Files
photoprism/internal/auth/acl/scopes_test.go
Michael Mayer a97f8d0795 API: Implement OIDC redirect endpoint #782
Requires further testing and refinement before it can be released.

Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-07-01 16:50:53 +02:00

38 lines
1.1 KiB
Go

package acl
import (
"testing"
"github.com/stretchr/testify/assert"
)
func TestGrantScopeRead(t *testing.T) {
t.Run("ActionView", func(t *testing.T) {
assert.True(t, GrantScopeRead.Allow(ActionView))
assert.False(t, GrantScopeRead.DenyAny(Permissions{ActionView}))
})
t.Run("ActionUpdate", func(t *testing.T) {
assert.False(t, GrantScopeRead.Allow(ActionUpdate))
assert.True(t, GrantScopeRead.DenyAny(Permissions{ActionUpdate}))
})
t.Run("AccessAll", func(t *testing.T) {
assert.True(t, GrantScopeRead.Allow(AccessAll))
assert.False(t, GrantScopeRead.DenyAny(Permissions{AccessAll}))
})
}
func TestGrantScopeWrite(t *testing.T) {
t.Run("ActionView", func(t *testing.T) {
assert.False(t, GrantScopeWrite.Allow(ActionView))
assert.True(t, GrantScopeWrite.DenyAny(Permissions{ActionView}))
})
t.Run("ActionUpdate", func(t *testing.T) {
assert.True(t, GrantScopeWrite.Allow(ActionUpdate))
assert.False(t, GrantScopeWrite.DenyAny(Permissions{ActionUpdate}))
})
t.Run("AccessAll", func(t *testing.T) {
assert.True(t, GrantScopeWrite.Allow(AccessAll))
assert.False(t, GrantScopeWrite.DenyAny(Permissions{AccessAll}))
})
}