mirror of
https://github.com/bitwarden/server
synced 2026-01-15 15:03:34 +00:00
de504d800b
* Integration test around getting and saving collection with group/user permissions * This adds groups to the collections returned. * Added new stored procedures so we don't accidentally wipe out access due to null parameters. * wrapping all calls in transaction in the event that there is an error.
75 lines
1.9 KiB
Transact-SQL
75 lines
1.9 KiB
Transact-SQL
CREATE PROCEDURE [dbo].[Collection_UpdateWithGroups]
|
|
@Id UNIQUEIDENTIFIER,
|
|
@OrganizationId UNIQUEIDENTIFIER,
|
|
@Name VARCHAR(MAX),
|
|
@ExternalId NVARCHAR(300),
|
|
@CreationDate DATETIME2(7),
|
|
@RevisionDate DATETIME2(7),
|
|
@Groups AS [dbo].[CollectionAccessSelectionType] READONLY,
|
|
@DefaultUserCollectionEmail NVARCHAR(256) = NULL,
|
|
@Type TINYINT = 0
|
|
AS
|
|
BEGIN
|
|
SET NOCOUNT ON
|
|
|
|
EXEC [dbo].[Collection_Update] @Id, @OrganizationId, @Name, @ExternalId, @CreationDate, @RevisionDate, @DefaultUserCollectionEmail, @Type
|
|
|
|
-- Groups
|
|
-- Delete groups that are no longer in source
|
|
DELETE
|
|
cg
|
|
FROM
|
|
[dbo].[CollectionGroup] cg
|
|
LEFT JOIN
|
|
@Groups g ON cg.GroupId = g.Id
|
|
WHERE
|
|
cg.CollectionId = @Id
|
|
AND g.Id IS NULL;
|
|
|
|
-- Update existing groups
|
|
UPDATE
|
|
cg
|
|
SET
|
|
cg.ReadOnly = g.ReadOnly,
|
|
cg.HidePasswords = g.HidePasswords,
|
|
cg.Manage = g.Manage
|
|
FROM
|
|
[dbo].[CollectionGroup] cg
|
|
INNER JOIN
|
|
@Groups g ON cg.GroupId = g.Id
|
|
WHERE
|
|
cg.CollectionId = @Id
|
|
AND (
|
|
cg.ReadOnly != g.ReadOnly
|
|
OR cg.HidePasswords != g.HidePasswords
|
|
OR cg.Manage != g.Manage
|
|
);
|
|
|
|
-- Insert new groups
|
|
INSERT INTO [dbo].[CollectionGroup]
|
|
(
|
|
[CollectionId],
|
|
[GroupId],
|
|
[ReadOnly],
|
|
[HidePasswords],
|
|
[Manage]
|
|
)
|
|
SELECT
|
|
@Id,
|
|
g.Id,
|
|
g.ReadOnly,
|
|
g.HidePasswords,
|
|
g.Manage
|
|
FROM
|
|
@Groups g
|
|
INNER JOIN
|
|
[dbo].[Group] grp ON grp.Id = g.Id
|
|
LEFT JOIN
|
|
[dbo].[CollectionGroup] cg ON cg.CollectionId = @Id AND cg.GroupId = g.Id
|
|
WHERE
|
|
grp.OrganizationId = @OrganizationId
|
|
AND cg.CollectionId IS NULL;
|
|
|
|
EXEC [dbo].[User_BumpAccountRevisionDateByCollectionId] @Id, @OrganizationId
|
|
END
|