-- Grant usage on all necessary schemas
GRANT USAGE ON SCHEMA public TO prisma;
GRANT USAGE ON SCHEMA gis TO prisma;
GRANT USAGE ON SCHEMA auth TO prisma;
GRANT USAGE ON SCHEMA storage TO prisma;
GRANT USAGE ON SCHEMA graphql TO prisma;
GRANT USAGE ON SCHEMA extensions TO prisma;

-- Explicitly grant permissions on auth and storage schemas
DO $$
BEGIN
  -- Explicitly grant on auth schema
  EXECUTE 'GRANT USAGE ON SCHEMA auth TO prisma';
  -- Explicitly grant on storage schema
  EXECUTE 'GRANT USAGE ON SCHEMA storage TO prisma';
END
$$;

-- Grant privileges on all tables in schemas
DO $$
DECLARE
  r RECORD;
BEGIN
  -- Grant privileges on all tables in public schema
  FOR r IN SELECT tablename FROM pg_tables WHERE schemaname = 'public' LOOP
    EXECUTE 'GRANT ALL PRIVILEGES ON TABLE public.' || quote_ident(r.tablename) || ' TO prisma';
  END LOOP;
  
  -- Grant privileges on all tables in gis schema
  FOR r IN SELECT tablename FROM pg_tables WHERE schemaname = 'gis' LOOP
    EXECUTE 'GRANT ALL PRIVILEGES ON TABLE gis.' || quote_ident(r.tablename) || ' TO prisma';
  END LOOP;
  
  -- Grant privileges on all tables in auth schema
  FOR r IN SELECT tablename FROM pg_tables WHERE schemaname = 'auth' LOOP
    EXECUTE 'GRANT SELECT, DELETE ON TABLE auth.' || quote_ident(r.tablename) || ' TO prisma';
  END LOOP;
  
  -- Grant privileges on all tables in storage schema
  FOR r IN SELECT tablename FROM pg_tables WHERE schemaname = 'storage' LOOP
    EXECUTE 'GRANT SELECT, DELETE ON TABLE storage.' || quote_ident(r.tablename) || ' TO prisma';
  END LOOP;
  
  -- Grant privileges on all sequences in public schema
  FOR r IN SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = 'public' LOOP
    EXECUTE 'GRANT ALL PRIVILEGES ON SEQUENCE public.' || quote_ident(r.sequence_name) || ' TO prisma';
  END LOOP;
  
  -- Grant privileges on all sequences in gis schema
  FOR r IN SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = 'gis' LOOP
    EXECUTE 'GRANT ALL PRIVILEGES ON SEQUENCE gis.' || quote_ident(r.sequence_name) || ' TO prisma';
  END LOOP;
  
  -- Grant privileges on all sequences in auth schema
  FOR r IN SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = 'auth' LOOP
    EXECUTE 'GRANT USAGE ON SEQUENCE auth.' || quote_ident(r.sequence_name) || ' TO prisma';
  END LOOP;
  
  -- Grant privileges on all sequences in storage schema
  FOR r IN SELECT sequence_name FROM information_schema.sequences WHERE sequence_schema = 'storage' LOOP
    EXECUTE 'GRANT USAGE ON SEQUENCE storage.' || quote_ident(r.sequence_name) || ' TO prisma';
  END LOOP;
  
  -- Grant usage on all types in public schema
  EXECUTE 'GRANT USAGE ON TYPE "public"."crime_rates" TO prisma';
  EXECUTE 'GRANT USAGE ON TYPE "public"."crime_status" TO prisma';
  EXECUTE 'GRANT USAGE ON TYPE "public"."session_status" TO prisma';
  EXECUTE 'GRANT USAGE ON TYPE "public"."status_contact_messages" TO prisma';
  EXECUTE 'GRANT USAGE ON TYPE "public"."unit_type" TO prisma';
END
$$;

