X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=blobdiff_plain;f=FS%2FFS%2FTicketSystem.pm;h=c973c8802dc92da5745a59817a1e549f01be9ecb;hp=3aeadb37f3285318155816f8b3e0764f2d078e7f;hb=a36e0f8a0f69349dafaa16d1d2d57dfb6e5dbc85;hpb=7a51c5cf922048cf1478920b3fec496e0bb26aef diff --git a/FS/FS/TicketSystem.pm b/FS/FS/TicketSystem.pm index 3aeadb37f..c973c8802 100644 --- a/FS/FS/TicketSystem.pm +++ b/FS/FS/TicketSystem.pm @@ -61,7 +61,11 @@ sub _upgrade_schema { %{ $columns{$tablename}->{$colname} } }; $col->table_obj($table); - push @sql, $col->sql_add_column($dbh); + my ($alter, $postalter) = $col->sql_add_column($dbh); + foreach (@$alter) { + push @sql, "ALTER TABLE $tablename $_;"; + } + push @sql, @$postalter; } } #foreach $colname } #foreach $tablename @@ -155,22 +159,29 @@ sub _upgrade_data { my $search = $class->new($CurrentUser); $search->UnLimit; while ( my $item = $search->Next ) { - my $ids = $hash->{lc($item->Name)} ||= []; - if ( $item->Creator == 1 ) { # RT::SystemUser - unshift @$ids, $item->Id; - } - else { - push @$ids, $item->Id; + if ( $class =~ /Template/ ) { + # template names can be duplicated in different queues, and they are. + my $queue = $item->QueueObj->Name || '0'; + my $subhash = $hash->{$queue} ||= {}; + $subhash->{lc($item->Name)} = $item->Id; + } else { + # then duplicate names are allowed; they just have different ids + my $ids = $hash->{lc($item->Name)} ||= []; + if ( $item->Creator == 1 ) { # RT::SystemUser + unshift @$ids, $item->Id; + } + else { + push @$ids, $item->Id; + } } } }; my (%condition, %action, %template); - &$cachify('RT::ScripConditions', \%condition); - &$cachify('RT::ScripActions', \%action); - &$cachify('RT::Templates', \%template); - # $condition{name} = [ ids... ] + &$cachify('RT::ScripConditions', \%condition); # condition name -> [ ids ] # with the id of the system-created object first, if there is one + &$cachify('RT::ScripActions', \%action); # action name -> [ ids ] + &$cachify('RT::Templates', \%template); # queue name -> tmpl name -> id # ScripConditions my $ScripCondition = RT::ScripCondition->new($CurrentUser); @@ -192,40 +203,50 @@ sub _upgrade_data { $action{ lc($ScripAction->Name) } = [ $ScripAction->Id ]; } + $DB::single = 1; # Templates my $Template = RT::Template->new($CurrentUser); foreach my $t (@Templates) { # $t: Queue, Name, Description, Content - next if exists( $template{ lc($t->{Name}) } ); + next if exists( $template{ $t->{Queue} }->{ lc($t->{Name}) } ); my ($val, $msg) = $Template->Create( %$t ); die $msg if !$val; - $template{ lc($Template->Name) } = [ $Template->Id ]; + $template{ $t->{Queue} }->{ lc($Template->Name) } = [ $Template->Id ]; } # Scrips + # Scrips can no longer be deleted, so we'll count them as existing + # if they're applied to the global queue, or if they're not applied to + # _any_ queue. + my %scrip; # $scrips{condition}{action}{template} = id - my $search = RT::Scrips->new($CurrentUser); - $search->Limit(FIELD => 'Queue', VALUE => 0); - while (my $item = $search->Next) { - my ($c, $a, $t) = map {lc $item->$_->Name} - ('ScripConditionObj', 'ScripActionObj', 'TemplateObj'); - if ( exists $scrip{$c}{$a} and $item->Creator == 1 ) { - warn "Deleting duplicate scrip $c $a [$t]\n"; - my ($val, $msg) = $item->Delete; - warn "error deleting scrip: $msg\n" if !$val; - } - elsif ( exists $Delete_Scrips{$c}{$a}{$t} and $item->Creator == 1 ) { - warn "Deleting obsolete scrip $c $a [$t]\n"; - my ($val, $msg) = $item->Delete; - warn "error deleting scrip: $msg\n" if !$val; - } - else { - $scrip{$c}{$a} = $item->id; + foreach my $criterion ('LimitToGlobal', 'LimitToNotAdded') { + my $search = RT::Scrips->new($CurrentUser); + $search->$criterion; + + while (my $item = $search->Next) { + my ($c, $a, $t) = map {lc $item->$_->Name} + ('ScripConditionObj', 'ScripActionObj', 'TemplateObj'); + if ( exists $scrip{$c}{$a} and $item->Creator == 1 ) { + warn "Deleting duplicate scrip $c $a [$t]\n"; + my ($val, $msg) = $item->Delete; + warn "error deleting scrip: $msg\n" if !$val; + } + elsif ( exists $Delete_Scrips{$c}{$a}{$t} and $item->Creator == 1 ) { + warn "Deleting obsolete scrip $c $a [$t]\n"; + my ($val, $msg) = $item->Delete; + warn "error deleting scrip: $msg\n" if !