terraform {
  required_providers {
    exasol = {
      source  = "registry.terraform.io/exasol/terraform-provider-exasol"
      version = "~> 0.1.1"
    }
  }
}

terraform {
  required_providers {
    exasol = {
      source  = "local/exasol/terraform-provider-exasol"
    }
  }
}

provider "exasol" {
  host     = "localhost"
  port     = 8563
  user     = "sys"
  password = "exasol"
}

resource "exasol_user" "example" {
  name      = "testuser"
  auth_type = "PASSWORD"
  password  = "password123"
}

resource "exasol_role" "analyst" {
  name = "ANALYST_ROLE"
}

# Schema with declarative ownership (NEW in v0.1.1)
resource "exasol_schema" "analytics" {
  name  = "ANALYTICS"
  owner = exasol_role.analyst.name  # Automatically transfers ownership
}

resource "exasol_connection" "s3" {
  name     = "MY_S3_BUCKET"
  to       = "https://my-bucket.s3.us-east-1.amazonaws.com"
  user     = "AWS_ACCESS_KEY"
  password = "AWS_SECRET_KEY"
}

# Grant connection access (NEW in v0.1.1)
resource "exasol_connection_grant" "analyst_s3" {
  connection_name = exasol_connection.s3.name
  grantee         = exasol_role.analyst.name
}

# Grant system privilege
resource "exasol_system_privilege" "create_session" {
  grantee   = exasol_user.example.name
  privilege = "CREATE SESSION"
}

# Grant system privilege with admin option
resource "exasol_system_privilege" "use_any_schema" {
  grantee           = exasol_role.analyst.name
  privilege         = "USE ANY SCHEMA"
  with_admin_option = true
}

# Grant multiple object privileges (can be a single privilege or list)
resource "exasol_object_privilege" "schema_access" {
  grantee     = exasol_role.analyst.name
  privileges  = ["USAGE", "SELECT"]  # List of privileges
  object_type = "SCHEMA"
  object_name = exasol_schema.analytics.name
}

# Grant role to user
resource "exasol_role_grant" "user_role" {
  role    = exasol_role.analyst.name
  grantee = exasol_user.example.name
}

# Grant role with admin option (allows grantee to grant role to others)
resource "exasol_role_grant" "user_role_admin" {
  role              = exasol_role.analyst.name
  grantee           = exasol_user.example.name
  with_admin_option = true
}