unleash.unleash/src/migrations/20210428062103-user-permission-to-rbac.js

'use strict';

const async = require('async');

function resolveRoleName(permissions = []) {
    if (permissions.length === 0) {
        return 'Viewer';
    }
    if (permissions.includes('ADMIN')) {
        return 'Admin';
    }
    return 'Editor';
}

exports.up = function(db, cb) {
    db.runSql(`SELECT id, permissions from users;`, (err, results) => {
        if (results.rowCount > 0) {
            const users = results.rows;
            const insertRootRole = users.map(u => {
                const roleName = resolveRoleName(u.permissions);
                return db.runSql.bind(
                    db,
                    `INSERT INTO role_user (role_id, user_id) 
                     SELECT id, '${u.id}'
                     FROM roles
                     WHERE name = '${roleName}' AND type = 'root';`,
                );
            });
            async.series(insertRootRole, cb);
        } else {
            cb();
        }
    });
};

exports.down = function(db, cb) {
    // We can't just remove roles for users as we don't know if there has been any manual additions.
    cb();
};