[AC-1682] Added EF migrations

util/MySqlMigrations/HelperScripts/2023-12-06_00_AccessAllCollectionGroups.sql

@@ -0,0 +1,26 @@
+-- Step 1: Create a temporary table to store the groups with AccessAll = 1
+CREATE TEMPORARY TABLE IF NOT EXISTS TempGroup AS
+SELECT `Id` AS `GroupId`, `OrganizationId`
+FROM `Group`
+WHERE `AccessAll` = 1;
+
+-- Step 2: Update existing rows in `CollectionGroup`
+UPDATE `CollectionGroups` CG
+    INNER JOIN `Collection` C ON CG.`CollectionId` = C.`Id`
+    INNER JOIN TempGroup TG ON CG.`GroupId` = TG.`GroupId`
+    SET
+        CG.`ReadOnly` = 0,
+        CG.`HidePasswords` = 0,
+        CG.`Manage` = 0
+WHERE C.`OrganizationId` = TG.`OrganizationId`;
+
+-- Step 3: Insert new rows into `CollectionGroup`
+INSERT INTO `CollectionGroups` (`CollectionId`, `GroupId`, `ReadOnly`, `HidePasswords`, `Manage`)
+SELECT C.`Id`, TG.`GroupId`, 0, 0, 0
+FROM `Collection` C
+         INNER JOIN TempGroup TG ON C.`OrganizationId` = TG.`OrganizationId`
+         LEFT JOIN `CollectionGroups` CG ON CG.`CollectionId` = C.`Id` AND CG.`GroupId` = TG.`GroupId`
+WHERE CG.`CollectionId` IS NULL;
+
+-- Step 4: Drop the temporary table
+DROP TEMPORARY TABLE IF EXISTS TempGroup;

util/MySqlMigrations/HelperScripts/2023-12-06_01_AccessAllCollectionUsers.sql

@@ -0,0 +1,50 @@
+-- Step 1: Create a temporary table with an additional column for batch processing, update 50 k at a time
+CREATE TEMPORARY TABLE TempOrgUser AS
+SELECT OrganizationUser.Id AS OrganizationUserId, OrganizationUser.OrganizationId,
+       CAST(ROW_NUMBER() OVER(ORDER BY OrganizationUser.Id) / 50000 AS SIGNED) AS Batch
+FROM OrganizationUser
+WHERE AccessAll = 1;
+
+-- Step 2: Get the maximum batch number
+SET @MaxBatch := (SELECT MAX(Batch) FROM TempOrgUser);
+SET @CurrentBatch := 0;
+
+-- Create the stored procedure
+CREATE PROCEDURE ProcessBatches(INOUT currentBatch INT, IN maxBatch INT)
+BEGIN
+    WHILE currentBatch <= maxBatch DO
+        -- Update existing rows in CollectionUsers
+        UPDATE CollectionUsers AS target
+            INNER JOIN (
+            SELECT C.Id AS CollectionId, T.OrganizationUserId
+            FROM Collection C
+            INNER JOIN TempOrgUser T ON C.OrganizationId = T.OrganizationId AND T.Batch = currentBatch
+            ) AS source
+        ON target.CollectionId = source.CollectionId AND target.OrganizationUserId = source.OrganizationUserId
+            SET
+                target.ReadOnly = 0,
+                target.HidePasswords = 0,
+                target.Manage = 0;
+
+        -- Insert new rows into CollectionUsers
+        INSERT INTO CollectionUsers (CollectionId, OrganizationUserId, ReadOnly, HidePasswords, Manage)
+        SELECT source.CollectionId, source.OrganizationUserId, 0, 0, 0
+        FROM (
+                 SELECT C.Id AS CollectionId, T.OrganizationUserId
+                 FROM Collection C
+                          INNER JOIN TempOrgUser T ON C.OrganizationId = T.OrganizationId AND T.Batch = currentBatch
+             ) AS source
+                 LEFT JOIN CollectionUsers AS target
+                           ON target.CollectionId = source.CollectionId AND target.OrganizationUserId = source.OrganizationUserId
+        WHERE target.CollectionId IS NULL;
+
+        -- Move to the next batch
+        SET currentBatch := currentBatch + 1;
+    END WHILE;
+END;
+
+-- Step 3: Process each batch by calling the stored procedure
+CALL ProcessBatches(@CurrentBatch, @MaxBatch);
+
+-- Step 4: Drop the temporary table
+DROP TEMPORARY TABLE IF EXISTS TempOrgUser;

util/MySqlMigrations/HelperScripts/2023-12-06_02_ManagersEditAssignedCollectionUsers.sql

@@ -0,0 +1,8 @@
+-- Update `CollectionUser` with `Manage` = 1 for all users with Manager role or 'EditAssignedCollections' permission
+UPDATE CollectionUsers cu
+    INNER JOIN OrganizationUser ou ON cu.OrganizationUserId = ou.Id
+    SET cu.ReadOnly = 0,
+        cu.HidePasswords = 0,
+        cu.Manage = 1
+WHERE ou.Type = 3 OR (ou.Permissions IS NOT NULL AND
+    JSON_VALID(ou.Permissions) AND JSON_UNQUOTE(JSON_EXTRACT(ou.Permissions, '$.editAssignedCollections')) = 'true');

util/MySqlMigrations/Migrations/20231217125557_FlexibleCollections.cs

@@ -0,0 +1,27 @@
+using System;
+using Bit.Core.Utilities;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Bit.MySqlMigrations.Migrations
+{
+    public partial class FlexibleCollections : Migration
+    {
+        private const string _accessAllCollectionGroupsScript = "MySqlMigrations.HelperScripts.2023-12-06_00_AccessAllCollectionGroups.sql";
+        private const string _accessAllCollectionUsersScript = "MySqlMigrations.HelperScripts.2023-12-06_01_AccessAllCollectionUsers.sql";
+        private const string _managersEditAssignedCollectionUsersScript = "MySqlMigrations.HelperScripts.2023-12-06_02_ManagersEditAssignedCollectionUsers.sql";
+
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.Sql(CoreHelpers.GetEmbeddedResourceContentsAsync(_accessAllCollectionGroupsScript));
+            migrationBuilder.Sql(CoreHelpers.GetEmbeddedResourceContentsAsync(_accessAllCollectionUsersScript));
+            migrationBuilder.Sql(CoreHelpers.GetEmbeddedResourceContentsAsync(_managersEditAssignedCollectionUsersScript));
+        }
+
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            throw new Exception("Irreversible migration");
+        }
+    }
+}

util/MySqlMigrations/MySqlMigrations.csproj

@@ -29,5 +29,8 @@
     <EmbeddedResource Include="HelperScripts\2021-10-21_00_SetMaxAutoscaleSeatCount.sql" />
     <EmbeddedResource Include="HelperScripts\2022-03-01_00_Up_MigrateOrganizationApiKeys.sql" />
     <EmbeddedResource Include="HelperScripts\2022-03-01_00_Down_MigrateOrganizationApiKeys.sql" />
+    <EmbeddedResource Include="HelperScripts\2023-12-06_00_AccessAllCollectionGroups.sql" />
+    <EmbeddedResource Include="HelperScripts\2023-12-06_01_AccessAllCollectionUsers.sql" />
+    <EmbeddedResource Include="HelperScripts\2023-12-06_02_ManagersEditAssignedCollectionUsers.sql" />
   </ItemGroup>
 </Project>