[AC-1682] Added EF migrations

util/PostgresMigrations/HelperScripts/2023-12-06_00_AccessAllCollectionGroups.psql

@@ -0,0 +1,27 @@
+-- Create a temporary table to store the groups with AccessAll = true
+CREATE TEMPORARY TABLE TempGroup AS
+SELECT "Id" AS "GroupId", "OrganizationId"
+FROM "Group"
+WHERE "AccessAll" = true;
+
+-- Update existing rows in "CollectionGroups"
+UPDATE "CollectionGroups" CG
+SET
+    "ReadOnly" = false,
+    "HidePasswords" = false,
+    "Manage" = false
+    FROM "CollectionGroups" CGUpdate
+INNER JOIN "Collection" C ON CGUpdate."CollectionId" = C."Id"
+    INNER JOIN TempGroup TG ON CGUpdate."GroupId" = TG."GroupId"
+WHERE C."OrganizationId" = TG."OrganizationId";
+
+-- Insert new rows into "CollectionGroups"
+INSERT INTO "CollectionGroups" ("CollectionId", "GroupId", "ReadOnly", "HidePasswords", "Manage")
+SELECT C."Id", TG."GroupId", false, false, false
+FROM "Collection" C
+         INNER JOIN TempGroup TG ON C."OrganizationId" = TG."OrganizationId"
+         LEFT JOIN "CollectionGroups" CG ON CG."CollectionId" = C."Id" AND CG."GroupId" = TG."GroupId"
+WHERE CG."CollectionId" IS NULL;
+
+-- Drop the temporary table
+DROP TABLE IF EXISTS TempGroup;

util/PostgresMigrations/HelperScripts/2023-12-06_01_AccessAllCollectionUsers.psql

@@ -0,0 +1,51 @@
+-- Step 1: Insert into a temporary table with an additional column for batch processing, update 50 k at a time
+CREATE TEMPORARY TABLE "TempOrgUser" AS
+SELECT "Id" AS "OrganizationUserId", "OrganizationId", CAST(ROW_NUMBER() OVER(ORDER BY "Id") / 50000 AS INT) AS "Batch"
+FROM "OrganizationUser"
+WHERE "AccessAll" = true;
+
+-- Step 2: Get the maximum batch number
+DO $$
+DECLARE
+MaxBatch INT;
+    CurrentBatch INT := 0;
+BEGIN
+SELECT MAX("Batch") INTO MaxBatch FROM "TempOrgUser";
+
+-- Step 3: Process each batch
+WHILE CurrentBatch <= MaxBatch LOOP
+        -- Update existing rows in "CollectionUsers"
+UPDATE "CollectionUsers" AS target
+SET
+    "ReadOnly" = false,
+    "HidePasswords" = false,
+    "Manage" = false
+    FROM (
+            SELECT "C"."Id" AS "CollectionId", "T"."OrganizationUserId"
+            FROM "Collection" "C"
+            INNER JOIN "TempOrgUser" "T" ON "C"."OrganizationId" = "T"."OrganizationId" AND "T"."Batch" = CurrentBatch
+        ) AS source
+WHERE target."CollectionId" = source."CollectionId" AND target."OrganizationUserId" = source."OrganizationUserId";
+
+-- Insert new rows into "CollectionUsers"
+INSERT INTO "CollectionUsers" ("CollectionId", "OrganizationUserId", "ReadOnly", "HidePasswords", "Manage")
+SELECT source."CollectionId", source."OrganizationUserId", false, false, false
+FROM (
+         SELECT "C"."Id" AS "CollectionId", "T"."OrganizationUserId"
+         FROM "Collection" "C"
+                  INNER JOIN "TempOrgUser" "T" ON "C"."OrganizationId" = "T"."OrganizationId" AND "T"."Batch" = CurrentBatch
+     ) AS source
+WHERE NOT EXISTS (
+    SELECT 1
+    FROM "CollectionUsers" target
+    WHERE target."CollectionId" = source."CollectionId" AND target."OrganizationUserId" = source."OrganizationUserId"
+);
+
+-- Move to the next batch
+CurrentBatch := CurrentBatch + 1;
+END LOOP;
+
+END $$;
+
+-- Step 4: Drop the temporary table
+DROP TABLE "TempOrgUser";

util/PostgresMigrations/HelperScripts/2023-12-06_02_ManagersEditAssignedCollectionUsers.psql

@@ -0,0 +1,10 @@
+-- Update "CollectionUser" with "Manage" = 1 for all users with Manager role or 'EditAssignedCollections' permission
+UPDATE "CollectionUsers" cu
+SET "ReadOnly" = false,
+    "HidePasswords" = false,
+    "Manage" = true
+    FROM "OrganizationUser" ou
+WHERE cu."OrganizationUserId" = ou."Id"
+  AND (ou."Type" = 3 OR
+    (ou."Permissions" IS NOT NULL AND
+    (ou."Permissions"::text)::jsonb->>'editAssignedCollections' = 'true'));

util/PostgresMigrations/Migrations/20231217125601_FlexibleCollections.cs

@@ -0,0 +1,27 @@
+using System;
+using Bit.Core.Utilities;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Bit.PostgresMigrations.Migrations
+{
+    public partial class FlexibleCollections : Migration
+    {
+        private const string _accessAllCollectionGroupsScript = "PostgresMigrations.HelperScripts.2023-12-06_00_AccessAllCollectionGroups.psql";
+        private const string _accessAllCollectionUsersScript = "PostgresMigrations.HelperScripts.2023-12-06_01_AccessAllCollectionUsers.psql";
+        private const string _managersEditAssignedCollectionUsersScript = "PostgresMigrations.HelperScripts.2023-12-06_02_ManagersEditAssignedCollectionUsers.psql";
+
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.Sql(CoreHelpers.GetEmbeddedResourceContentsAsync(_accessAllCollectionGroupsScript));
+            migrationBuilder.Sql(CoreHelpers.GetEmbeddedResourceContentsAsync(_accessAllCollectionUsersScript));
+            migrationBuilder.Sql(CoreHelpers.GetEmbeddedResourceContentsAsync(_managersEditAssignedCollectionUsersScript));
+        }
+
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            throw new Exception("Irreversible migration");
+        }
+    }
+}

util/PostgresMigrations/PostgresMigrations.csproj

@@ -24,5 +24,8 @@
     <EmbeddedResource Include="HelperScripts\2021-10-21_00_SetMaxAutoscaleSeatCount.psql" />
     <EmbeddedResource Include="HelperScripts\2022-03-01_00_Up_MigrateOrganizationApiKeys.psql" />
     <EmbeddedResource Include="HelperScripts\2022-03-01_00_Down_MigrateOrganizationApiKeys.psql" />
+    <EmbeddedResource Include="HelperScripts\2023-12-06_00_AccessAllCollectionGroups.psql" />
+    <EmbeddedResource Include="HelperScripts\2023-12-06_01_AccessAllCollectionUsers.psql" />
+    <EmbeddedResource Include="HelperScripts\2023-12-06_02_ManagersEditAssignedCollectionUsers.psql" />
   </ItemGroup>
 </Project>