@budibase/worker/src/api/controllers/global/roles.ts

Budibase background service

import {
  db as dbCore,
  roles,
  context,
  cache,
  tenancy,
} from "@budibase/backend-core"
import sdk from "../../../sdk"
import {
  Ctx,
  App,
  FetchGlobalRolesResponse,
  FindGlobalRoleResponse,
  RemoveAppRoleResponse,
} from "@budibase/types"

export async function fetch(ctx: Ctx<void, FetchGlobalRolesResponse>) {
  const tenantId = ctx.user!.tenantId
  await context.doInTenant(tenantId, async () => {
    // always use the dev apps as they'll be most up to date (true)
    const apps = await dbCore.getAllApps({ all: true })
    const promises = []
    for (let app of apps) {
      // use dev app IDs
      promises.push(roles.getAllRoles(app.appId))
    }
    const roleList = await Promise.all(promises)
    const response: any = {}
    for (let app of apps) {
      const deployedAppId = dbCore.getProdAppID(app.appId)
      response[deployedAppId] = {
        roles: roleList.shift(),
        name: app.name,
        version: app.version,
        url: app.url,
      }
    }
    ctx.body = response
  })
}

export async function find(ctx: Ctx<void, FindGlobalRoleResponse>) {
  const appId = ctx.params.appId
  await context.doInAppContext(dbCore.getDevAppID(appId), async () => {
    const db = context.getAppDB()
    const app = await db.get<App>(dbCore.DocumentType.APP_METADATA)
    ctx.body = {
      roles: await roles.getAllRoles(),
      name: app.name,
      version: app.version,
      url: app.url,
    }
  })
}

export async function removeAppRole(ctx: Ctx<void, RemoveAppRoleResponse>) {
  const { appId } = ctx.params
  const db = tenancy.getGlobalDB()
  const users = await sdk.users.db.allUsers()
  const bulk = []
  const cacheInvalidations = []
  const prodAppId = dbCore.getProdAppID(appId)
  for (let user of users) {
    let updated = false
    if (user.roles[prodAppId]) {
      cacheInvalidations.push(cache.user.invalidateUser(user._id!))
      delete user.roles[prodAppId]
      updated = true
    }
    if (user.builder && Array.isArray(user.builder?.apps)) {
      const idx = user.builder.apps.indexOf(prodAppId)
      if (idx !== -1) {
        user.builder.apps.splice(idx, 1)
        updated = true
      }
    }
    if (updated) {
      bulk.push(user)
    }
  }
  await db.bulkDocs(bulk)
  await Promise.all(cacheInvalidations)
  ctx.body = {
    message: "App role removed from all users",
  }
}