Add an upcaster for capability-related events

Data/Capabilities/AccountCapabilityAttribute.cs

-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Text;
-using System.Threading.Tasks;
-
-namespace Kafe.Data.Capabilities;
-
-public sealed class AccountCapabilityAttribute : KafeTypeAttribute
-{
-    public AccountCapabilityAttribute() : base(typeof(AccountCapability))
-    {
-    }
-}

Data/Capabilities/Capabilities.cs

-using System;
-using System.Collections.Generic;
-using System.Collections.Immutable;
-using System.Diagnostics.CodeAnalysis;
-using System.Linq;
-using System.Text.Json;
-using System.Text.Json.Serialization;
-
-namespace Kafe.Data.Capabilities;
-
-
-// NB: Currently broken because the "$type" property would need to be first, which we have no control over
-//     because postgres changes the order.
-//     See: https://github.com/dotnet/runtime/issues/72604
-//     and https://stackoverflow.com/questions/66829778/how-to-control-order-of-fields-in-jsonb-object-agg
-//[JsonPolymorphic(UnknownDerivedTypeHandling = JsonUnknownDerivedTypeHandling.FailSerialization)]
-//[JsonDerivedType(typeof(AdministratorCapability), nameof(AdministratorCapability))]
-//[JsonDerivedType(typeof(ReviewerCapability), nameof(ReviewerCapability))]
-//[JsonDerivedType(typeof(ProjectOwnerCapability), nameof(ProjectOwnerCapability))]
-[JsonConverter(typeof(AccountCapabilityConverter))]
-public abstract record AccountCapability
-{
-    public const char SubvalueSeparator = ':';
-
-    public static bool TryParse(string value, [NotNullWhen(true)] out AccountCapability? capability)
-    {
-        // TODO: Rewrite with spans or smth.
-        var subvalues = value.Split(SubvalueSeparator);
-        capability = subvalues[0] switch
-        {
-            nameof(Administration) => new Administration(),
-            nameof(ProjectReview) => new ProjectReview(subvalues[1]),
-            nameof(ProjectOwnership) => new ProjectOwnership(subvalues[1]),
-            nameof(AuthorManagement) => new AuthorManagement(subvalues[1]),
-            nameof(OrganizeFestival) => new OrganizeFestival(),
-            _ => null
-        };
-        return capability != null;
-    }
-
-    public static string Serialize(AccountCapability capability)
-    {
-        return capability switch
-        {
-            Administration => nameof(Administration),
-            ProjectReview r => $"{nameof(ProjectReview)}:{r.Role}",
-            ProjectOwnership o => $"{nameof(ProjectOwnership)}:{o.ProjectId}",
-            AuthorManagement a => $"{nameof(AuthorManagement)}:{a.AuthorId}",
-            OrganizeFestival => nameof(OrganizeFestival),
-            _ => throw new NotImplementedException($"Serialization of '{capability.GetType()}' is not implemented.")
-        };
-    }
-
-    public static bool IsValidCapabilitySubvalue(string value)
-    {
-        return value.All(c => c != SubvalueSeparator && c >= ' ' && c <= '~');
-    }
-
-    [return: NotNullIfNotNull(nameof(capability))]
-    public static implicit operator string?(AccountCapability? capability)
-    {
-        return capability is null ? null : Serialize(capability);
-    }
-
-    [return: NotNullIfNotNull(nameof(capabilityString))]
-    public static explicit operator AccountCapability?(string? capabilityString)
-    {
-        return capabilityString is null
-            ? null
-            : TryParse(capabilityString, out var capability)
-                ? capability
-                : throw new ArgumentException(
-                    $"Could not parse as {nameof(AccountCapability)}.",
-                    nameof(capabilityString));
-    }
-
-}
-public record Administration : AccountCapability;
-
-public record ProjectReview : AccountCapability
-{
-    public string Role { get; init; }
-
-    public ProjectReview(string role)
-    {
-        // TODO: Add a validation attribute / source generator for this.
-        Role = IsValidCapabilitySubvalue(role)
-            ? role
-            : throw new ArgumentException($"Capability subvalues can contain only ASCII letters " +
-                $"and digits except '{SubvalueSeparator}'.", nameof(role));
-    }
-}
-
-public record ProjectOwnership : AccountCapability
-{
-    public Hrib ProjectId { get; init; }
-
-    public ProjectOwnership(Hrib projectId)
-    {
-        ProjectId = IsValidCapabilitySubvalue(projectId)
-            ? projectId
-            : throw new ArgumentException($"Capability subvalues can contain only ASCII letters " +
-                $"and digits except '{SubvalueSeparator}'.", nameof(projectId));
-    }
-}
-
-public record AuthorManagement : AccountCapability
-{
-    public Hrib AuthorId { get; init; }
-
-    public AuthorManagement(Hrib authorId)
-    {
-        AuthorId = IsValidCapabilitySubvalue(authorId)
-            ? authorId
-            : throw new ArgumentException($"Capability subvalues can contain only ASCII letters " +
-                $"and digits except '{SubvalueSeparator}'.", nameof(authorId));
-    }
-}
-
-/// <summary>
-/// A temporary capability to hack around lack of time before FFFI MU 2023.
-/// TODO: Remove.
-/// </summary>
-public record OrganizeFestival : AccountCapability;
-
-public class AccountCapabilityConverter : JsonConverter<AccountCapability>
-{
-    public override AccountCapability? Read(ref Utf8JsonReader reader, Type typeToConvert, JsonSerializerOptions options)
-    {
-        var value = reader.GetString();
-        if (value is null)
-        {
-            return null;
-        }
-
-        if (!AccountCapability.TryParse(value, out var capability))
-        {
-            throw new JsonException($"An {nameof(AccountCapability)} could not be deserialized.");
-        }
-
-        return capability;
-    }
-
-    public override void Write(Utf8JsonWriter writer, AccountCapability value, JsonSerializerOptions options)
-    {
-        writer.WriteStringValue(value);
-    }
-}
\ No newline at end of file

