support for readonly sql db connection string

src/Core/GlobalSettings.cs

@@ -48,6 +48,7 @@ namespace Bit.Core
         public class SqlServerSettings
         {
             private string _connectionString;
+            private string _readOnlyConnectionString;
 
             public string ConnectionString
             {
@@ -57,6 +58,16 @@ namespace Bit.Core
                     _connectionString = value.Trim('"');
                 }
             }
+
+            public string ReadOnlyConnectionString
+            {
+                get => string.IsNullOrWhiteSpace(_readOnlyConnectionString) ?
+                    _connectionString : _readOnlyConnectionString;
+                set
+                {
+                    _readOnlyConnectionString = value.Trim('"');
+                }
+            }
         }
 
         public class StorageSettings

src/Core/Repositories/SqlServer/BaseRepository.cs

@@ -10,16 +10,22 @@ namespace Bit.Core.Repositories.SqlServer
             SqlMapper.AddTypeHandler(new DateTimeHandler());
         }
 
-        public BaseRepository(string connectionString)
+        public BaseRepository(string connectionString, string readOnlyConnectionString)
         {
             if(string.IsNullOrWhiteSpace(connectionString))
             {
                 throw new ArgumentNullException(nameof(connectionString));
             }
+            if(string.IsNullOrWhiteSpace(readOnlyConnectionString))
+            {
+                throw new ArgumentNullException(nameof(readOnlyConnectionString));
+            }
 
             ConnectionString = connectionString;
+            ReadOnlyConnectionString = readOnlyConnectionString;
         }
 
         protected string ConnectionString { get; private set; }
+        protected string ReadOnlyConnectionString { get; private set; }
     }
 }

src/Core/Repositories/SqlServer/CipherRepository.cs

@@ -16,11 +16,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class CipherRepository : Repository<Cipher, Guid>, ICipherRepository
     {
         public CipherRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public CipherRepository(string connectionString)
-            : base(connectionString)
+        public CipherRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<CipherDetails> GetByIdAsync(Guid id, Guid userId)

src/Core/Repositories/SqlServer/CollectionCipherRepository.cs

@@ -13,11 +13,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class CollectionCipherRepository : BaseRepository, ICollectionCipherRepository
     {
         public CollectionCipherRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public CollectionCipherRepository(string connectionString)
-            : base(connectionString)
+        public CollectionCipherRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<ICollection<CollectionCipher>> GetManyByUserIdAsync(Guid userId)

src/Core/Repositories/SqlServer/CollectionRepository.cs

@@ -15,11 +15,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class CollectionRepository : Repository<Collection, Guid>, ICollectionRepository
     {
         public CollectionRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public CollectionRepository(string connectionString)
-            : base(connectionString)
+        public CollectionRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<int> GetCountByOrganizationIdAsync(Guid organizationId)

src/Core/Repositories/SqlServer/DeviceRepository.cs

@@ -12,11 +12,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class DeviceRepository : Repository<Device, Guid>, IDeviceRepository
     {
         public DeviceRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public DeviceRepository(string connectionString)
-            : base(connectionString)
+        public DeviceRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<Device> GetByIdAsync(Guid id, Guid userId)

src/Core/Repositories/SqlServer/EventRepository.cs

@@ -13,11 +13,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class EventRepository : Repository<Event, Guid>, IEventRepository
     {
         public EventRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public EventRepository(string connectionString)
-            : base(connectionString)
+        public EventRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<PagedResult<IEvent>> GetManyByUserAsync(Guid userId, DateTime startDate, DateTime endDate,

src/Core/Repositories/SqlServer/FolderRepository.cs

@@ -12,11 +12,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class FolderRepository : Repository<Folder, Guid>, IFolderRepository
     {
         public FolderRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public FolderRepository(string connectionString)
-            : base(connectionString)
+        public FolderRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<Folder> GetByIdAsync(Guid id, Guid userId)

src/Core/Repositories/SqlServer/GrantRepository.cs

@@ -12,11 +12,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class GrantRepository : BaseRepository, IGrantRepository
     {
         public GrantRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public GrantRepository(string connectionString)
-            : base(connectionString)
+        public GrantRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<Grant> GetByKeyAsync(string key)

