The CREATE FUNCTION statement creates a user-defined function.
The CREATE FUNCTION statement performs a schema change. For more information about how online schema changes work in CockroachDB, see Online Schema Changes.
Required privileges
- To create a function, a user must have
CREATEprivilege on the schema of the function. The user must also have privileges on all the objects referenced in the function body. - To define a function with a user-defined type, a user must have
USAGEprivilege on the user-defined type. - To resolve a function, a user must have at least the
USAGEprivilege on the schema of the function. - To call a function, a user must have
EXECUTEprivilege on the function. By default, the user must also have privileges on all the objects referenced in the function body. However, aSECURITY DEFINERfunction executes with the privileges of the user that owns the function, not the user that calls it. ASECURITY INVOKERfunction executes with the privileges of the user that calls the function, thus matching the default behavior.
If you grant EXECUTE privilege as a default privilege at the database level, newly created functions inherit that privilege from the database.
Synopsis
Parameters
| Parameter | Description |
|---|---|
routine_create_name |
The name of the function. |
routine_param |
A comma-separated list of function parameters, specifying the mode, name, and type. |
routine_return_type |
The type returned by the function. |
routine_body_str |
The body of the function. For allowed contents, see User-Defined Functions. |
Example of a simple function
The following statement creates a function to compute the square of integers:
CREATE OR REPLACE FUNCTION sq(a INT) RETURNS INT AS 'SELECT a*a' LANGUAGE SQL;
The following statement invokes the sq function:
SELECT sq(2);
sq
-----
4
(1 row)
Examples of functions that reference tables
Setup
To follow along, run cockroach demo to start a temporary, in-memory cluster with the movr sample dataset preloaded:
$ cockroach demo
Create a function that references a table
The following statement defines a function that returns the total number of MovR application users.
CREATE OR REPLACE FUNCTION num_users() RETURNS INT AS 'SELECT count(*) FROM users' LANGUAGE SQL;
SELECT num_users();
num_users
-------------
50
(1 row)
Create a function that modifies a table
The following statement defines a function that updates the rules value for a specified row in promo_codes.
CREATE OR REPLACE FUNCTION update_code(
code_name VARCHAR,
new_rules JSONB
)
RETURNS promo_codes AS $$
UPDATE promo_codes SET rules = new_rules
WHERE code = code_name
RETURNING *;
$$ LANGUAGE SQL;
Given the promo_codes row:
code | description | creation_time | expiration_time | rules
---------------------------+----------------------------------------------------------------+---------------------+---------------------+-----------------------------------------------
0_building_it_remember | Door let Mrs manager buy model. Course rock training together. | 2019-01-09 03:04:05 | 2019-01-14 03:04:05 | {"type": "percent_discount", "value": "10%"}
SELECT update_code('0_building_it_remember', '{"type": "percent_discount", "value": "50%"}');
update_code
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
(0_building_it_remember,"Door let Mrs manager buy model. Course rock training together.","2019-01-09 03:04:05","2019-01-14 03:04:05","{""type"": ""percent_discount"", ""value"": ""50%""}")
Create a function that uses a WHERE clause
The following statement defines a function that returns the total revenue for rides taken in European cities.
CREATE OR REPLACE FUNCTION total_euro_revenue() RETURNS DECIMAL LANGUAGE SQL AS $$
SELECT SUM(revenue) FROM rides WHERE city IN ('paris', 'rome', 'amsterdam')
$$;
SELECT total_euro_revenue();
total_euro_revenue
----------------------
8468.00
Create a function that returns a set of results
The following statement defines a function that returns information for all vehicles not in use. The SETOF clause specifies that the function should return each row as the query executes to completion.
CREATE OR REPLACE FUNCTION available_vehicles() RETURNS SETOF vehicles LANGUAGE SQL AS $$
SELECT * FROM vehicles WHERE status = 'available'
$$;
SELECT city,current_location,type FROM available_vehicles();
city | current_location | type
----------------+-----------------------------+-------------
amsterdam | 4102 Stout Flat Apt. 11 | skateboard
boston | 30226 Logan Branch Suite 76 | skateboard
los angeles | 25730 Crystal Terrace | scooter
paris | 9429 Joseph Neck Suite 52 | skateboard
san francisco | 43325 Jeffrey Wall Suite 26 | scooter
(5 rows)
Create a function that returns a RECORD type
The following statement defines a function that returns the information for the user that most recently completed a ride. The information is returned as a record, which takes the structure of the row that is retrieved by the selection query.
In the function subquery, the latest end_time timestamp is used to determine the most recently completed ride.
