import { Permissions, Roles, Settings, Users } from '@rocket.chat/models'; import type { UpdateResult } from 'mongodb'; import { upsertPermissions } from '../../lib/authorization/upsertPermissions'; import { migrateDatabase, onServerVersionChange } from '../../lib/migrations'; import { settings } from '../../settings'; import { ensureCloudWorkspaceRegistered } from '../cloudRegistration'; const { MIGRATION_VERSION = 'latest' } = process.env; const [version, ...subcommands] = MIGRATION_VERSION.split(','); const maxAgeSettingMap = new Map([ ['RetentionPolicy_MaxAge_Channels', 'RetentionPolicy_TTL_Channels'], ['RetentionPolicy_MaxAge_Groups', 'RetentionPolicy_TTL_Groups'], ['RetentionPolicy_MaxAge_DMs', 'RetentionPolicy_TTL_DMs'], ]); const moveRetentionSetting = async () => { const convertDaysToMs = (days: number) => days * 24 * 60 * 60 * 1000; const promises: Array> = []; await Settings.find( { _id: { $in: Array.from(maxAgeSettingMap.keys()) }, value: { $ne: -1 } }, { projection: { _id: 1, value: 1 } }, ).forEach(({ _id, value }) => { const newSettingId = maxAgeSettingMap.get(_id); if (!newSettingId) { throw new Error(`moveRetentionSetting - Setting ${_id} equivalent does not exist`); } const newValue = convertDaysToMs(Number(value)); promises.push( Settings.updateOne( { _id: maxAgeSettingMap.get(_id), }, { $set: { value: newValue, }, }, ), ); const currentCache = settings.getSetting(newSettingId); if (!currentCache) { return; } settings.set({ ...currentCache, value: newValue }); }); await Promise.all(promises); await Settings.updateMany({ _id: { $in: Array.from(maxAgeSettingMap.keys()) } }, { $set: { value: -1 } }); }; async function setPermissionsToNewRole() { const role = await Roles.findOneById('federated-external'); // if role was found it means it was already created with the permissions, so we can skip it if (role) { return; } // if federation was used before the new role was created, we need to update their roles with the new role await Users.updateMany({ federated: true }, { $addToSet: { roles: 'federated-external' } }); const rolePermissions = [ 'create-c', 'create-d', 'create-p', 'delete-own-message', 'leave-c', 'leave-p', 'mention-all', 'mention-here', 'start-discussion', 'start-discussion-other-user', 'view-c-room', 'view-d-room', 'view-p-room', 'preview-c-room', 'view-outside-room', 'mobile-upload-file', 'access-federation', ]; // since this is a one time query, no need to create a method in model class for it await Permissions.updateMany({ _id: { $in: rolePermissions } }, { $addToSet: { roles: 'federated-external' } }); } export const performMigrationProcedure = async (): Promise => { await migrateDatabase(version === 'latest' ? version : parseInt(version), subcommands); // perform operations when the server is starting with a different version await onServerVersionChange(async () => { await setPermissionsToNewRole(); await upsertPermissions(); await ensureCloudWorkspaceRegistered(); await moveRetentionSetting(); }); };