Data/Events/AccountEvents.cs

@@ -8,16 +8,6 @@ using System.Threading.Tasks;
 
 namespace Kafe.Data.Events;
 
-public record AccountCapabilityAdded(
-    [Hrib] string AccountId,
-    [AccountCapability] string Capability
-);
-
-public record AccountCapabilityRemoved(
-    [Hrib] string AccountId,
-    [AccountCapability] string Capability
-);
-
 public record AccountPermissionSet(
     [Hrib] string AccountId,
     string EntityId,

Data/Events/Upcasts/2023-10-13_AccountCapabilities.cs

+using System;
+using System.Diagnostics.CodeAnalysis;
+using System.Linq;
+using System.Text.Json;
+using System.Text.Json.Serialization;
+using Kafe.Data.Capabilities;
+using Marten.Services.Json.Transformations;
+using Microsoft.CodeAnalysis.VisualBasic.Syntax;
+
+namespace Kafe.Data.Capabilities
+{
+    // NB: Currently broken because the "$type" property would need to be first, which we have no control over
+    //     because postgres changes the order.
+    //     See: https://github.com/dotnet/runtime/issues/72604
+    //     and https://stackoverflow.com/questions/66829778/how-to-control-order-of-fields-in-jsonb-object-agg
+    //[JsonPolymorphic(UnknownDerivedTypeHandling = JsonUnknownDerivedTypeHandling.FailSerialization)]
+    //[JsonDerivedType(typeof(AdministratorCapability), nameof(AdministratorCapability))]
+    //[JsonDerivedType(typeof(ReviewerCapability), nameof(ReviewerCapability))]
+    //[JsonDerivedType(typeof(ProjectOwnerCapability), nameof(ProjectOwnerCapability))]
+    [Obsolete($"Capabilities have been superceded by Permissions.")]
+    [JsonConverter(typeof(AccountCapabilityConverter))]
+    public abstract record AccountCapability
+    {
+        public const char SubvalueSeparator = ':';
+
+        public static bool TryParse(string value, [NotNullWhen(true)] out AccountCapability? capability)
+        {
+            // TODO: Rewrite with spans or smth.
+            var subvalues = value.Split(SubvalueSeparator);
+            capability = subvalues[0] switch
+            {
+                nameof(Administration) => new Administration(),
+                nameof(ProjectReview) => new ProjectReview(subvalues[1]),
+                nameof(ProjectOwnership) => new ProjectOwnership(subvalues[1]),
+                nameof(AuthorManagement) => new AuthorManagement(subvalues[1]),
+                nameof(OrganizeFestival) => new OrganizeFestival(),
+                _ => null
+            };
+            return capability != null;
+        }
+
+        public static string Serialize(AccountCapability capability)
+        {
+            return capability switch
+            {
+                Administration => nameof(Administration),
+                ProjectReview r => $"{nameof(ProjectReview)}:{r.Role}",
+                ProjectOwnership o => $"{nameof(ProjectOwnership)}:{o.ProjectId}",
+                AuthorManagement a => $"{nameof(AuthorManagement)}:{a.AuthorId}",
+                OrganizeFestival => nameof(OrganizeFestival),
+                _ => throw new NotImplementedException($"Serialization of '{capability.GetType()}' is not implemented.")
+            };
+        }
+
+        public static bool IsValidCapabilitySubvalue(string value)
+        {
+            return value.All(c => c != SubvalueSeparator && c >= ' ' && c <= '~');
+        }
+
+        [return: NotNullIfNotNull(nameof(capability))]
+        public static implicit operator string?(AccountCapability? capability)
+        {
+            return capability is null ? null : Serialize(capability);
+        }
+
+        [return: NotNullIfNotNull(nameof(capabilityString))]
+        public static explicit operator AccountCapability?(string? capabilityString)