-- Grant execute privileges on functions (separate DO block to avoid EXCEPTION issues)
DO $$
DECLARE
  r RECORD;
BEGIN
  -- Grant execute privileges on all functions in public schema
  FOR r IN SELECT routines.routine_name 
      FROM information_schema.routines 
      WHERE routines.specific_schema = 'public' 
      AND routines.routine_type = 'FUNCTION' LOOP
    BEGIN
      EXECUTE 'GRANT EXECUTE ON FUNCTION public.' || quote_ident(r.routine_name) || '() TO prisma';
    EXCEPTION WHEN OTHERS THEN
      RAISE NOTICE 'Error granting execute on function public.%: %', r.routine_name, SQLERRM;
    END;
  END LOOP;
END
$$;

-- Handle gis functions in a separate block - with enhanced function existence checking
DO $$
DECLARE
  r RECORD;
  function_exists BOOLEAN;
BEGIN
  -- Grant execute privileges on all functions in gis schema
  FOR r IN SELECT routines.routine_name, routines.routine_schema,
            array_to_string(array_agg(parameters.parameter_mode || ' ' || 
                                    parameters.data_type), ', ') AS params
      FROM information_schema.routines
      LEFT JOIN information_schema.parameters ON 
        routines.specific_schema = parameters.specific_schema AND
        routines.specific_name = parameters.specific_name
      WHERE routines.specific_schema = 'gis' 
        AND routines.routine_type = 'FUNCTION'
      GROUP BY routines.routine_name, routines.routine_schema
  LOOP
    BEGIN
      -- Check if function exists with proper arguments
      EXECUTE format('SELECT EXISTS(SELECT 1 FROM pg_proc p JOIN pg_namespace n ON p.pronamespace = n.oid WHERE n.nspname = %L AND p.proname = %L)', 
                     r.routine_schema, r.routine_name) 
      INTO function_exists;
      
      IF function_exists THEN
        -- Use format to avoid '()' issue
        EXECUTE format('GRANT EXECUTE ON FUNCTION %I.%I TO prisma', r.routine_schema, r.routine_name);
      END IF;
    EXCEPTION WHEN OTHERS THEN
      RAISE NOTICE 'Error granting execute on function %.%: %', r.routine_schema, r.routine_name, SQLERRM;
    END;
  END LOOP;
END
$$;

-- Set default privileges for future objects
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO prisma;
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO prisma;
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON FUNCTIONS TO prisma;
ALTER DEFAULT PRIVILEGES IN SCHEMA gis GRANT ALL ON TABLES TO prisma;
ALTER DEFAULT PRIVILEGES IN SCHEMA gis GRANT ALL ON SEQUENCES TO prisma;
ALTER DEFAULT PRIVILEGES IN SCHEMA gis GRANT ALL ON FUNCTIONS TO prisma;
ALTER DEFAULT PRIVILEGES IN SCHEMA auth GRANT SELECT, DELETE ON TABLES TO prisma;
ALTER DEFAULT PRIVILEGES IN SCHEMA storage GRANT SELECT, DELETE ON TABLES TO prisma;

-- Ensure the prisma role has the necessary permissions for the auth schema triggers
DO $$
BEGIN
  EXECUTE 'GRANT EXECUTE ON FUNCTION public.handle_new_user() TO prisma';
EXCEPTION WHEN OTHERS THEN
  RAISE NOTICE 'Error granting execute on function public.handle_new_user(): %', SQLERRM;
END $$;

DO $$
BEGIN
  EXECUTE 'GRANT EXECUTE ON FUNCTION public.handle_user_delete() TO prisma';
EXCEPTION WHEN OTHERS THEN
  RAISE NOTICE 'Error granting execute on function public.handle_user_delete(): %', SQLERRM;
END $$;

DO $$
BEGIN
  EXECUTE 'GRANT EXECUTE ON FUNCTION public.handle_user_update() TO prisma';
EXCEPTION WHEN OTHERS THEN
  RAISE NOTICE 'Error granting execute on function public.handle_user_update(): %', SQLERRM;
END $$;

-- Grant postgres user the ability to manage prisma role
GRANT prisma TO postgres;