add missed migration for DB version 36 (#6678)

api/datastore/migrator/migrate_ce.go

@@ -183,6 +183,12 @@ func (m *Migrator) Migrate() error {
 		}
 	}
 
+	if m.currentDBVersion < 36 {
+		migrateLog.Info("Migrating to DB 36")
+		if err := m.migrateDBVersionToDB36(); err != nil {
+			return migrationError(err, "migrateDBVersionToDB36")
+		}
+	}
 	err = m.versionService.StoreDBVersion(portainer.DBVersion)
 	if err != nil {
 		return migrationError(err, "StoreDBVersion")

api/datastore/migrator/migrate_dbversion35.go

@@ -0,0 +1,36 @@
+package migrator
+
+import (
+	portainer "github.com/portainer/portainer/api"
+	"github.com/portainer/portainer/api/internal/authorization"
+)
+
+func (m *Migrator) migrateDBVersionToDB36() error {
+	migrateLog.Info("Updating user authorizations")
+	if err := m.migrateUsersToDB36(); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *Migrator) migrateUsersToDB36() error {
+	users, err := m.userService.Users()
+	if err != nil {
+		return err
+	}
+
+	for _, user := range users {
+		currentAuthorizations := authorization.DefaultPortainerAuthorizations()
+		currentAuthorizations[portainer.OperationPortainerUserListToken] = true
+		currentAuthorizations[portainer.OperationPortainerUserCreateToken] = true
+		currentAuthorizations[portainer.OperationPortainerUserRevokeToken] = true
+		user.PortainerAuthorizations = currentAuthorizations
+		err = m.userService.UpdateUser(user.ID, &user)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}

api/internal/authorization/authorizations.go

@@ -424,6 +424,9 @@ func DefaultPortainerAuthorizations() portainer.Authorizations {
 		portainer.OperationPortainerUserList:          true,
 		portainer.OperationPortainerUserInspect:       true,
 		portainer.OperationPortainerUserMemberships:   true,
+		portainer.OperationPortainerUserListToken:     true,
+		portainer.OperationPortainerUserCreateToken:   true,
+		portainer.OperationPortainerUserRevokeToken:   true,
 	}
 }
 

api/portainer.go

@@ -1792,6 +1792,9 @@ const (
 	OperationPortainerUserInspect           Authorization = "PortainerUserInspect"
 	OperationPortainerUserMemberships       Authorization = "PortainerUserMemberships"
 	OperationPortainerUserCreate            Authorization = "PortainerUserCreate"
+	OperationPortainerUserListToken         Authorization = "PortainerUserListToken"
+	OperationPortainerUserCreateToken       Authorization = "PortainerUserCreateToken"
+	OperationPortainerUserRevokeToken       Authorization = "PortainerUserRevokeToken"
 	OperationPortainerUserUpdate            Authorization = "PortainerUserUpdate"
 	OperationPortainerUserUpdatePassword    Authorization = "PortainerUserUpdatePassword"
 	OperationPortainerUserDelete            Authorization = "PortainerUserDelete"