Adds users todo, adds enforcer auto load policy for syncing (#3415)

Author: nickzelei

backend/services/mgmt/v1alpha1/user-account-service/users.go

@@ -238,6 +238,8 @@ func (s *Service) ConvertPersonalToTeamAccount(
 		return nil, err
 	}
 
+	// todo: need to re-upsert rbac for the new personal account.
+
 	var checkoutSessionUrl *string
 	if s.cfg.IsNeosyncCloud && !resp.TeamAccount.StripeCustomerID.Valid && s.billingclient != nil {
 		account, err := s.db.UpsertStripeCustomerId(

internal/ee/rbac/enforcer/enforcer.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"database/sql"
 	"fmt"
+	"time"
 
 	sqladapter "github.com/Blank-Xu/sql-adapter"
 	"github.com/casbin/casbin/v2"
@@ -36,7 +37,8 @@ func newEnforcer(
 	if err != nil {
 		return nil, fmt.Errorf("unable to initialize casbin synced cached enforcer: %w", err)
 	}
-	enforcer.EnableAutoSave(true) // seems to do this automatically but it doesn't hurt
+	enforcer.EnableAutoSave(true)                  // seems to do this automatically but it doesn't hurt
+	enforcer.StartAutoLoadPolicy(time.Second * 10) // allows HA between neosync-api instances or backend changes to RBAC policies to be picked up.
 	return enforcer, nil
 }