+        {
+            return capabilityString is null
+                ? null
+                : TryParse(capabilityString, out var capability)
+                    ? capability
+                    : throw new ArgumentException(
+                        $"Could not parse as {nameof(AccountCapability)}.",
+                        nameof(capabilityString));
+        }
+
+    }
+
+    [Obsolete($"Capabilities have been superceded by Permissions.")]
+    public record Administration : AccountCapability;
+
+    [Obsolete($"Capabilities have been superceded by Permissions.")]
+    public record ProjectReview : AccountCapability
+    {
+        public string Role { get; init; }
+
+        public ProjectReview(string role)
+        {
+            // TODO: Add a validation attribute / source generator for this.
+            Role = IsValidCapabilitySubvalue(role)
+                ? role
+                : throw new ArgumentException($"Capability subvalues can contain only ASCII letters " +
+                    $"and digits except '{SubvalueSeparator}'.", nameof(role));
+        }
+    }
+
+    [Obsolete($"Capabilities have been superceded by Permissions.")]
+    public record ProjectOwnership : AccountCapability
+    {
+        public Hrib ProjectId { get; init; }
+
+        public ProjectOwnership(Hrib projectId)
+        {
+            ProjectId = IsValidCapabilitySubvalue(projectId)
+                ? projectId
+                : throw new ArgumentException($"Capability subvalues can contain only ASCII letters " +
+                    $"and digits except '{SubvalueSeparator}'.", nameof(projectId));
+        }
+    }
+
+    [Obsolete($"Capabilities have been superceded by Permissions.")]
+    public record AuthorManagement : AccountCapability
+    {
+        public Hrib AuthorId { get; init; }
+
+        public AuthorManagement(Hrib authorId)
+        {
+            AuthorId = IsValidCapabilitySubvalue(authorId)
+                ? authorId
+                : throw new ArgumentException($"Capability subvalues can contain only ASCII letters " +
+                    $"and digits except '{SubvalueSeparator}'.", nameof(authorId));
+        }
+    }
+
+    [Obsolete($"Capabilities have been superceded by Permissions.")]
+    public record OrganizeFestival : AccountCapability;
+
+    [Obsolete($"Capabilities have been superceded by Permissions.")]
+    public class AccountCapabilityConverter : JsonConverter<AccountCapability>
+    {
+        public override AccountCapability? Read(ref Utf8JsonReader reader, Type typeToConvert, JsonSerializerOptions options)
+        {
+            var value = reader.GetString();
+            if (value is null)
+            {
+                return null;
+            }
+
+            if (!AccountCapability.TryParse(value, out var capability))
+            {
+                throw new JsonException($"An {nameof(AccountCapability)} could not be deserialized.");
+            }
+
+            return capability;
+        }
+
+        public override void Write(Utf8JsonWriter writer, AccountCapability value, JsonSerializerOptions options)
+        {
+            writer.WriteStringValue(value);
+        }
+    }
+}
+
+namespace Kafe.Data.Events
+{
+    [Obsolete($"Capabilities have been superceded by Permissions. Use {nameof(AccountPermissionSet)} instead.")]
+    public record AccountCapabilityAdded(
+        [Hrib] string AccountId,
+        string Capability
+    );
+
+    [Obsolete($"Capabilities have been superceded by Permissions. Use {nameof(AccountPermissionSet)} instead.")]
+    public record AccountCapabilityRemoved(
