129 lines
4.1 KiB
JavaScript
129 lines
4.1 KiB
JavaScript
const { BUILTIN_ROLE_IDS } = require("@budibase/backend-core/roles")
|
|
const {
|
|
BuiltinPermissionID,
|
|
} = require("@budibase/backend-core/permissions")
|
|
const setup = require("./utilities")
|
|
const { basicRole } = setup.structures
|
|
const { events } = require("@budibase/backend-core")
|
|
|
|
describe("/roles", () => {
|
|
let request = setup.getRequest()
|
|
let config = setup.getConfig()
|
|
|
|
afterAll(setup.afterAll)
|
|
|
|
beforeEach(async () => {
|
|
await config.init()
|
|
})
|
|
|
|
const createRole = async (role) => {
|
|
if (!role) {
|
|
role = basicRole()
|
|
}
|
|
|
|
return request
|
|
.post(`/api/roles`)
|
|
.send(role)
|
|
.set(config.defaultHeaders())
|
|
.expect("Content-Type", /json/)
|
|
.expect(200)
|
|
}
|
|
|
|
describe("create", () => {
|
|
it("returns a success message when role is successfully created", async () => {
|
|
const res = await createRole()
|
|
|
|
expect(res.res.statusMessage).toEqual(
|
|
"Role 'NewRole' created successfully."
|
|
)
|
|
expect(res.body._id).toBeDefined()
|
|
expect(res.body._rev).toBeDefined()
|
|
expect(events.role.updated).not.toBeCalled()
|
|
expect(events.role.created).toBeCalledTimes(1)
|
|
expect(events.role.created).toBeCalledWith(res.body)
|
|
})
|
|
})
|
|
|
|
describe("update", () => {
|
|
it("updates a role", async () => {
|
|
let res = await createRole()
|
|
jest.clearAllMocks()
|
|
res = await createRole(res.body)
|
|
|
|
expect(res.res.statusMessage).toEqual(
|
|
"Role 'NewRole' created successfully."
|
|
)
|
|
expect(res.body._id).toBeDefined()
|
|
expect(res.body._rev).toBeDefined()
|
|
expect(events.role.created).not.toBeCalled()
|
|
expect(events.role.updated).toBeCalledTimes(1)
|
|
expect(events.role.updated).toBeCalledWith(res.body)
|
|
})
|
|
})
|
|
|
|
describe("fetch", () => {
|
|
it("should list custom roles, plus 2 default roles", async () => {
|
|
const customRole = await config.createRole()
|
|
|
|
const res = await request
|
|
.get(`/api/roles`)
|
|
.set(config.defaultHeaders())
|
|
.expect("Content-Type", /json/)
|
|
.expect(200)
|
|
|
|
expect(res.body.length).toBe(5)
|
|
|
|
const adminRole = res.body.find(r => r._id === BUILTIN_ROLE_IDS.ADMIN)
|
|
expect(adminRole).toBeDefined()
|
|
expect(adminRole.inherits).toEqual(BUILTIN_ROLE_IDS.POWER)
|
|
expect(adminRole.permissionId).toEqual(BuiltinPermissionID.ADMIN)
|
|
|
|
const powerUserRole = res.body.find(r => r._id === BUILTIN_ROLE_IDS.POWER)
|
|
expect(powerUserRole).toBeDefined()
|
|
expect(powerUserRole.inherits).toEqual(BUILTIN_ROLE_IDS.BASIC)
|
|
expect(powerUserRole.permissionId).toEqual(BuiltinPermissionID.POWER)
|
|
|
|
const customRoleFetched = res.body.find(r => r._id === customRole._id)
|
|
expect(customRoleFetched).toBeDefined()
|
|
expect(customRoleFetched.inherits).toEqual(BUILTIN_ROLE_IDS.BASIC)
|
|
expect(customRoleFetched.permissionId).toEqual(
|
|
BuiltinPermissionID.READ_ONLY
|
|
)
|
|
})
|
|
|
|
it("should be able to get the role with a permission added", async () => {
|
|
const table = await config.createTable()
|
|
await config.addPermission(BUILTIN_ROLE_IDS.POWER, table._id)
|
|
const res = await request
|
|
.get(`/api/roles`)
|
|
.set(config.defaultHeaders())
|
|
.expect("Content-Type", /json/)
|
|
.expect(200)
|
|
expect(res.body.length).toBeGreaterThan(0)
|
|
const power = res.body.find(role => role._id === BUILTIN_ROLE_IDS.POWER)
|
|
expect(power.permissions[table._id]).toEqual(["read"])
|
|
})
|
|
})
|
|
|
|
describe("destroy", () => {
|
|
it("should delete custom roles", async () => {
|
|
const customRole = await config.createRole({
|
|
name: "user",
|
|
permissionId: BuiltinPermissionID.READ_ONLY,
|
|
inherits: BUILTIN_ROLE_IDS.BASIC,
|
|
})
|
|
delete customRole._rev_tree
|
|
await request
|
|
.delete(`/api/roles/${customRole._id}/${customRole._rev}`)
|
|
.set(config.defaultHeaders())
|
|
.expect(200)
|
|
await request
|
|
.get(`/api/roles/${customRole._id}`)
|
|
.set(config.defaultHeaders())
|
|
.expect(404)
|
|
expect(events.role.deleted).toBeCalledTimes(1)
|
|
expect(events.role.deleted).toBeCalledWith(customRole)
|
|
})
|
|
})
|
|
})
|