jason/polaris-task-force
1
0
Fork 0
Code Issues Wiki Activity

chore(seed): grant admin page permissions to built-in roles

Browse source 
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
Jason Fraley 2026-09-01 21:39:14 -04:00
parent 822ac47c23
commit 37d82fd711
1 changed files with 72 additions and 30 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

46
src/tools/seed/seedRoles.ts
View file

@ -2,6 +2,17 @@ import { getPayload } from "payload";
import config from "@payload-config";
import type { Permission } from "@/permissions";
const resolvedConfig = await config;
const COLLECTION_SLUGS = resolvedConfig.collections.map((c) => c.slug);
const ALL_COLLECTION_READS: Permission[] = COLLECTION_SLUGS.map(
(slug) => `${slug}:read` as Permission,
);
const ALL_ADMIN_PAGE_MANAGE: Permission[] = COLLECTION_SLUGS.map(
(slug) => `admin:${slug}:manage` as Permission,
);
const USER_PERMISSIONS: Permission[] = [
"users:read",
"ranks:read",
@ -47,6 +58,7 @@ const USER_PERMISSIONS: Permission[] = [
];
const ADMIN_PERMISSIONS: Permission[] = [
...new Set<Permission>([
...USER_PERMISSIONS,
"system:admin-access",
"users:read",
@ -75,6 +87,9 @@ const ADMIN_PERMISSIONS: Permission[] = [
"discord:staff",
"discord:announce",
"structures:create",
...ALL_COLLECTION_READS,
...ALL_ADMIN_PAGE_MANAGE,
]),
];
interface BuiltinRole {
@ -145,9 +160,36 @@ export const seedRoles = async () => {
});
if (existing.docs.length > 0) {
const doc = existing.docs[0] as { id: number };
const doc = existing.docs[0] as {
id: number;
isSystem?: boolean;
permissions?: Permission[] | null;
};
roleIdMap.set(role.slug, doc.id);
payload.logger.info(` Role "${role.slug}" already exists (id=${doc.id}), skipping.`);
if (role.isSystem) {
const existingPerms = doc.permissions ?? [];
const missing = role.permissions.filter((p) => !existingPerms.includes(p));
if (missing.length > 0) {
await payload.update({
collection: "roles",
id: doc.id,
data: { permissions: [...existingPerms, ...missing] },
overrideAccess: true,
});
payload.logger.info(
` Role "${role.slug}" (id=${doc.id}) updated with ${missing.length} missing built-in permission(s).`,
);
} else {
payload.logger.info(
` Role "${role.slug}" already exists (id=${doc.id}), permissions up to date.`,
);
}
} else {
payload.logger.info(
` Role "${role.slug}" already exists (id=${doc.id}), skipping (non-system).`,
);
}
continue;
}