package middleware import "testing" func TestHasAccessCodeExpressionRequiresEveryPart(t *testing.T) { userAccessCodeList := []string{ "cpm:iot:tSimCardInfo:edit", "cpm:agent:dept:list", } if !hasAccessCodeExpression(userAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list")) { t.Fatal("expected AND expression to match when every permission is granted") } if hasAccessCodeExpression(userAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:tAgentEnterprise:list")) { t.Fatal("expected AND expression to fail when any permission is missing") } } func TestMatchedPermissionDataScopeUsesFirstExpressionPermission(t *testing.T) { menuRoleDataAccessCodeList := []string{ "cpm:iot:tSimCardInfo:edit|10|4", "cpm:agent:dept:list|20|7", } roleId, roleDataScope, ok := matchedPermissionDataScope( menuRoleDataAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list"), ) if !ok { t.Fatal("expected data scope to be found") } if roleId != "10" || roleDataScope != "4" { t.Fatalf("expected first permission data scope role=10 scope=4, got role=%s scope=%s", roleId, roleDataScope) } } func TestMatchedPermissionDataScopeFallsBackToFirstMenuBoundPermission(t *testing.T) { menuRoleDataAccessCodeList := []string{ "cpm:system:sysNoticeUser:list|30|5", } roleId, roleDataScope, ok := matchedPermissionDataScope( menuRoleDataAccessCodeList, splitAccessCodeExpression("cpc:current:user&cpm:system:sysNoticeUser:list"), ) if !ok { t.Fatal("expected data scope to be found") } if roleId != "30" || roleDataScope != "5" { t.Fatalf("expected first menu-bound permission data scope role=30 scope=5, got role=%s scope=%s", roleId, roleDataScope) } } func TestMissingAccessCodeExpressionItem(t *testing.T) { userAccessCodeList := []string{"cpm:iot:tSimCardInfo:edit"} missingItem, ok := missingAccessCodeExpressionItem( userAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list"), ) if !ok { t.Fatal("expected a missing permission") } if missingItem != "cpm:agent:dept:list" { t.Fatalf("expected missing agent list permission, got %s", missingItem) } }