+		"/universerpc.Universe/QueryFederationSyncConfig": {{
+			Entity: "universe",
+			Action: "read",
+		}},
 		"/tapdevrpc.TapDev/ImportProof": {{
 			Entity: "proofs",
 			Action: "write",

tapdb/sqlc/migrations/000007_universe.down.sql

@@ -1,11 +1,13 @@
 DROP TABLE IF EXISTS universe_leaves;
 DROP TABLE IF EXISTS universe_roots;
 DROP TABLE IF EXISTS universe_servers;
+DROP TABLE IF EXISTS federation_global_sync_config;
+DROP TABLE IF EXISTS federation_uni_sync_config;
 DROP INDEX IF EXISTS universe_servers_host;
 DROP TABLE IF EXISTS universe_events;
 DROP INDEX IF EXISTS universe_events_event_time_idx;
 DROP INDEX IF EXISTS universe_events_type_idx;
 DROP INDEX IF EXISTS universe_roots_asset_id_idx;
 DROP INDEX IF EXISTS universe_roots_group_key_idx;
 DROP INDEX IF EXISTS universe_leaves_key_idx;
-DROP INDEX IF EXISTS universe_leaves_namespace;
+DROP INDEX IF EXISTS universe_leaves_namespace;

tapdb/sqlc/migrations/000007_universe.up.sql

@@ -85,3 +85,52 @@ CREATE VIEW universe_stats AS
     FROM universe_events u
     JOIN universe_roots roots ON u.universe_root_id = roots.id
     GROUP BY roots.asset_id, roots.group_key, roots.namespace_root;
+
+-- This table contains global configuration for universe federation syncing.
+CREATE TABLE IF NOT EXISTS federation_global_sync_config (
+    -- This field is an enum representing the proof type stored in the given
+    -- universe.
+    proof_type TEXT NOT NULL PRIMARY KEY CHECK(proof_type IN ('issuance', 'transfer')),
+
+    -- This field is a boolean that indicates whether or not a universe of the
+    -- given proof type should accept remote proof insertion via federation
+    -- sync.
+    allow_sync_insert BOOLEAN NOT NULL,
+
+    -- This field is a boolean that indicates whether or not a universe of the
+    -- given proof type should accept remote proof export via federation sync.
+    allow_sync_export BOOLEAN NOT NULL
+);
+
+-- This table contains universe (asset/asset group) specific federation sync
+-- configuration.
+CREATE TABLE IF NOT EXISTS federation_uni_sync_config (
+    -- This field contains the byte serialized ID of the asset to which this
+    -- configuration is applicable
+    asset_id  BLOB CHECK(length(asset_id) = 32) NULL,
+
+    -- This field contains the byte serialized compressed group key public key
+    -- of the asset group to which this configuration is applicable.
+    group_key BLOB CHECK(LENGTH(group_key) = 33) NULL,
+
+    -- This field is an enum representing the proof type stored in the given
+    -- universe.
+    proof_type TEXT NOT NULL CHECK(proof_type IN ('issuance', 'transfer')),
+
+    -- This field is a boolean that indicates whether or not the given universe
+    -- should accept remote proof insertion via federation sync.
+    allow_sync_insert BOOLEAN NOT NULL,
+
+    -- This field is a boolean that indicates whether or not the given universe
+    -- should accept remote proof export via federation sync.
+    allow_sync_export BOOLEAN NOT NULL,
+
+    -- Both the asset ID and group key cannot be null at the same time.
+    CHECK (
+        (asset_id IS NOT NULL AND group_key IS NULL) OR
+        (asset_id IS NULL AND group_key IS NOT NULL)
+    ),
+
+    -- Ensure that the universe identifier fields form a unique tuple.
+    UNIQUE (asset_id, group_key, proof_type)
+);

tapdb/sqlc/queries/universe.sql

@@ -262,3 +262,33 @@ WHERE event_type IN ('SYNC', 'NEW_PROOF') AND
       event_timestamp >= @start_time AND event_timestamp <= @end_time
 GROUP BY day
 ORDER BY day;
+
+-- name: UpsertFederationGlobalSyncConfig :exec
+INSERT INTO federation_global_sync_config (
+    proof_type, allow_sync_insert, allow_sync_export
+)
+VALUES (@proof_type, @allow_sync_insert, @allow_sync_export)
+ON CONFLICT(proof_type)
+    DO UPDATE SET
+    allow_sync_insert = @allow_sync_insert,
+    allow_sync_export = @allow_sync_export;
+
+-- name: QueryFederationGlobalSyncConfigs :many
+SELECT proof_type, allow_sync_insert, allow_sync_export
+FROM federation_global_sync_config;
+
+-- name: UpsertFederationUniSyncConfig :exec
+INSERT INTO federation_uni_sync_config  (
+    asset_id, group_key, proof_type, allow_sync_insert, allow_sync_export
+)
+VALUES(
+    @asset_id, @group_key, @proof_type, @allow_sync_insert, @allow_sync_export
+)
+ON CONFLICT(asset_id, group_key, proof_type)
+    DO UPDATE SET
+    allow_sync_insert = @allow_sync_insert,
+    allow_sync_export = @allow_sync_export;
+
+-- name: QueryFederationUniSyncConfigs :many
+SELECT asset_id, group_key, proof_type, allow_sync_insert, allow_sync_export
+FROM federation_uni_sync_config;