src/Core/Repositories/SqlServer/GroupRepository.cs

@@ -15,11 +15,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class GroupRepository : Repository<Group, Guid>, IGroupRepository
     {
         public GroupRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public GroupRepository(string connectionString)
-            : base(connectionString)
+        public GroupRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<Tuple<Group, ICollection<SelectionReadOnly>>> GetByIdWithCollectionsAsync(Guid id)

src/Core/Repositories/SqlServer/InstallationRepository.cs

@@ -6,11 +6,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class InstallationRepository : Repository<Installation, Guid>, IInstallationRepository
     {
         public InstallationRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public InstallationRepository(string connectionString)
-            : base(connectionString)
+        public InstallationRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
     }
 }

src/Core/Repositories/SqlServer/MaintenanceRepository.cs

@@ -8,11 +8,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class MaintenanceRepository : BaseRepository, IMaintenanceRepository
     {
         public MaintenanceRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public MaintenanceRepository(string connectionString)
-            : base(connectionString)
+        public MaintenanceRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task UpdateStatisticsAsync()

src/Core/Repositories/SqlServer/OrganizationRepository.cs

@@ -13,11 +13,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class OrganizationRepository : Repository<Organization, Guid>, IOrganizationRepository
     {
         public OrganizationRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public OrganizationRepository(string connectionString)
-            : base(connectionString)
+        public OrganizationRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<ICollection<Organization>> GetManyByEnabledAsync()
@@ -48,7 +48,7 @@ namespace Bit.Core.Repositories.SqlServer
         public async Task<ICollection<Organization>> SearchAsync(string name, string userEmail, bool? paid,
             int skip, int take)
         {
-            using(var connection = new SqlConnection(ConnectionString))
+            using(var connection = new SqlConnection(ReadOnlyConnectionString))
             {
                 var results = await connection.QueryAsync<Organization>(
                     "[dbo].[Organization_Search]",

src/Core/Repositories/SqlServer/OrganizationUserRepository.cs

@@ -16,11 +16,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class OrganizationUserRepository : Repository<OrganizationUser, Guid>, IOrganizationUserRepository
     {
         public OrganizationUserRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public OrganizationUserRepository(string connectionString)
-            : base(connectionString)
+        public OrganizationUserRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<int> GetCountByOrganizationIdAsync(Guid organizationId)

src/Core/Repositories/SqlServer/Repository.cs

@@ -12,8 +12,9 @@ namespace Bit.Core.Repositories.SqlServer
         where TId : IEquatable<TId>
         where T : class, ITableObject<TId>
     {
-        public Repository(string connectionString, string schema = null, string table = null)
-            : base(connectionString)
+        public Repository(string connectionString, string readOnlyConnectionString,
+            string schema = null, string table = null)
+            : base(connectionString, readOnlyConnectionString)
         {
             if(!string.IsNullOrWhiteSpace(table))
             {

src/Core/Repositories/SqlServer/U2fRepository.cs

@@ -12,11 +12,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class U2fRepository : Repository<U2f, int>, IU2fRepository
     {
         public U2fRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public U2fRepository(string connectionString)
-            : base(connectionString)
+        public U2fRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public async Task<ICollection<U2f>> GetManyByUserIdAsync(Guid userId)

src/Core/Repositories/SqlServer/UserRepository.cs

@@ -13,11 +13,11 @@ namespace Bit.Core.Repositories.SqlServer
     public class UserRepository : Repository<User, Guid>, IUserRepository
     {
         public UserRepository(GlobalSettings globalSettings)
-            : this(globalSettings.SqlServer.ConnectionString)
+            : this(globalSettings.SqlServer.ConnectionString, globalSettings.SqlServer.ReadOnlyConnectionString)
         { }
 
-        public UserRepository(string connectionString)
-            : base(connectionString)
+        public UserRepository(string connectionString, string readOnlyConnectionString)
+            : base(connectionString, readOnlyConnectionString)
         { }
 
         public override async Task<User> GetByIdAsync(Guid id)
@@ -53,7 +53,7 @@ namespace Bit.Core.Repositories.SqlServer
 
         public async Task<ICollection<User>> SearchAsync(string email, int skip, int take)
         {
-            using(var connection = new SqlConnection(ConnectionString))
+            using(var connection = new SqlConnection(ReadOnlyConnectionString))
             {
                 var results = await connection.QueryAsync<User>(
                     $"[{Schema}].[{Table}_Search]",