fix: Always create the template roles and state machine permissions

Previously we were recording if these had been created. However, this caused problems if state
machine restrictions were manually removed, or changed between builds. Now, create regardless
because that seems like the expected behaviour.

lib/components/services/rbac/admin/apply-default-blueprint-docs.js

@@ -95,16 +95,6 @@ function gatherStateMachineRestrictions (stateMachines, permissionModel) {
   return docTasks
 } // gatherStateMachineRestrictions
 
-async function collectKnownDocs (blueprintDocs) {
-  const knownDocs = {}
-  const domains = ['templateRole', 'roleGrant', 'stateMachineRestriction', 'roleMembership']
-  for (const domain of domains) {
-    const docIds = await blueprintDocs.getDomainDocIds(domain)
-    knownDocs[domain] = docIds
-  }
-  return knownDocs
-} // collectKnownDocs
-
 module.exports = async function applyBlueprintDocs (
   blueprintDocs,
   blueprintComponents,
@@ -124,16 +114,8 @@ module.exports = async function applyBlueprintDocs (
   )
 
   const docTasks = [...roleTemplateTasks, ...restrictionTasks]
-  const knownDocs = await collectKnownDocs(blueprintDocs)
-
-  // the known docIds, grouped by domain, and all
-  // docs required from the blueprints... so for all unknown docs, go make them.
   for (const task of docTasks) {
-    if (knownDocs[task.domain].indexOf(task.docId) === -1) {
-      // Unknown!
-      const doc = task.docMaker(task.docId, task.docSource)
-      await task.dao.create(doc, {})
-      await blueprintDocs.registerDocument(task.domain, task.docId)
-    }
+    const doc = task.docMaker(task.docId, task.docSource)
+    await task.dao.upsert(doc, {})
   }
 }