mirror of
https://github.com/pelican-dev/panel.git
synced 2025-05-19 22:14:45 +02:00
b3501be6ec
* use RESOURCE_NAME for requests * use RESOURCE_NAME for transformers * add permissions field to api key * add migration for new permissions field * update tests * remove debug log * set column type to "json" * remove default attribute to fix tests * fix default value for permissions * fix after merge * fix after merge * allow to "register" custom permissions * add "role" to default resource names * fix after merge * fix phpstan * fix migrations
50 lines
1.4 KiB
PHP
50 lines
1.4 KiB
PHP
<?php
|
|
|
|
namespace App\Tests\Unit\Services\Acl\Api;
|
|
|
|
use App\Models\ApiKey;
|
|
use App\Tests\TestCase;
|
|
use App\Services\Acl\Api\AdminAcl;
|
|
use App\Models\Server;
|
|
|
|
class AdminAclTest extends TestCase
|
|
{
|
|
/**
|
|
* Test that permissions return the expects values.
|
|
*
|
|
* @dataProvider permissionsDataProvider
|
|
*/
|
|
public function testPermissions(int $permission, int $check, bool $outcome): void
|
|
{
|
|
$this->assertSame($outcome, AdminAcl::can($permission, $check));
|
|
}
|
|
|
|
/**
|
|
* Test that checking against a model works as expected.
|
|
*/
|
|
public function testCheck(): void
|
|
{
|
|
$model = ApiKey::factory()->make(['permissions' => [
|
|
Server::RESOURCE_NAME => AdminAcl::READ | AdminAcl::WRITE,
|
|
]]);
|
|
|
|
$this->assertTrue(AdminAcl::check($model, Server::RESOURCE_NAME, AdminAcl::WRITE));
|
|
}
|
|
|
|
/**
|
|
* Provide valid and invalid permissions combos for testing.
|
|
*/
|
|
public static function permissionsDataProvider(): array
|
|
{
|
|
return [
|
|
[AdminAcl::READ, AdminAcl::READ, true],
|
|
[AdminAcl::READ | AdminAcl::WRITE, AdminAcl::READ, true],
|
|
[AdminAcl::READ | AdminAcl::WRITE, AdminAcl::WRITE, true],
|
|
[AdminAcl::WRITE, AdminAcl::WRITE, true],
|
|
[AdminAcl::READ, AdminAcl::WRITE, false],
|
|
[AdminAcl::NONE, AdminAcl::READ, false],
|
|
[AdminAcl::NONE, AdminAcl::WRITE, false],
|
|
];
|
|
}
|
|
}
|