nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-07-04 01:22:50 -05:00
Code Activity

[AC-1682] Bumped up date on migration scripts

Browse Source
This commit is contained in:
Rui Tome
2024-02-16 13:09:58 +00:00
parent f7f692cf08
commit 6d1ead5b61
27 changed files with 24 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

91
util/SqliteMigrations/HelperScripts/2024-02-16_02_ManagersEditAssignedCollectionUsers.sql Normal file
View File

@ -0,0 +1,91 @@
-- Step 1: Update `CollectionUser` with `Manage` = 1 for all users with Manager role or 'EditAssignedCollections' permission
-- Create a temporary table
CREATE TEMPORARY TABLE IF NOT EXISTS TempOrgUser AS
SELECT ou."Id" AS "OrganizationUserId"
FROM "OrganizationUser" ou
WHERE ou."Type" = 3 OR (
ou."Permissions" IS NOT NULL AND
JSON_VALID(ou."Permissions") > 0 AND
JSON_EXTRACT(ou."Permissions", '$.editAssignedCollections') = 'true'
);
-- Update CollectionUsers with Manage = 1 using the temporary table
UPDATE "CollectionUsers"
SET
"ReadOnly" = 0,
"HidePasswords" = 0,
"Manage" = 1
WHERE "OrganizationUserId" IN (SELECT "OrganizationUserId" FROM TempOrgUser);
-- Update `User` AccountRevisionDate for each unique OrganizationUserId
UPDATE "User"
SET "AccountRevisionDate" = CURRENT_TIMESTAMP
WHERE "Id" IN (
SELECT OU."UserId"
FROM "OrganizationUser" OU
JOIN TempOrgUser TOU ON OU."Id" = TOU."OrganizationUserId"
WHERE OU."Status" = 2
);
-- Drop the temporary table
DROP TABLE IF EXISTS TempOrgUser;
-- Step 2: Insert rows to CollectionUser for Managers and users with 'EditAssignedCollections' permission assigned to groups with collection access
-- Store the results in a temporary table
CREATE TEMPORARY TABLE IF NOT EXISTS TempCol AS
SELECT cg."CollectionId", ou."Id" AS "OrganizationUserId"
FROM "CollectionGroups" cg
JOIN "GroupUser" gu ON cg."GroupId" = gu."GroupId"
JOIN "OrganizationUser" ou ON gu."OrganizationUserId" = ou."Id"
WHERE (ou."Type" = 3 OR (
ou."Permissions" IS NOT NULL AND
JSON_VALID(ou."Permissions") > 0 AND
JSON_EXTRACT(ou."Permissions", '$.editAssignedCollections') = 'true'
))
AND NOT EXISTS (
SELECT 1 FROM "CollectionUsers" cu
WHERE cu."CollectionId" = cg."CollectionId" AND cu."OrganizationUserId" = ou."Id"
);
-- Insert rows into CollectionUsers using the temporary table
INSERT INTO "CollectionUsers" ("CollectionId", "OrganizationUserId", "ReadOnly", "HidePasswords", "Manage")
SELECT "CollectionId", "OrganizationUserId", 0, 0, 1
FROM TempCol;
-- Update `User` AccountRevisionDate for each unique OrganizationUserId
UPDATE "User"
SET "AccountRevisionDate" = CURRENT_TIMESTAMP
WHERE "Id" IN (
SELECT OU."UserId"
FROM "OrganizationUser" OU
JOIN TempCol TC ON TC."OrganizationUserId" = OU."Id"
WHERE OU."Status" = 2
);
-- Drop the temporary table
DROP TABLE IF EXISTS TempCol;
-- Step 3: Set all Managers to Users
-- Create a temporary table
CREATE TEMPORARY TABLE IF NOT EXISTS TempOrgUser AS
SELECT ou."Id" AS "OrganizationUserId"
FROM "OrganizationUser" ou
WHERE ou."Type" = 3;
-- Update OrganizationUser with Type = 2 using the temporary table
UPDATE "OrganizationUser"
SET "Type" = 2
WHERE "Id" IN (SELECT "OrganizationUserId" FROM TempOrgUser);
-- Update `User` AccountRevisionDate for each unique OrganizationUserId
UPDATE "User"
SET "AccountRevisionDate" = CURRENT_TIMESTAMP
WHERE "Id" IN (
SELECT OU."UserId"
FROM "OrganizationUser" OU
JOIN TempOrgUser TOU ON TOU."OrganizationUserId" = OU."Id"
WHERE OU."Status" = 2
);
-- Drop the temporary table
DROP TABLE IF EXISTS TempOrgUser;