Oct 5, 2022 · Oct 3, 2022 · Oct 4, 2022
diff --git a/coderd/database/migrations/000055_template_acl.up.sql b/coderd/database/migrations/000055_template_acl.up.sql
 UNIQUE(user_id, group_id)
 );

 -- Insert a group for every organization (which should just be 1).
 INSERT INTO groups (
 id,
 name,
 organization_id
 ) SELECT
 id, 'Everyone' as name, id
 FROM
 organizations;

 -- Insert allUsers groups into every existing template to avoid breaking
 -- existing deployments.
 UPDATE
 templates
 SET
 group_acl = (
 SELECT
 json_build_object(
 organizations.id, array_to_json('{"read"}'::text[])
 )
 FROM
 organizations
 WHERE
 templates.organization_id = organizations.id
 );

 COMMIT;
diff --git a/coderd/database/modelmethods.go b/coderd/database/modelmethods.go
 "github.com/coder/coder/coderd/rbac"
 )

 constAllUsersGroup="allUsers"
 constAllUsersGroup="Everyone"

 // TemplateACL is a map of user_ids to permissions.
 typeTemplateACLmap[string][]rbac.Action
diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go
diff --git a/coderd/database/queries/groups.sql b/coderd/database/queries/groups.sql
 organization_id
 )
 VALUES
 (sqlc.arg(organization_id),'allUsers',sqlc.arg(organization_id)) RETURNING*;
 (sqlc.arg(organization_id),'Everyone',sqlc.arg(organization_id)) RETURNING*;

 -- name: UpdateGroupByID :one
 UPDATE
diff --git a/coderd/rbac/authz_internal_test.go b/coderd/rbac/authz_internal_test.go
 t.Parallel()
 defOrg:=uuid.New()
 unuseID:=uuid.New()
 allUsersGroup:="allUsers"
 allUsersGroup:="Everyone"

 user:=subject{
 UserID:"me",
Original file line number	Diff line number	Diff line change
Expand Up		@@ -19,4 +19,30 @@ CREATE TABLE group_members (
		UNIQUE(user_id, group_id)
		);

		-- Insert a group for every organization (which should just be 1).
		INSERT INTO groups (
		id,
		name,
		organization_id
		) SELECT
		id, 'Everyone' as name, id
		FROM
		organizations;

		-- Insert allUsers groups into every existing template to avoid breaking
		-- existing deployments.
		UPDATE
		templates
		SET
		group_acl = (
		SELECT
		json_build_object(
		organizations.id, array_to_json('{"read"}'::text[])
		)
		FROM
		organizations
		WHERE
		templates.organization_id = organizations.id
		);

		COMMIT;
Original file line number	Diff line number	Diff line change
Expand Up		@@ -7,7 +7,7 @@ import (
		"github.com/coder/coder/coderd/rbac"
		)

		constAllUsersGroup="allUsers"
		constAllUsersGroup="Everyone"

		// TemplateACL is a map of user_ids to permissions.
		typeTemplateACLmap[string][]rbac.Action
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -89,7 +89,7 @@ INSERT INTO groups (
		organization_id
		)
		VALUES
		(sqlc.arg(organization_id),'allUsers',sqlc.arg(organization_id)) RETURNING*;
		(sqlc.arg(organization_id),'Everyone',sqlc.arg(organization_id)) RETURNING*;

		-- name: UpdateGroupByID :one
		UPDATE
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -195,7 +195,7 @@ func TestAuthorizeDomain(t *testing.T) {
		t.Parallel()
		defOrg:=uuid.New()
		unuseID:=uuid.New()
		allUsersGroup:="allUsers"
		allUsersGroup:="Everyone"

		user:=subject{
		UserID:"me",
Expand Down