$val; + } + else { + $scrip{$c}{$a} = $item->id; + } } } + my $Scrip = RT::Scrip->new($CurrentUser); foreach my $s ( @Scrips ) { my $desc = $s->{'Description'}; + # the condition, action, and template _names_ my ($c, $a, $t) = map lc, @{ $s }{'ScripCondition', 'ScripAction', 'Template'}; @@ -241,14 +262,15 @@ sub _upgrade_data { warn "ScripAction '$a' not found.\n"; next; } - if ( !exists($template{$t}) ) { + if ( !exists($template{'0'}{$t}) ) { + # a global template with this name has to exist, at least warn "Template '$t' not found.\n"; next; } my %new_param = ( ScripCondition => $condition{$c}->[0], ScripAction => $action{$a}->[0], - Template => $template{$t}->[0], + Template => $t, # scrips.template is now the name, not the id Queue => 0, Description => $desc, ); @@ -258,11 +280,13 @@ sub _upgrade_data { } #if $scrip{...} # set the Immutable attribute on them if needed - if ( !$Scrip->FirstAttribute('Immutable') ) { - my ($val, $msg) = - $Scrip->SetAttribute(Name => 'Immutable', Content => '1'); - die $msg if !$val; - } + # no longer needed; you can't delete scrips through the UI anyway, only + # disable them + #if ( !$Scrip->FirstAttribute('Immutable') ) { + # my ($val, $msg) = + # $Scrip->SetAttribute(Name => 'Immutable', Content => '1'); + # die $msg if !$val; + #} } #foreach (@Scrips) @@ -331,21 +355,70 @@ sub _upgrade_data { } } - #Pg-specific - my $cve_2013_3373_sql = q( - UPDATE Tickets SET Subject = REPLACE(Subject,E'\n','') - ); - #need this for mysql - #UPDATE Tickets SET Subject = REPLACE(Subject,'\n',''); - - my $cve_2013_3373_sth = $dbh->prepare( $cve_2013_3373_sql) - or die $dbh->errstr; - $cve_2013_3373_sth->execute or die $cve_2013_3373_sth->errstr; - - # fix null WillResolve fields to avoid spurious transactions the - # first time they get updated - my $fix_null_sql = "UPDATE Tickets SET WillResolve = '1970-01-01 00:00:00' WHERE WillResolve IS NULL"; - $dbh->do($fix_null_sql) or die $dbh->errstr; + my $cve_2013_3373_sql = ''; + if ( driver_name =~ /^Pg/i ) { + $cve_2013_3373_sql = q( + UPDATE Tickets SET Subject = REPLACE(Subject,E'\n','') + ); + } elsif ( driver_name =~ /^mysql/i ) { + $cve_2013_3373_sql = q( + UPDATE Tickets SET Subject = REPLACE(Subject,'\n',''); + ); + } else { + warn "WARNING: Don't know how to update RT Ticket Subjects for your database driver for CVE-2013-3373"; + } + if ( $cve_2013_3373_sql ) { + my $cve_2013_3373_sth = $dbh->prepare($cve_2013_3373_sql) + or die $dbh->errstr; + $cve_2013_3373_sth->execute + or die $cve_2013_3373_sth->errstr; + } + + # Remove dangling customer links, if any + my %target_pkey = ('cust_main' => 'custnum', 'cust_svc' => 'svcnum'); + for my $table (keys %target_pkey) { + my $pkey = $target_pkey{$table}; + my $rows = $dbh->do( + "DELETE FROM Links WHERE id IN( + SELECT id FROM ( + SELECT Links.id FROM Links LEFT JOIN $table ON (Links.Target = + 'freeside://freeside/$table/' || $table.$pkey) + WHERE Links.Target like 'freeside://freeside/$table/%' + AND $table.$pkey IS NULL + ) AS x + )" + ) or die $dbh->errstr; + warn "Removed $rows dangling ticket-$table links\n" if $rows > 0; + } + + # Fix ticket transactions on the Time* fields where the NewValue (or + # OldValue, though this is not known to happen) is an empty string + foreach (qw(newvalue oldvalue)) { + my $rows = $dbh->do( + "UPDATE Transactions SET $_ = '0' WHERE ObjectType='RT::Ticket' AND ". + "Field IN ('TimeWorked', 'TimeEstimated', 'TimeLeft') AND $_ = ''" + ) or die $dbh->errstr; + warn "Fixed $rows transactions with empty time values\n" if $rows > 0; + } + + # One-time fix: We've created a "BulkUpdateTickets" access right; grant + # it to all auth'd users initially. + eval "use FS::upgrade_journal;"; + my $upgrade = 'RT_add_BulkUpdateTickets_ACL'; + if (!FS::upgrade_journal->is_done($upgrade)) { + my $groups = RT::Groups->new(RT->SystemUser); + $groups->LimitToEnabled; + $groups->LimitToSystemInternalGroups; + $groups->Limit(FIELD => 'Type', VALUE => 'Privileged', OPERATOR => '='); + my $group = $groups->First + or die "No RT internal group found for Privileged users"; + my ($val, $msg) = $group->PrincipalObj->GrantRight( + Right => 'BulkUpdateTickets', Object => RT->System + ); + die "Couldn't grant BulkUpdateTickets right to all users: $msg\n" + if !$val; + FS::upgrade_journal->set_done($upgrade); + } return; }