unleash.unleash/src/migrations/20210428062103-user-permission-to-rbac.js

'use strict';

const async = require('async');

function resolveRoleName(permissions) {
    if (!permissions || permissions.length === 0) {
        return 'Viewer';
    }
    if (permissions.includes('ADMIN')) {
        return 'Admin';
    }
    return 'Editor';
}

exports.up = function (db, cb) {
    db.runSql(
        'SELECT id, permissions from users WHERE id NOT IN (select user_id from role_user);',
        (err, results) => {
            if (results.rowCount > 0) {
                const users = results.rows;
                const insertRootRole = users.map((u) => {
                    const roleName = resolveRoleName(u.permissions);
                    return db.runSql.bind(
                        db,
                        `INSERT INTO role_user (role_id, user_id)
                     SELECT id, '${u.id}'
                     FROM roles
                     WHERE name = '${roleName}' AND type = 'root';`,
                    );
                });
                async.series(insertRootRole, cb);
            } else {
                cb();
            }
        },
    );
};

exports.down = function (db, cb) {
    // We can't just remove roles for users as we don't know if there has been any manual additions.
    cb();
};