snapshot of https://github.com/cortezaproject/corteza.git (2024.9.x, 2026-09-18; blobs > 131072B omitted)

server/pkg/provision/user_groups.go

@@ -0,0 +1,78 @@
+package provision
+
+import (
+	"context"
+	"os"
+
+	"github.com/cortezaproject/corteza/server/pkg/errors"
+	"github.com/cortezaproject/corteza/server/pkg/options"
+	"go.uber.org/zap"
+
+	"github.com/cortezaproject/corteza/server/store"
+	"github.com/cortezaproject/corteza/server/system/types"
+)
+
+func setDefaultUserGroupRefs(ctx context.Context, log *zap.Logger, s store.Storer, authOpt options.AuthOpt) (err error) {
+	log.Info("provision start")
+	defer log.Info("provision end")
+
+	h, ok := os.LookupEnv("AUTH_DEFAULT_USER_GROUP")
+	if !ok {
+		h = "default-root"
+	}
+	ug, err := store.LookupUserGroupByHandle(ctx, s, h)
+	if err != nil {
+		if errors.IsNotFound(err) {
+			// Missing/deleted group; nothing to backfill, don't abort provisioning
+			log.Warn("default user group not found or deleted, skipping user/auth-client backfill", zap.String("handle", h))
+			return nil
+		}
+		return
+	}
+
+	// ---
+	// Users
+	// ---
+
+	uu, _, err := store.SearchUsers(ctx, s, types.UserFilter{
+		Kind: types.NormalUser,
+	})
+	if err != nil {
+		return
+	}
+
+	for _, u := range uu {
+		if u.UserGroupID != 0 {
+			continue
+		}
+
+		u.UserGroupID = ug.ID
+		err = store.UpdateUser(ctx, s, u)
+		if err != nil {
+			return
+		}
+	}
+
+	// ---
+	// auth clients
+	// ---
+
+	cc, _, err := store.SearchAuthClients(ctx, s, types.AuthClientFilter{})
+	if err != nil {
+		return
+	}
+
+	for _, c := range cc {
+		if c.Security.UserGroup != 0 {
+			continue
+		}
+
+		c.Security.UserGroup = ug.ID
+		err = store.UpdateAuthClient(ctx, s, c)
+		if err != nil {
+			return
+		}
+	}
+
+	return
+}