1'use strict';
 2
 3const permissions = require('../permissions.json');
 4
 5/**
 6 * An asynchronous bootstrap function that runs before
 7 * your application gets started.
 8 *
 9 * This gives you an opportunity to set up your data model,
10 * run jobs, or perform some special logic.
11 *
12 * See more details here: https://strapi.io/documentation/v3.x/concepts/configurations.html#bootstrap
13 */
14
15module.exports = async () => {
16  /**
17   * Set permissions
18   */
19
20  // For each role, set permissions
21  const roles = Object.keys(permissions.roles);
22  await Promise.all(
23    roles.map(async roleType => {
24      // Get role entity in Strapi db
25      const role = await strapi.query('role', 'users-permissions').findOne({
26        type: roleType,
27      });
28      // If role doesn't exist, skip
29      if (!role) return [];
30
31      // Enable or create permissions for each roles, controllers and actions
32      const perms = permissions.roles[roleType];
33      return perms.map(({type, controllers}) =>
34        controllers.map(({name: controller, actions}) =>
35          actions.map(async action => {
36            const existingPerm = await strapi
37              .query('permission', 'users-permissions')
38              .findOne({
39                role: role.id,
40                type,
41                controller,
42                action,
43              });
44            if (existingPerm) {
45              if (existingPerm.enabled) return false; // If permission already enabled, skip
46              strapi.log.info(
47                `Enable permission ${type}.${controller}.${action} for role ${roleType}.`
48              );
49              return strapi
50                .query('permission', 'users-permissions')
51                .update(
52                  {role: role.id, type, controller, action},
53                  {enabled: true}
54                );
55            } else {
56              strapi.log.info(
57                `Create permission ${type}.${controller}.${action} for role ${roleType}.`
58              );
59              return strapi.query('permission', 'users-permissions').create({
60                role: role.id,
61                type,
62                controller,
63                action,
64                enabled: true,
65              });
66            }
67          })
68        )
69      );
70    })
71  );
72};