<?php
use Drupal\user\Entity\Role;

// D7 rollipõhiste õiguste ülekandmine D11-sse.
// NB! access content / view files / comments on juba authenticated rollil.

$role_perms = [
  // EMAL liikmemaksud (D7: contact form + cookie)
  'emal_liikmemaksud' => ['access site-wide contact form'],
  // EMAL juhatuse liige (D7: access filedepot + contact form + cookie)
  'emal_juhatuse_liige' => ['access filedepot', 'access site-wide contact form'],
  // EMAL liige (D7: contact form + cookie)
  'emal_liige' => ['access site-wide contact form'],
  // EMAL projektid (D7: contact form + cookie)
  'emal_projektid' => ['access site-wide contact form'],
  // EMAL raamatupidamine (D7: contact form + cookie)
  'emal_raamatupidamine' => ['access site-wide contact form'],
  // filedepot (D7: access filedepot + administer filedepot)
  'filedepot' => ['access filedepot', 'administer filedepot'],
  // EMAL kutsekomisjon (D7: access filedepot)
  'emal_kutsekomisjon' => ['access filedepot'],
];

foreach ($role_perms as $role_id => $perms) {
  $role = Role::load($role_id);
  if (!$role) {
    echo "ROLE MISSING: $role_id\n";
    continue;
  }
  foreach ($perms as $p) {
    if (!$role->hasPermission($p)) {
      $role->grantPermission($p);
      echo "GRANT $role_id: $p\n";
    } else {
      echo "ALREADY $role_id: $p\n";
    }
  }
  $role->save();
}
echo "done\n";