Index: openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-create.sql
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-create.sql,v
diff -u -r1.1 -r1.2
--- openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-create.sql	7 May 2001 19:19:06 -0000	1.1
+++ openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-create.sql	21 Aug 2001 22:15:43 -0000	1.2
@@ -1,23 +1,145 @@
 -- electronic postcard
+
+
+/* first we create the permissions model for postcards
+
+  defining these basic actions
+   
+  - upload images
+  - view postcard
+  - moderate images
+  - create card to send
+
+  and then define the base security privileges that we
+  want to have. applications that want to designate
+  to the end user fine grained permission control, should 
+  designate appropiate basic privileges as the atomic level
+  of an applications/services security.
+
+*/ 
+begin;
+
+ select acs_privilege__create_privilege('postcard_create_image',null,null);
+ select acs_privilege__create_privilege('postcard_create_card',null,null);
+ select acs_privilege__create_privilege('postcard_read',null,null);
+ select acs_privilege__create_privilege('postcard_admin',null,null);
+
+
+ -- bind privileges to privilege heirarchy
+
+ -- temporarily drop this trigger to avoid a data-change violation 
+ -- on acs_privilege_hierarchy_index while updating the child privileges.
+
+ drop trigger acs_priv_hier_ins_del_tr on acs_privilege_hierarchy;
+
+ select acs_privilege__add_child('create', 'postcard_create_image');
+ select acs_privilege__add_child('create', 'postcard_create_card');
+ select acs_privilege__add_child('read', 'postcard_read');
+
+ -- re-enable the trigger before the last insert to force the 
+ -- acs_privilege_hierarchy_index table to be updated.
+
+ create trigger acs_priv_hier_ins_del_tr after insert or delete
+ on acs_privilege_hierarchy for each row
+ execute procedure acs_priv_hier_ins_del_tr ();
+
+ select acs_privilege__add_child('admin','postcard_admin');
+end;
+
+
+/* 
+   Creating permissions basically involves binding the
+   privilege to the object system.
+
+   permissions involve binding a particular privilege
+   to a user in a given context.
+
+   We grant the permissions to the public
+
+   inline function - inline funcs are used to allow 
+   calling pl/pgsql.
+*/
+ 
+create function inline_0 ()
+returns integer as '
+declare
+    default_context integer;
+    registered_users integer;
+    the_public integer;
+begin
+
+    default_context := acs__magic_object_id(''default_context'');
+    registered_users := acs__magic_object_id(''registered_users'');
+    the_public := acs__magic_object_id(''the_public'');
+
+    -- give registered users the power to post by default
+
+    perform acs_permission__grant_permission (
+        default_context,
+        registered_users,
+        ''postcard_create_card''
+    );
+
+    perform acs_permission__grant_permission (
+        default_context,
+        registered_users,
+        ''postcard_create_image''
+    );
+
+    -- give the public the power to read by default
+
+    perform acs_permission__grant_permission (
+        default_context,
+        the_public,
+        ''postcard_read''
+    );
+
+    return 0;
+end;
+' language 'plpgsql';
+
+select inline_0 ();
+drop function inline_0 ();
+
+/* basic data model
+
+this needs to get migrated to the content-repository
+
+for now the original data model is utilized.
+
+*/
+
 create sequence postcard_seq;
+create view postcard_sequence as
+	select nextval('postcard_seq');
+	
 create sequence postcard_image_seq;
+create view postcard_image_sequence as
+	select nextval('postcard_image_seq');
 
 create table postcard_images (
   card_image_id integer primary key,
-  image         oid not null,
+  lob         integer references lobs,
   mime_type     varchar(100),
   title         varchar(1000),
   description   varchar(4000)
 );
 
+-- to enable pg lob support see kernel/sql/postgresql/lobs.sql
+create trigger postcard_images_lob_trigger before delete or update or insert
+on postcard_images for each row execute procedure on_lob_ref();
+
 create table postcards (
   card_id      integer primary key,
-  card_picture references postcard_images,
+  card_picture integer references postcard_images,
   recipient    varchar(1000),
   sender       varchar(1000),
   message      varchar(4000),
   pickup_code  varchar(1000),
-  picked_up date
-);
+  picked_up    date 
+); 
 
 
+
+
+
Index: openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-drop.sql
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-drop.sql,v
diff -u -r1.1 -r1.2
--- openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-drop.sql	7 May 2001 19:19:06 -0000	1.1
+++ openacs-4/contrib/obsolete-packages/postcard/sql/postgresql/postcard-drop.sql	21 Aug 2001 22:15:43 -0000	1.2
@@ -1,5 +1,34 @@
+
+
+
 drop table postcard_images;
+drop trigger postcard_images_lob_trigger;
 drop table postcards;
 drop sequence postcard_seq;
 drop sequence postcard_image_seq;
 
