Update Patch model constraint to be database constraints.

Signed-off-by: ziad hany <ziadhany2016@gmail.com>

Author: ziadhany

vulnerabilities/migrations/0104_packagecommitpatch_patch_and_more.py

@@ -1,4 +1,4 @@
-# Generated by Django 4.2.25 on 2025-12-05 09:16
+# Generated by Django 4.2.25 on 2025-12-11 11:10
 
 from django.db import migrations, models
 
@@ -35,9 +35,6 @@ class Migration(migrations.Migration):
                 ("patch_text", models.TextField(blank=True, null=True)),
                 ("patch_checksum", models.CharField(blank=True, max_length=128, null=True)),
             ],
-            options={
-                "unique_together": {("commit_hash", "vcs_url")},
-            },
         ),
         migrations.CreateModel(
             name="Patch",
@@ -72,9 +69,6 @@ class Migration(migrations.Migration):
                     ),
                 ),
             ],
-            options={
-                "unique_together": {("patch_checksum", "patch_url")},
-            },
         ),
         migrations.RemoveField(
             model_name="impactedpackage",
@@ -103,6 +97,23 @@ class Migration(migrations.Migration):
         migrations.DeleteModel(
             name="CodeCommit",
         ),
+        migrations.AddConstraint(
+            model_name="patch",
+            constraint=models.CheckConstraint(
+                check=models.Q(
+                    ("patch_url__isnull", False), ("patch_text__isnull", False), _connector="OR"
+                ),
+                name="patch_url_or_patch_text",
+            ),
+        ),
+        migrations.AlterUniqueTogether(
+            name="patch",
+            unique_together={("patch_checksum", "patch_url")},
+        ),
+        migrations.AlterUniqueTogether(
+            name="packagecommitpatch",
+            unique_together={("commit_hash", "vcs_url")},
+        ),
         migrations.AddField(
             model_name="advisoryv2",
             name="patches",

vulnerabilities/models.py

@@ -2773,19 +2773,19 @@ class Patch(models.Model):
         help_text="SHA512 checksum of the patch content.",
     )
 
-    def clean(self):
-        if not self.patch_url and not self.patch_text:
-            raise ValidationError("Either patch_url or patch_text must be provided.")
-
     def save(self, *args, **kwargs):
-        # https://docs.djangoproject.com/en/4.2/ref/models/instances/#django.db.models.Model.clean
-        self.full_clean()
         if self.patch_text:
             self.patch_checksum = compute_patch_checksum(self.patch_text)
         super().save(*args, **kwargs)
 
     class Meta:
         unique_together = ["patch_checksum", "patch_url"]
+        constraints = [
+            models.CheckConstraint(
+                check=(Q(patch_url__isnull=False) | Q(patch_text__isnull=False)),
+                name="patch_url_or_patch_text",
+            )
+        ]
 
 
 class PackageCommitPatch(models.Model):