Remediate incomplete permissions on failed ingest

[eporter23]

Related to our recent issues with not being able to delete objects from a failed ingest, please remediate the permissions on these IDs.

Each work should have group/role assignments of
admin
repository_manager
rose_manager
rose_depositor
rose_viewer

As a reference, the works in this collection have the correct permissions assigned:
https://curate.library.emory.edu/dashboard/collections/13331zcwmc-cor?locale=en

[bwatson78]

Created methods to process this. The following is the console's output for checking work:

irb(main):013:0> ids = ['7032280hvt-cor', '054kkwh8hp-cor', '634sj3v2mc-cor', '259c5b01cn-cor', '38279cnq93-cor', '7956djhc98-cor', '788cfxpt02-cor']
=> ["7032280hvt-cor", "054kkwh8hp-cor", "634sj3v2mc-cor", "259c5b01cn-cor", "38279cnq93-cor", "7956djhc98-cor", "788cfxpt02-cor"]
irb(main):014:0> show_object_permissions(ids)
Attempted to init base path `prod`, but it already exists
Edit groups for 7032280hvt-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 7032280hvt-cor are: ["rose_high", "rose_viewer"]
Edit groups for 054kkwh8hp-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 054kkwh8hp-cor are: ["rose_high", "rose_viewer"]
Edit groups for 634sj3v2mc-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 634sj3v2mc-cor are: ["rose_high", "rose_viewer"]
Edit groups for 259c5b01cn-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 259c5b01cn-cor are: ["rose_high", "rose_viewer"]
Edit groups for 38279cnq93-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 38279cnq93-cor are: ["rose_high", "rose_viewer"]
Edit groups for 7956djhc98-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 7956djhc98-cor are: ["rose_high", "rose_viewer"]
Edit groups for 788cfxpt02-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 788cfxpt02-cor are: ["rose_viewer", "rose_high"]

[bwatson78]

'822h70s02p-cor', '081wdbrzt1-cor', and '13331zcwsv-cor' have all been deleted and are showing tombstones within the Fedora UI.

[bwatson78]

The methods used for this process (for reference):

def reset_object_permissions(object_ids_array)
  curate_objects = object_ids_array.map do |id| 
                                      ActiveFedora::Base.find(id)
                                    rescue Ldp::Gone
                                      nil
                                    end
  edit_groups = ["admin", "repository_manager", "rose_manager"]
  read_groups = ["rose_high", "rose_viewer"]

  curate_objects.each do |obj|
    next unless obj.is_a?(CurateGenericWork) || obj.is_a?(FileSet)

    obj.edit_groups = edit_groups
    obj.read_groups = read_groups
    obj.save
    puts obj.reload.id
  end
end

def show_object_permissions(object_ids_array)
  curate_objects = object_ids_array.map do |id| 
                                      ActiveFedora::Base.find(id)
                                    rescue Ldp::Gone
                                      nil
                                    end

  curate_objects.each do |obj|
    puts "Edit groups for #{obj.id} are: #{obj.edit_groups}"
    puts "Read groups for #{obj.id} are: #{obj.read_groups}"
  end
end

[bwatson78]

@eporter23 Ready for your review.

[eporter23]

@bwatson78 I've been checking the works in SOLR, but I'm still seeing very sparse entries such as:

[bwatson78]

That's strange. I just ran an altered version of the display method above and got this:

irb(main):015:0> ids = ['7032280hvt-cor', '054kkwh8hp-cor', '634sj3v2mc-cor', '259c5b01cn-cor', '38279cnq93-cor', '7956djhc98-cor', '788cfxpt02-cor']
=> ["7032280hvt-cor", "054kkwh8hp-cor", "634sj3v2mc-cor", "259c5b01cn-cor", "38279cnq93-cor", "7956djhc98-cor", "788cfxpt02-cor"]
irb(main):016:0> show_object_permissions(ids)
Attempted to init base path `prod`, but it already exists
Edit groups for 7032280hvt-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 7032280hvt-cor are: ["rose_high", "rose_viewer"]
Solr query: get select {:qt=>"document", :id=>"7032280hvt-cor"}
Solr fetch (22.1ms)
Solr edit groups for 7032280hvt-cor: ["admin", "repository_manager", "rose_manager"]
Edit groups for 054kkwh8hp-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 054kkwh8hp-cor are: ["rose_high", "rose_viewer"]
Solr query: get select {:qt=>"document", :id=>"054kkwh8hp-cor"}
Solr fetch (6.4ms)
Solr edit groups for 054kkwh8hp-cor: ["admin", "repository_manager", "rose_manager"]
Edit groups for 634sj3v2mc-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 634sj3v2mc-cor are: []
Solr query: get select {:qt=>"document", :id=>"634sj3v2mc-cor"}
Solr fetch (7.1ms)
Solr edit groups for 634sj3v2mc-cor: ["admin", "repository_manager", "rose_manager"]
Edit groups for 259c5b01cn-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 259c5b01cn-cor are: ["rose_high", "rose_viewer"]
Solr query: get select {:qt=>"document", :id=>"259c5b01cn-cor"}
Solr fetch (8.3ms)
Solr edit groups for 259c5b01cn-cor: ["admin", "repository_manager", "rose_manager"]
Edit groups for 38279cnq93-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 38279cnq93-cor are: ["rose_high", "rose_viewer"]
Solr query: get select {:qt=>"document", :id=>"38279cnq93-cor"}
Solr fetch (7.5ms)
Solr edit groups for 38279cnq93-cor: ["admin", "repository_manager", "rose_manager"]
Edit groups for 7956djhc98-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 7956djhc98-cor are: ["rose_high", "rose_viewer"]
Solr query: get select {:qt=>"document", :id=>"7956djhc98-cor"}
Solr fetch (7.3ms)
Solr edit groups for 7956djhc98-cor: ["admin", "repository_manager", "rose_manager"]
Edit groups for 788cfxpt02-cor are: ["admin", "repository_manager", "rose_manager"]
Read groups for 788cfxpt02-cor are: ["rose_viewer", "rose_high"]
Solr query: get select {:qt=>"document", :id=>"788cfxpt02-cor"}
Solr fetch (8.8ms)
Solr edit groups for 788cfxpt02-cor: ["admin", "repository_manager", "rose_manager"]

And here's the updated method:

def show_object_permissions(object_ids_array)
  curate_objects = object_ids_array.map do |id| 
                                      ActiveFedora::Base.find(id)
                                    rescue Ldp::Gone
                                      nil
                                    end

  curate_objects.each do |obj|
    puts "Edit groups for #{obj.id} are: #{obj.edit_groups}"
    puts "Read groups for #{obj.id} are: #{obj.read_groups}"
    puts "Solr edit groups for #{obj.id}: #{SolrDocument.find(obj.id)['edit_access_group_ssim']}"
  end
end

Can you re-query that work's ID in Solr again?