88 lines
3.4 KiB
Ruby
88 lines
3.4 KiB
Ruby
|
namespace :cartodb do
|
||
|
|
namespace :permissions do
|
||
|
|
desc 'setup default permissions for visualizations without them'
|
||
|
|
task :fill_missing_permissions, [:auto_fix] => :environment do |_, args|
|
||
|
|
File.open('log/fill_missing_permissions.log', 'a') do |log_file|
|
||
|
|
auto_fix = args[:auto_fix].present?
|
||
|
|
|
||
|
|
# This uses the new models to avoid triggering side-effects
|
||
|
|
viz = Carto::Visualization.select('visualizations.*')
|
||
|
|
.joins('LEFT JOIN permissions ON visualizations.permission_id = permissions.id')
|
||
|
|
.where('permissions.id IS NULL OR permissions.entity_id != visualizations.id').all
|
||
|
|
puts "*** Updating permissions for #{viz.count} visualization"
|
||
|
|
puts "*** Automatically fixing conflicts" if auto_fix
|
||
|
|
sleep 5
|
||
|
|
failed_ids = []
|
||
|
|
|
||
|
|
viz.each do |v|
|
||
|
|
begin
|
||
|
|
puts '*** Updating permissions for visualization ' + v.id
|
||
|
|
# Tries to find existing permission
|
||
|
|
perms = Carto::Permission.where(entity_id: v.id).all
|
||
|
|
if perms.empty?
|
||
|
|
puts ' - Creating new default permission'
|
||
|
|
|
||
|
|
user_id = v.user_id ? v.user_id : '00000000-0000-0000-0000-000000000000'
|
||
|
|
username = v.user ? v.user.username : 'cdb_unknown' # Workaround for invalid users
|
||
|
|
perm = Carto::Permission.create(
|
||
|
|
owner_id: user_id,
|
||
|
|
owner_username: username
|
||
|
|
)
|
||
|
|
|
||
|
|
log_file.puts "Visualization #{v.id}, permission changed from '#{v.permission_id}' to '#{perm.id}' (default)"
|
||
|
|
v.update_column(:permission_id, perm.id)
|
||
|
|
elsif perms.count == 1 || auto_fix
|
||
|
|
puts ' - Reusing existing permission'
|
||
|
|
log_file.puts "Visualization #{v.id}, permission changed from '#{v.permission_id}' to '#{perms.first.id}'"
|
||
|
|
v.update_column(:permission_id, perms.first.id)
|
||
|
|
else
|
||
|
|
puts ' - Multiple permissions, skipping'
|
||
|
|
failed_ids << v.id
|
||
|
|
end
|
||
|
|
sleep 0.2
|
||
|
|
rescue StandardError => e
|
||
|
|
puts 'ERROR ' + e.message
|
||
|
|
puts e.backtrace.join("\n")
|
||
|
|
failed_ids << v.id
|
||
|
|
end
|
||
|
|
end
|
||
|
|
unless failed_ids.empty?
|
||
|
|
puts '*** Failed visualizations:'
|
||
|
|
puts failed_ids.join('\n')
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
desc 'fix permission pointing to non-existing entities'
|
||
|
|
task :fix_permission_acl => :environment do
|
||
|
|
permission_query = Carto::Permission.where("access_control_list != '[]'")
|
||
|
|
|
||
|
|
# Load the full list of user and group ids into memory for performance
|
||
|
|
uids = Set.new(Carto::User.select(:id).map(&:id))
|
||
|
|
gids = Set.new(Carto::Group.select(:id).map(&:id))
|
||
|
|
|
||
|
|
total = permission_query.count
|
||
|
|
i = 0
|
||
|
|
permission_query.find_each do |p|
|
||
|
|
begin
|
||
|
|
new_acl = p.acl.reject do |acl|
|
||
|
|
acl[:type] == 'user' && !uids.include?(acl[:id]) ||
|
||
|
|
acl[:type] == 'group' && !gids.include?(acl[:id])
|
||
|
|
end
|
||
|
|
|
||
|
|
if new_acl != p.acl
|
||
|
|
puts "Fixing #{p.id}. From #{p.acl} to #{new_acl}"
|
||
|
|
p.update_column(:access_control_list, JSON.dump(new_acl))
|
||
|
|
p.save!
|
||
|
|
end
|
||
|
|
|
||
|
|
i += 1
|
||
|
|
puts "#{i} / #{total}" if (i % 100).zero?
|
||
|
|
rescue StandardError => e
|
||
|
|
puts "Unable to update Permission: #{e}"
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|