kobotoolbox / kpi / 21717362367

81%

master: 76%

push

github

fix(organizations): fix permission revocation logic and OOM errors in long running migration 0015 DEV-1714 (#6685)

### 📖 Description
Migration `0015_fix_duplicate_organizations` stalled on production due
to two primary issues:
- Logic Error: The permission revocation logic incorrectly targeted
organization owners during duplicate resolution, causing them to lose
access to their own projects.
- Performance Bottleneck: Processing large permission sets (e.g., ~90k
records) in a single transaction caused memory exhaustion (OOM) and
continuous pod restarts.

To resolve these issues, the following changes were implemented:
- Added a check in `revoke_org_asset_perms()` and the 0015 job to ensure
owners are excluded from the revocation process.
- Refactored the permissions deletion logic to process permission
removals in chunks of 1000, preventing memory spikes and stabilizing the
task environment.

---------

Co-authored-by: Olivier Léger <olivierleger@gmail.com>

7201 of 11284 branches covered (63.82%)

15 of 17 new or added lines in 4 files covered. (88.24%)

27796 of 34175 relevant lines covered (81.33%)

1.6 hits per line