MM-11348: Add telemetry for advanced permissions. (#9249)

1 files changed, 132 insertions, 32 deletions

diff --git a/app/diagnostics.go b/app/diagnostics.go
index 91341c310..6726b8140 100644
--- a/app/diagnostics.go
+++ b/app/diagnostics.go
@@ -6,46 +6,51 @@ package app
 import (
 	"path/filepath"
 	"runtime"
+	"strings"
+
+	"github.com/segmentio/analytics-go"
 
 	"github.com/mattermost/mattermost-server/mlog"
 	"github.com/mattermost/mattermost-server/model"
-	"github.com/segmentio/analytics-go"
 )
 
 const (
 	SEGMENT_KEY = "fwb7VPbFeQ7SKp3wHm1RzFUuXZudqVok"
 
-	TRACK_CONFIG_SERVICE        = "config_service"
-	TRACK_CONFIG_TEAM           = "config_team"
-	TRACK_CONFIG_CLIENT_REQ     = "config_client_requirements"
-	TRACK_CONFIG_SQL            = "config_sql"
-	TRACK_CONFIG_LOG            = "config_log"
-	TRACK_CONFIG_FILE           = "config_file"
-	TRACK_CONFIG_RATE           = "config_rate"
-	TRACK_CONFIG_EXTENSION      = "config_extension"
-	TRACK_CONFIG_EMAIL          = "config_email"
-	TRACK_CONFIG_PRIVACY        = "config_privacy"
-	TRACK_CONFIG_THEME          = "config_theme"
-	TRACK_CONFIG_OAUTH          = "config_oauth"
-	TRACK_CONFIG_LDAP           = "config_ldap"
-	TRACK_CONFIG_COMPLIANCE     = "config_compliance"
-	TRACK_CONFIG_LOCALIZATION   = "config_localization"
-	TRACK_CONFIG_SAML           = "config_saml"
-	TRACK_CONFIG_PASSWORD       = "config_password"
-	TRACK_CONFIG_CLUSTER        = "config_cluster"
-	TRACK_CONFIG_METRICS        = "config_metrics"
-	TRACK_CONFIG_WEBRTC         = "config_webrtc"
-	TRACK_CONFIG_SUPPORT        = "config_support"
-	TRACK_CONFIG_NATIVEAPP      = "config_nativeapp"
-	TRACK_CONFIG_EXPERIMENTAL   = "config_experimental"
-	TRACK_CONFIG_ANALYTICS      = "config_analytics"
-	TRACK_CONFIG_ANNOUNCEMENT   = "config_announcement"
-	TRACK_CONFIG_ELASTICSEARCH  = "config_elasticsearch"
-	TRACK_CONFIG_PLUGIN         = "config_plugin"
-	TRACK_CONFIG_DATA_RETENTION = "config_data_retention"
-	TRACK_CONFIG_MESSAGE_EXPORT = "config_message_export"
-	TRACK_CONFIG_DISPLAY        = "config_display"
-	TRACK_CONFIG_TIMEZONE       = "config_timezone"
+	TRACK_CONFIG_SERVICE            = "config_service"
+	TRACK_CONFIG_TEAM               = "config_team"
+	TRACK_CONFIG_CLIENT_REQ         = "config_client_requirements"
+	TRACK_CONFIG_SQL                = "config_sql"
+	TRACK_CONFIG_LOG                = "config_log"
+	TRACK_CONFIG_FILE               = "config_file"
+	TRACK_CONFIG_RATE               = "config_rate"
+	TRACK_CONFIG_EXTENSION          = "config_extension"
+	TRACK_CONFIG_EMAIL              = "config_email"
+	TRACK_CONFIG_PRIVACY            = "config_privacy"
+	TRACK_CONFIG_THEME              = "config_theme"
+	TRACK_CONFIG_OAUTH              = "config_oauth"
+	TRACK_CONFIG_LDAP               = "config_ldap"
+	TRACK_CONFIG_COMPLIANCE         = "config_compliance"
+	TRACK_CONFIG_LOCALIZATION       = "config_localization"
+	TRACK_CONFIG_SAML               = "config_saml"
+	TRACK_CONFIG_PASSWORD           = "config_password"
+	TRACK_CONFIG_CLUSTER            = "config_cluster"
+	TRACK_CONFIG_METRICS            = "config_metrics"
+	TRACK_CONFIG_WEBRTC             = "config_webrtc"
+	TRACK_CONFIG_SUPPORT            = "config_support"
+	TRACK_CONFIG_NATIVEAPP          = "config_nativeapp"
+	TRACK_CONFIG_EXPERIMENTAL       = "config_experimental"
+	TRACK_CONFIG_ANALYTICS          = "config_analytics"
+	TRACK_CONFIG_ANNOUNCEMENT       = "config_announcement"
+	TRACK_CONFIG_ELASTICSEARCH      = "config_elasticsearch"
+	TRACK_CONFIG_PLUGIN             = "config_plugin"
+	TRACK_CONFIG_DATA_RETENTION     = "config_data_retention"
+	TRACK_CONFIG_MESSAGE_EXPORT     = "config_message_export"
+	TRACK_CONFIG_DISPLAY            = "config_display"
+	TRACK_CONFIG_TIMEZONE           = "config_timezone"
+	TRACK_PERMISSIONS_GENERAL       = "permissions_general"
+	TRACK_PERMISSIONS_SYSTEM_SCHEME = "permissions_system_scheme"
+	TRACK_PERMISSIONS_TEAM_SCHEMES  = "permissions_team_schemes"
 
