Details
-
Story
-
Status: Closed (View Workflow)
-
P2
-
Resolution: Done
-
None
-
customfield_11100 41555
-
CP: sprint 101, CP: sprint 106, CP: sprint 105
-
8
-
Core: Platform
-
R1 2021
Description
Overview
OKAPI-839 investigated approaches to migrating static permissions during module upgrade. The outcome was a PoC and wiki page describing the preferred approach. This story follows that and formalizes/completes the implementation started in the PoC.
wiki page: https://wiki.folio.org/display/DD/Migration+of+Static+Permissions+Upon+Upgrade
PoC: https://github.com/folio-org/mod-permissions/pull/105
NOTE: this work spans both OKAPI and mod-permissions. This story covers the mod-permission portion only.
Jakub notes – to be verified with Craig: we have discussed the following changes compares to the PoC:
- the tenantPermission API call should be extended to include two lists: "module from" permissions and "module to" permissions, each list with the module name and version. Also, additional information about which permissions have been renamed should be available.
- mod-perms should persist the module name and version with each permission it stores in the DB
- once the module name and version is available, migrating permissions happens by overwriting (and renaming) old permissions with new ones. Permissions that are no longer defined in the new module version are "soft deleted"
- "soft deleting" mean s they are marked as "inactive" and removed from standard responses.
- "soft deleted" permissions can be retrieved and cleaned up using a dedicated API
- keeping "soft deleted" permissions around allows for downgrades of permission assignments
- since the current version of mod-permission does not persist information about module name and version, we face an initial migration challenge. We discussed that one way to deal with this problem is to have Okapi make an additional call to mod-permission with the "module from" permissions so that this missing information can be updated.
TestRail: Results
Attachments
Issue Links
- has to be finished together with
-
OKAPI-947 Implement static permission migration
-
- Closed
-
- is blocked by
-
OKAPI-952 SPIKE: overwrite existing permission sets
-
- Closed
-
-
OKAPI-953 SPIKE: soft delete and permission migration during downgrade
-
- Closed
-
- relates to
-
MODPERMS-126 Fix mutable handling
-
- Closed
-
-
MODPERMS-127 SPIKE: permission migration Honeysuckle -> Iris
-
- Closed
-
-
MODPERMS-134 verify permission migratation Honeysuckle -> Iris (part 2)
-
- Closed
-
-
OKAPI-839 SPIKE: consider migration of static permission and permissionSets
-
- Closed
-
-
FOLIO-2989 Collision: Permission is already defined. All refenvs builds failed.
-
- Closed
-
-
MODPERMS-116 Create purge Deprecated API
-
- Closed
-
-
MSEARCH-281 Replace deprecated permission search.instances.facets.collection.get
-
- Closed
-
- mentioned in
-
Page Loading...