1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
@Initial = (
sub {
use strict;
$RT::Logger->debug('Make sure templates all have known types');
# We update all NULL rows, below. We want to find non-NULL
# rows, which weren't created by the current codebase running
# through earlier initialdatas. Type != 'Perl' enforces the
# non-NULL part, as well
my $templates = RT::Templates->new(RT->SystemUser);
$templates->Limit(
FIELD => 'Type',
OPERATOR => '!=',
VALUE => 'Perl',
);
if ($templates->Count) {
die "You have templates with Type already set. This will interfere with your upgrade because RT used to ignore the template Type field, but now uses it.";
}
$templates = RT::Templates->new(RT->SystemUser);
$templates->Limit(
FIELD => 'Type',
OPERATOR => 'IS',
VALUE => 'NULL',
);
while (my $template = $templates->Next) {
my ($status, $msg) = $template->SetType('Perl');
$RT::Logger->warning( "Couldn't change Type of Template #" . $template->Id . ": $msg" ) unless $status;
}
},
sub {
use strict;
$RT::Logger->debug('Adding ExecuteCode right to principals that currently have ModifyTemplate or ModifyScrips');
my $acl = RT::ACL->new(RT->SystemUser);
$acl->Limit(
FIELD => 'RightName',
OPERATOR => '=',
VALUE => 'ModifyTemplate',
ENTRYAGGREGATOR => 'OR',
);
$acl->Limit(
FIELD => 'RightName',
OPERATOR => '=',
VALUE => 'ModifyScrips',
ENTRYAGGREGATOR => 'OR',
);
while (my $ace = $acl->Next) {
my $principal = $ace->PrincipalObj;
next if $principal->HasRight(
Right => 'ExecuteCode',
Object => $RT::System,
);
my ($ok, $msg) = $principal->GrantRight(
Right => 'ExecuteCode',
Object => $RT::System,
);
if (!$ok) {
$RT::Logger->warn("Unable to grant ExecuteCode on principal " . $principal->id . ": $msg");
}
}
},
);
|
