You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
54 lines
2.0 KiB
54 lines
2.0 KiB
-- Roll a PostgreSQL database back to the schema the Vaultwarden version *before* the Custom-role
|
|
-- change expects, so that older binary starts again. Read README.md in this directory first --
|
|
-- it lists exactly what is lost and how to run this safely.
|
|
--
|
|
-- PostgreSQL DDL is transactional, so this whole script either applies or it does not.
|
|
|
|
BEGIN;
|
|
|
|
ALTER TABLE users_organizations ADD COLUMN access_all BOOLEAN NOT NULL DEFAULT FALSE;
|
|
|
|
-- The legacy flag is recomputed with the same mapping the down migrations use: everyone who
|
|
-- reached every collection keeps that reach, and a Custom member has to hold all three collection
|
|
-- permissions -- Edit-only must not silently turn into the legacy "manage all collections"
|
|
-- authority, which in that older schema also carried collection deletion.
|
|
UPDATE users_organizations SET access_all = TRUE WHERE atype IN (0, 1);
|
|
UPDATE users_organizations
|
|
SET access_all = TRUE
|
|
WHERE atype = 4
|
|
AND create_new_collections = TRUE
|
|
AND edit_any_collection = TRUE
|
|
AND delete_any_collection = TRUE;
|
|
|
|
-- The old server cannot load type 4; Custom members were stored as Manager back then.
|
|
UPDATE users_organizations SET atype = 3 WHERE atype = 4;
|
|
|
|
ALTER TABLE users_organizations
|
|
DROP COLUMN manage_users,
|
|
DROP COLUMN manage_groups,
|
|
DROP COLUMN manage_policies,
|
|
DROP COLUMN create_new_collections,
|
|
DROP COLUMN edit_any_collection,
|
|
DROP COLUMN delete_any_collection,
|
|
DROP COLUMN access_event_logs,
|
|
DROP COLUMN access_import_export,
|
|
DROP COLUMN access_reports;
|
|
|
|
-- Bookkeeping tables this feature may have left behind.
|
|
DROP TABLE IF EXISTS __vw_custom_role_same_run_0716;
|
|
DROP TABLE IF EXISTS __vw_allow_custom_role_downgrade;
|
|
|
|
-- Finally forget the seven migrations, so the older binary does not see a ledger from the future
|
|
-- and a later upgrade applies them again from a clean state.
|
|
DELETE FROM __diesel_schema_migrations
|
|
WHERE version IN (
|
|
'20260630120000',
|
|
'20260715120000',
|
|
'20260716120000',
|
|
'20260723120000',
|
|
'20260724120000',
|
|
'20260724130000',
|
|
'20260724140000'
|
|
);
|
|
|
|
COMMIT;
|
|
|