How to find exact matching values in sql - sql

Question

How can I find the exact match in case of duplicate values in SQL
I am using the below query to find customers which are having write access based on the below values.
user **A write** user - {UI.ACCESS, API.ACCESS} and
user **B read** user - {UI.ACCESS, API.ACCESS, UI.READONLY, API.READONLY}
Query -
select ul.USERNAME,sp.PERMISSION_N,cus.ID
from CUSTOMER cus
join USER_L ul on cus.ID = ul.CUSTOMER_ID
join USER_ROLE ur on ul.ID = ur.USER_ID
join SECURITY_ROLE sr on ur.SECURITY_ROLE_ID = sr.SECURITY_ROLE_ID
join SECURITY_PERMISSION sp on sr.SECURITY_PERMISSION_ID = sp.ID
where sp.PERMISSION_NAME in ('UI.ACCESS','API.ACCESS')
above query return the B user as well but I am expecting only A.

Answer 1

You want to check across all the rows in the SECURITY_PERMISSION table that none of them have the forbidden roles.
You have tagged both Oracle and MySQL. In Oracle, you can use:
SELECT ul.USERNAME,
sp.permission_names,
cus.ID
FROM CUSTOMER cus
INNER JOIN USER_L ul
ON (cus.ID = ul.CUSTOMER_ID)
INNER JOIN USER_ROLE ur
ON (ul.ID = ur.USER_ID)
INNER JOIN SECURITY_ROLE sr
ON (ur.SECURITY_ROLE_ID = sr.SECURITY_ROLE_ID)
INNER JOIN (
SELECT id,
LISTAGG(permission_name, ',')
WITHIN GROUP (ORDER BY permission_name)
AS permission_names
FROM SECURITY_PERMISSION
GROUP BY id
HAVING COUNT(
CASE
WHEN PERMISSION_NAME in ('UI.ACCESS','API.ACCESS')
THEN 1
END
) > 0
AND COUNT(
CASE
WHEN PERMISSION_NAME in ('UI.READONLY', 'API.READONLY')
THEN 1
END
) = 0
) sp
ON (sr.SECURITY_PERMISSION_ID = sp.ID)
Which, for the sample data:
CREATE TABLE customer (id) AS
SELECT LEVEL FROM DUAL CONNECT BY LEVEL <= 2;
CREATE TABLE user_l (id, customer_id, username) AS
SELECT LEVEL, LEVEL, 'User' || LEVEL FROM DUAL CONNECT BY LEVEL <= 2;
CREATE TABLE user_role (id, user_id, security_role_id) AS
SELECT LEVEL, LEVEL, LEVEL FROM DUAL CONNECT BY LEVEL <= 2;
CREATE TABLE security_role (security_role_id, security_permission_id) AS
SELECT LEVEL, LEVEL FROM DUAL CONNECT BY LEVEL <= 2;
CREATE TABLE security_permission (id, permission_name) AS
SELECT 1, 'UI.ACCESS' FROM DUAL UNION ALL
SELECT 1, 'API.ACCESS' FROM DUAL UNION ALL
SELECT 2, 'UI.ACCESS' FROM DUAL UNION ALL
SELECT 2, 'API.ACCESS' FROM DUAL UNION ALL
SELECT 2, 'UI.READONLY' FROM DUAL UNION ALL
SELECT 2, 'API.READONLY' FROM DUAL;
Outputs:
USERNAME
PERMISSION_NAMES
ID
User1
API.ACCESS,UI.ACCESS
1
db<>fiddle here
For MySQL, you would need to replace LISTAGG with something to aggregate strings such as GROUP_CONCAT.