CREATE OR REPLACE FUNCTION last_rider() RETURNS RECORD LANGUAGE SQL AS $$
SELECT * FROM users WHERE id = (
SELECT rider_id FROM rides WHERE end_time = (SELECT max(end_time) FROM rides)
)
$$;
SELECT last_rider();
last_rider
----------------------------------------------------------------------------------------------------------
(70a3d70a-3d70-4400-8000-000000000016,seattle,"Mary Thomas","43322 Anthony Flats Suite 85",1141093639)
(1 row)
Create a function that uses OUT and INOUT parameters
The following statement uses a combination of OUT and INOUT parameters to modify a provided value and output the result. An OUT parameter returns a value, while an INOUT parameter passes an input value and returns a value.
CREATE OR REPLACE FUNCTION double_triple(INOUT double INT, OUT triple INT) AS
$$
BEGIN
double := double * 2;
triple := double * 3;
END;
$$ LANGUAGE PLpgSQL;
SELECT double_triple(1);
double_triple
-----------------
(2,6)
The CREATE FUNCTION statement does not need a RETURN statement because this is added implicitly for a function with OUT parameters:
SHOW CREATE FUNCTION double_triple;
function_name | create_statement
----------------+---------------------------------------------------------------------------
double_triple | CREATE FUNCTION public.double_triple(INOUT double INT8, OUT triple INT8)
| RETURNS RECORD
| VOLATILE
| NOT LEAKPROOF
| CALLED ON NULL INPUT
| LANGUAGE plpgsql
| AS $$
| BEGIN
| double := double * 2;
| triple := double * 3;
| END;
| $$
Create a function that invokes a function
The following statement defines a function that invokes the double_triple example function.
CREATE OR REPLACE FUNCTION f(input_value INT)
RETURNS RECORD
AS $$
BEGIN
RETURN double_triple(input_value);
END;
$$ LANGUAGE PLpgSQL;
SELECT f(1);
f
---------
(2,6)
Create a function that uses a loop
The following user-defined function returns the nth integer in the Fibonacci sequence.
It uses the PL/pgSQL LOOP syntax to iterate through a simple calculation, and RAISE EXCEPTION to return an error message if the specified n is negative.
CREATE FUNCTION fib(n int) RETURNS INT AS $$
DECLARE
tmp INT;
a INT := 0;
b INT := 1;
i INT := 2;
BEGIN
IF n < 0 THEN
RAISE EXCEPTION 'n must be non-negative';
END IF;
IF n = 0 THEN RETURN 0; END IF;
IF n = 1 THEN RETURN 1; END IF;
LOOP
IF i > n THEN EXIT; END IF;
tmp := a + b;
a := b;
b := tmp;
i := i + 1;
END LOOP;
RETURN b;
END
$$ LANGUAGE PLpgSQL;
SELECT fib(8);
fib
-------
21
Create a SECURITY DEFINER function
The following example defines a function using the SECURITY DEFINER clause. This causes the function to execute with the privileges of the function owner.
Create two roles:
CREATE ROLE owner;
CREATE ROLE invoker;
Grant a SELECT privilege on the user_promo_codes table to the owner role.
GRANT SELECT ON TABLE user_promo_codes TO owner;
Set your role to owner.
SET ROLE owner;
Create a simple SECURITY DEFINER function that reads the contents of user_promo_codes.
CREATE OR REPLACE FUNCTION get_codes()
RETURNS SETOF RECORD
LANGUAGE SQL
SECURITY DEFINER
AS $$
SELECT * FROM user_promo_codes;
$$;
Set your role to invoker.
SET ROLE invoker;
invoker does not have the privileges to read the user_promo_codes table directly:
SELECT * FROM user_promo_codes;
ERROR: user invoker does not have SELECT privilege on relation user_promo_codes
SQLSTATE: 42501
As invoker, you can call the get_codes function, since SECURITY DEFINER is executed with the privileges of the owner role:
SELECT get_codes();
get_codes
------------------------------------------------------------------------------------------------------------
("new york",00000000-0000-4000-8000-000000000000,0_audience_thought_seven,"2019-01-02 03:04:05",10)
("new york",051eb851-eb85-4ec0-8000-000000000001,1_assume_its_leg,"2019-01-02 03:04:05.001",0)
("new york",0a3d70a3-d70a-4d80-8000-000000000002,2_popular_if_describe,"2019-01-02 03:04:05.002",16)
("new york",0f5c28f5-c28f-4c00-8000-000000000003,3_environmental_myself_add,"2019-01-02 03:04:05.003",4)
("new york",147ae147-ae14-4b00-8000-000000000004,4_rule_edge_career,"2019-01-02 03:04:05.004",13)
(5 rows)
See also
Was this helpful?
