nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-07-03 09:02:48 -05:00
Code Activity

[AC-1682] Updated postgres migrations

Browse Source
This commit is contained in:
Rui Tome
2024-01-12 15:33:35 +00:00
parent 752e2c01ea
commit d5b41c1b51
4 changed files with 140 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

102
util/PostgresMigrations/HelperScripts/2024-01-12_02_ManagersEditAssignedCollectionUsers.psql
View File

@ -1,24 +1,80 @@
-- Update `CollectionUsers` with `Manage` = 1 for all users with Manager role or 'EditAssignedCollections' permission
UPDATE "CollectionUsers" cu
SET
"ReadOnly" = false,
"HidePasswords" = false,
"Manage" = true
FROM "OrganizationUser" ou
WHERE cu."OrganizationUserId" = ou."Id"
AND (ou."Type" = 3 OR
(ou."Permissions" IS NOT NULL AND
((ou."Permissions"::text)::jsonb->>'editAssignedCollections') = 'true'));
-- Step 1: Update `CollectionUser` with `Manage` = 1 for all users with Manager role or 'EditAssignedCollections' permission
-- Create a temporary table
CREATE TEMP TABLE IF NOT EXISTS TempOrgUser AS
SELECT ou."Id" AS "OrganizationUserId"
FROM "OrganizationUser" ou
WHERE (ou."Type" = 3 OR
(ou."Permissions" IS NOT NULL AND
((ou."Permissions"::text)::jsonb->>'editAssignedCollections') = 'true'));
-- Insert rows into CollectionUsers for Managers and users with 'EditAssignedCollections' permission assigned to groups with collection access
INSERT INTO "CollectionUsers" ("CollectionId", "OrganizationUserId", "ReadOnly", "HidePasswords", "Manage")
SELECT cg."CollectionId", ou."Id", false, false, true
FROM "CollectionGroups" cg
INNER JOIN "GroupUser" gu ON cg."GroupId" = gu."GroupId"
INNER JOIN "OrganizationUser" ou ON gu."OrganizationUserId" = ou."Id"
WHERE (ou."Type" = 3 OR
(ou."Permissions" IS NOT NULL AND
((ou."Permissions"::text)::jsonb->>'editAssignedCollections') = 'true'))
AND NOT EXISTS (
SELECT 1 FROM "CollectionUsers" cu
WHERE cu."CollectionId" = cg."CollectionId" AND cu."OrganizationUserId" = ou."Id");
-- Update CollectionUsers with Manage = 1 using the temporary table
UPDATE "CollectionUsers" cu
SET
"ReadOnly" = false,
"HidePasswords" = false,
"Manage" = true
FROM TempOrgUser temp
WHERE cu."OrganizationUserId" = temp."OrganizationUserId";
-- Update `User` AccountRevisionDate for each unique OrganizationUserId
UPDATE "User" AS U
SET "AccountRevisionDate" = current_timestamp
FROM "OrganizationUser" AS OU
JOIN TempOrgUser AS TOU ON OU."Id" = TOU."OrganizationUserId"
WHERE OU."Status" = 2 AND U."Id" = OU."UserId";
-- Drop the temporary table
DROP TABLE IF EXISTS TempOrgUser;
-- Step 2: Insert rows to CollectionUser for Managers and users with 'EditAssignedCollections' permission assigned to groups with collection access
-- Store the results in a temporary table
CREATE TEMP TABLE IF NOT EXISTS TempCol AS
SELECT cg."CollectionId", ou."Id" AS "OrganizationUserId"
FROM "CollectionGroups" cg
INNER JOIN "GroupUser" gu ON cg."GroupId" = gu."GroupId"
INNER JOIN "OrganizationUser" ou ON gu."OrganizationUserId" = ou."Id"
WHERE (ou."Type" = 3 OR
(ou."Permissions" IS NOT NULL AND
((ou."Permissions"::text)::jsonb->>'editAssignedCollections') = 'true'))
AND NOT EXISTS (
SELECT 1 FROM "CollectionUsers" cu
WHERE cu."CollectionId" = cg."CollectionId" AND cu."OrganizationUserId" = ou."Id"
);
-- Insert rows into CollectionUsers using the temporary table
INSERT INTO "CollectionUsers" ("CollectionId", "OrganizationUserId", "ReadOnly", "HidePasswords", "Manage")
SELECT "CollectionId", "OrganizationUserId", false, false, true
FROM TempCol;
-- Update `User` AccountRevisionDate for each unique OrganizationUserId
UPDATE "User" AS U
SET "AccountRevisionDate" = current_timestamp
FROM "OrganizationUser" AS OU
JOIN TempCol AS TC ON OU."Id" = TC."OrganizationUserId"
WHERE OU."Status" = 2 AND U."Id" = OU."UserId";
-- Drop the temporary table
DROP TABLE IF EXISTS TempCol;
-- Step 3: Set all Managers to Users
-- Create a temporary table
CREATE TEMP TABLE IF NOT EXISTS TempOrgUser AS
SELECT ou."Id" AS "OrganizationUserId"
FROM "OrganizationUser" ou
WHERE ou."Type" = 3;
-- Update OrganizationUser with Type = 2 using the temporary table
UPDATE "OrganizationUser" ou
SET "Type" = 2
FROM TempOrgUser temp
WHERE ou."Id" = temp."OrganizationUserId";
-- Update `User` AccountRevisionDate for each unique OrganizationUserId
UPDATE "User" AS U
SET "AccountRevisionDate" = current_timestamp
FROM "OrganizationUser" AS OU
JOIN TempOrgUser AS TOU ON OU."Id" = TOU."OrganizationUserId"
WHERE OU."Status" = 2 AND U."Id" = OU."UserId";
-- Drop the temporary table
DROP TABLE IF EXISTS TempOrgUser;