from utils.credential import apikey_has_permission


def is_ddl_sql(sql: str) -> bool:
    ddl_keywords = ['CREATE', 'ALTER', 'DROP', 'TRUNCATE', 'UPDATE', 'ADMIN', 'INSERT', 'DELETE']
    for keyword in ddl_keywords:
        if sql.strip().upper().startswith(keyword):
            return True

    return False


def has_ddl_sql_permission(api_key: str, app_id: int):
    resource_uri = f"/dataapi/dataapps/{app_id}/v2/executeDDLSQL:create"

    return apikey_has_permission(api_key, resource_uri)