+
+-- Drop permission metadata
+delete from acs_permissions
+    where privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+
+delete from acs_privilege_hierarchy
+    where privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+delete from acs_privilege_hierarchy
+    where child_privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+delete from acs_privileges
+    where privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+
+
Index: openacs-4/packages/postcard/sql/postgresql/postcard-create.sql
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/postcard/sql/postgresql/postcard-create.sql,v
diff -u -r1.1 -r1.2
--- openacs-4/packages/postcard/sql/postgresql/postcard-create.sql	7 May 2001 19:19:06 -0000	1.1
+++ openacs-4/packages/postcard/sql/postgresql/postcard-create.sql	21 Aug 2001 22:15:43 -0000	1.2
@@ -1,23 +1,145 @@
 -- electronic postcard
+
+
+/* first we create the permissions model for postcards
+
+  defining these basic actions
+   
+  - upload images
+  - view postcard
+  - moderate images
+  - create card to send
+
+  and then define the base security privileges that we
+  want to have. applications that want to designate
+  to the end user fine grained permission control, should 
+  designate appropiate basic privileges as the atomic level
+  of an applications/services security.
+
+*/ 
+begin;
+
+ select acs_privilege__create_privilege('postcard_create_image',null,null);
+ select acs_privilege__create_privilege('postcard_create_card',null,null);
+ select acs_privilege__create_privilege('postcard_read',null,null);
+ select acs_privilege__create_privilege('postcard_admin',null,null);
+
+
+ -- bind privileges to privilege heirarchy
+
+ -- temporarily drop this trigger to avoid a data-change violation 
+ -- on acs_privilege_hierarchy_index while updating the child privileges.
+
+ drop trigger acs_priv_hier_ins_del_tr on acs_privilege_hierarchy;
+
+ select acs_privilege__add_child('create', 'postcard_create_image');
+ select acs_privilege__add_child('create', 'postcard_create_card');
+ select acs_privilege__add_child('read', 'postcard_read');
+
+ -- re-enable the trigger before the last insert to force the 
+ -- acs_privilege_hierarchy_index table to be updated.
+
+ create trigger acs_priv_hier_ins_del_tr after insert or delete
+ on acs_privilege_hierarchy for each row
+ execute procedure acs_priv_hier_ins_del_tr ();
+
+ select acs_privilege__add_child('admin','postcard_admin');
+end;
+
+
+/* 
+   Creating permissions basically involves binding the
+   privilege to the object system.
+
+   permissions involve binding a particular privilege
+   to a user in a given context.
+
+   We grant the permissions to the public
+
+   inline function - inline funcs are used to allow 
+   calling pl/pgsql.
+*/
+ 
+create function inline_0 ()
+returns integer as '
+declare
+    default_context integer;
+    registered_users integer;
+    the_public integer;
+begin
+
+    default_context := acs__magic_object_id(''default_context'');
+    registered_users := acs__magic_object_id(''registered_users'');
+    the_public := acs__magic_object_id(''the_public'');
+
+    -- give registered users the power to post by default
+
+    perform acs_permission__grant_permission (
+        default_context,
+        registered_users,
+        ''postcard_create_card''
+    );
+
+    perform acs_permission__grant_permission (
+        default_context,
+        registered_users,
+        ''postcard_create_image''
+    );
+
+    -- give the public the power to read by default
+
+    perform acs_permission__grant_permission (
+        default_context,
+        the_public,
+        ''postcard_read''
+    );
+
+    return 0;
+end;
+' language 'plpgsql';
+
+select inline_0 ();
+drop function inline_0 ();
+
+/* basic data model
+
+this needs to get migrated to the content-repository
+
+for now the original data model is utilized.
+
+*/
+
 create sequence postcard_seq;
+create view postcard_sequence as
+	select nextval('postcard_seq');
+	
 create sequence postcard_image_seq;
+create view postcard_image_sequence as
+	select nextval('postcard_image_seq');
 
 create table postcard_images (
   card_image_id integer primary key,
-  image         oid not null,
+  lob         integer references lobs,
   mime_type     varchar(100),
   title         varchar(1000),
   description   varchar(4000)
 );
 
+-- to enable pg lob support see kernel/sql/postgresql/lobs.sql
+create trigger postcard_images_lob_trigger before delete or update or insert
+on postcard_images for each row execute procedure on_lob_ref();
+
 create table postcards (
   card_id      integer primary key,
-  card_picture references postcard_images,
+  card_picture integer references postcard_images,
   recipient    varchar(1000),
   sender       varchar(1000),
   message      varchar(4000),
   pickup_code  varchar(1000),
-  picked_up date
-);
+  picked_up    date 
+); 
 
 
+
+
+
Index: openacs-4/packages/postcard/sql/postgresql/postcard-drop.sql
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/postcard/sql/postgresql/postcard-drop.sql,v
diff -u -r1.1 -r1.2
--- openacs-4/packages/postcard/sql/postgresql/postcard-drop.sql	7 May 2001 19:19:06 -0000	1.1
+++ openacs-4/packages/postcard/sql/postgresql/postcard-drop.sql	21 Aug 2001 22:15:43 -0000	1.2
@@ -1,5 +1,34 @@
+
+
+
 drop table postcard_images;
+drop trigger postcard_images_lob_trigger;
 drop table postcards;
 drop sequence postcard_seq;
 drop sequence postcard_image_seq;
 
+
+-- Drop permission metadata
+delete from acs_permissions
+    where privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+
+delete from acs_privilege_hierarchy
+    where privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+delete from acs_privilege_hierarchy
+    where child_privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+delete from acs_privileges
+    where privilege in
+        ('postcard_create_card', 'postcard_create_image',
+        'postcard_read', 'postcard_admin');
+
+
+