 	TRACK_ACTIVITY = "activity"
 	TRACK_LICENSE  = "license"
@@ -63,6 +68,7 @@ func (a *App) SendDailyDiagnostics() {
 		a.trackLicense()
 		a.trackPlugins()
 		a.trackServer()
+		a.trackPermissions()
 	}
 }
 
@@ -650,3 +656,97 @@ func (a *App) trackServer() {
 
 	a.SendDiagnostic(TRACK_SERVER, data)
 }
+
+func (a *App) trackPermissions() {
+	phase1Complete := false
+	if ph1res := <-a.Srv.Store.System().GetByName(ADVANCED_PERMISSIONS_MIGRATION_KEY); ph1res.Err == nil {
+		phase1Complete = true
+	}
+
+	phase2Complete := false
+	if ph2res := <-a.Srv.Store.System().GetByName(model.MIGRATION_KEY_ADVANCED_PERMISSIONS_PHASE_2); ph2res.Err == nil {
+		phase2Complete = true
+	}
+
+	a.SendDiagnostic(TRACK_PERMISSIONS_GENERAL, map[string]interface{}{
+		"phase_1_migration_complete": phase1Complete,
+		"phase_2_migration_complete": phase2Complete,
+	})
+
+	systemAdminPermissions := ""
+	if role, err := a.GetRoleByName(model.SYSTEM_ADMIN_ROLE_ID); err == nil {
+		systemAdminPermissions = strings.Join(role.Permissions, " ")
+	}
+
+	systemUserPermissions := ""
+	if role, err := a.GetRoleByName(model.SYSTEM_USER_ROLE_ID); err == nil {
+		systemUserPermissions = strings.Join(role.Permissions, " ")
+	}
+
+	teamAdminPermissions := ""
+	if role, err := a.GetRoleByName(model.TEAM_ADMIN_ROLE_ID); err == nil {
+		teamAdminPermissions = strings.Join(role.Permissions, " ")
+	}
+
+	teamUserPermissions := ""
+	if role, err := a.GetRoleByName(model.TEAM_USER_ROLE_ID); err == nil {
+		teamUserPermissions = strings.Join(role.Permissions, " ")
+	}
+
+	channelAdminPermissions := ""
+	if role, err := a.GetRoleByName(model.CHANNEL_ADMIN_ROLE_ID); err == nil {
+		channelAdminPermissions = strings.Join(role.Permissions, " ")
+	}
+
+	channelUserPermissions := ""
+	if role, err := a.GetRoleByName(model.CHANNEL_USER_ROLE_ID); err == nil {
+		systemAdminPermissions = strings.Join(role.Permissions, " ")
+	}
+
+	a.SendDiagnostic(TRACK_PERMISSIONS_SYSTEM_SCHEME, map[string]interface{}{
+		"system_admin_permissions":  systemAdminPermissions,
+		"system_user_permissions":   systemUserPermissions,
+		"team_admin_permissions":    teamAdminPermissions,
+		"team_user_permissions":     teamUserPermissions,
+		"channel_admin_permissions": channelAdminPermissions,
+		"channel_user_permissions":  channelUserPermissions,
+	})
+
+	if schemes, err := a.GetSchemes(model.SCHEME_SCOPE_TEAM, 0, 100); err == nil {
+		for _, scheme := range schemes {
+			teamAdminPermissions := ""
+			if role, err := a.GetRoleByName(scheme.DefaultTeamAdminRole); err == nil {
+				teamAdminPermissions = strings.Join(role.Permissions, " ")
+			}
+
+			teamUserPermissions := ""
+			if role, err := a.GetRoleByName(scheme.DefaultTeamUserRole); err == nil {
+				teamUserPermissions = strings.Join(role.Permissions, " ")
+			}
+
+			channelAdminPermissions := ""
+			if role, err := a.GetRoleByName(scheme.DefaultChannelAdminRole); err == nil {
+				channelAdminPermissions = strings.Join(role.Permissions, " ")
+			}
+
+			channelUserPermissions := ""
+			if role, err := a.GetRoleByName(scheme.DefaultChannelUserRole); err == nil {
+				systemAdminPermissions = strings.Join(role.Permissions, " ")
+			}
+
+			var count int64 = 0
+			if res := <-a.Srv.Store.Team().AnalyticsGetTeamCountForScheme(scheme.Id); res.Err == nil {
+				count = res.Data.(int64)
+			}
+
+			a.SendDiagnostic(TRACK_PERMISSIONS_TEAM_SCHEMES, map[string]interface{}{
+				"scheme_id":                 scheme.Id,
+				"team_admin_permissions":    teamAdminPermissions,
+				"team_user_permissions":     teamUserPermissions,
+				"channel_admin_permissions": channelAdminPermissions,
+				"channel_user_permissions":  channelUserPermissions,
+				"team_count":                count,
+			})
+		}
+	}
+}