+        [Hrib] string AccountId,
+        string Capability
+    );
+}
+
+#pragma warning disable 0618
+namespace Kafe.Data.Events.Upcasts
+{
+    internal class AccountCapabilityAddedUpcaster : EventUpcaster<AccountCapabilityAdded, AccountPermissionSet>
+    {
+        public const string Fffimu23Id = "0JY2-TPhOC7";
+
+        protected override AccountPermissionSet Upcast(AccountCapabilityAdded oldEvent)
+        {
+            var capability = (AccountCapability)oldEvent.Capability;
+            return capability switch
+            {
+                Administration => new AccountPermissionSet(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: Hrib.System,
+                    Permission: Permission.All),
+                ProjectReview => new AccountPermissionSet(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: Fffimu23Id,
+                    Permission: Permission.All),
+                ProjectOwnership p => new AccountPermissionSet(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: p.ProjectId,
+                    Permission: Permission.All),
+                AuthorManagement a => new AccountPermissionSet(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: a.AuthorId,
+                    Permission: Permission.All),
+                OrganizeFestival => new AccountPermissionSet(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: Fffimu23Id,
+                    Permission: Permission.All),
+                _ => throw new NotSupportedException()
+            };
+        }
+    }
+
+    internal class AccountCapabilityRemovedUpcaster : EventUpcaster<AccountCapabilityRemoved, AccountPermissionUnset>
+    {
+        public const string Fffimu23Id = "0JY2-TPhOC7";
+
+        protected override AccountPermissionUnset Upcast(AccountCapabilityRemoved oldEvent)
+        {
+            var capability = (AccountCapability)oldEvent.Capability;
+            return capability switch
+            {
+                Administration => new AccountPermissionUnset(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: Hrib.System),
+                ProjectReview => new AccountPermissionUnset(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: Fffimu23Id),
+                ProjectOwnership p => new AccountPermissionUnset(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: p.ProjectId),
+                AuthorManagement a => new AccountPermissionUnset(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: a.AuthorId),
+                OrganizeFestival => new AccountPermissionUnset(
+                    AccountId: oldEvent.AccountId,
+                    EntityId: Fffimu23Id),
+                _ => throw new NotSupportedException()
+            };
+        }
+    }
+}

Data/ServiceCollectionExtensions.cs

 using Kafe.Data.Aggregates;
+using Kafe.Data.Events.Upcasts;
 using Kafe.Data.Options;
 using Kafe.Data.Services;
 using Marten;
@@ -57,6 +58,7 @@ public static class ServiceCollectionExtensions
             options.Projections.Add<VideoConversionInfoProjection>(ProjectionLifecycle.Inline);
             options.Projections.Add<ArtifactDetailProjection>(ProjectionLifecycle.Inline);
             options.Projections.Add<AccountInfoProjection>(ProjectionLifecycle.Inline);
+            options.Events.Upcast<AccountCapabilityAddedUpcaster>();
             options.UseDefaultSerialization(serializerType: SerializerType.Newtonsoft);
 
             return options;

README.md

@@ -8,3 +8,7 @@ KAFE is an archival system initially built for the Film festival of FI MU.
 
 * https://spreg.aai.muni.cz/auth/requests/detail/975
 * https://perun.aai.muni.cz
+
+## Backup and Restore
+
+To back