69 lines
2.2 KiB
Go
69 lines
2.2 KiB
Go
package middleware
|
|
|
|
import "testing"
|
|
|
|
func TestHasAccessCodeExpressionRequiresEveryPart(t *testing.T) {
|
|
userAccessCodeList := []string{
|
|
"cpm:iot:tSimCardInfo:edit",
|
|
"cpm:agent:dept:list",
|
|
}
|
|
|
|
if !hasAccessCodeExpression(userAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list")) {
|
|
t.Fatal("expected AND expression to match when every permission is granted")
|
|
}
|
|
|
|
if hasAccessCodeExpression(userAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:tAgentEnterprise:list")) {
|
|
t.Fatal("expected AND expression to fail when any permission is missing")
|
|
}
|
|
}
|
|
|
|
func TestMatchedPermissionDataScopeUsesFirstExpressionPermission(t *testing.T) {
|
|
menuRoleDataAccessCodeList := []string{
|
|
"cpm:iot:tSimCardInfo:edit|10|4",
|
|
"cpm:agent:dept:list|20|7",
|
|
}
|
|
|
|
roleId, roleDataScope, ok := matchedPermissionDataScope(
|
|
menuRoleDataAccessCodeList,
|
|
splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list"),
|
|
)
|
|
if !ok {
|
|
t.Fatal("expected data scope to be found")
|
|
}
|
|
if roleId != "10" || roleDataScope != "4" {
|
|
t.Fatalf("expected first permission data scope role=10 scope=4, got role=%s scope=%s", roleId, roleDataScope)
|
|
}
|
|
}
|
|
|
|
func TestMatchedPermissionDataScopeFallsBackToFirstMenuBoundPermission(t *testing.T) {
|
|
menuRoleDataAccessCodeList := []string{
|
|
"cpm:system:sysNoticeUser:list|30|5",
|
|
}
|
|
|
|
roleId, roleDataScope, ok := matchedPermissionDataScope(
|
|
menuRoleDataAccessCodeList,
|
|
splitAccessCodeExpression("cpc:current:user&cpm:system:sysNoticeUser:list"),
|
|
)
|
|
if !ok {
|
|
t.Fatal("expected data scope to be found")
|
|
}
|
|
if roleId != "30" || roleDataScope != "5" {
|
|
t.Fatalf("expected first menu-bound permission data scope role=30 scope=5, got role=%s scope=%s", roleId, roleDataScope)
|
|
}
|
|
}
|
|
|
|
func TestMissingAccessCodeExpressionItem(t *testing.T) {
|
|
userAccessCodeList := []string{"cpm:iot:tSimCardInfo:edit"}
|
|
|
|
missingItem, ok := missingAccessCodeExpressionItem(
|
|
userAccessCodeList,
|
|
splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list"),
|
|
)
|
|
if !ok {
|
|
t.Fatal("expected a missing permission")
|
|
}
|
|
if missingItem != "cpm:agent:dept:list" {
|
|
t.Fatalf("expected missing agent list permission, got %s", missingItem)
|
|
}
|
|
}
|