Function TestChatFilesAllowLinkedChatReads

coderd/database/dbauthz/dbauthz_test.go:158–209

(t *testing.T)

}

func TestChatFilesAllowLinkedChatReads(t *testing.T) {
	t.Parallel()

	ctx := dbauthz.As(context.Background(), rbac.Subject{
		ID:    uuid.NewString(),
		Scope: rbac.ScopeAll,
	})
	authorizer := &coderdtest.FakeAuthorizer{
		ConditionalReturn: func(_ context.Context, _ rbac.Subject, action policy.Action, object rbac.Object) error {
			if action == policy.ActionRead && object.Type == rbac.ResourceChat.Type {
				return xerrors.New("direct file auth denied")
			}
			return nil
		},
	}

	t.Run("GetChatFileByID", func(t *testing.T) {
		t.Parallel()

		ctrl := gomock.NewController(t)
		db := dbmock.NewMockStore(ctrl)
		file := testutil.Fake(t, gofakeit.New(0), database.ChatFile{})

		db.EXPECT().Wrappers().Return([]string{}).AnyTimes()
		db.EXPECT().GetChatFileByID(gomock.Any(), file.ID).Return(file, nil)
		db.EXPECT().GetAuthorizedChatsByChatFileID(gomock.Any(), file.ID, gomock.Any()).Return([]database.Chat{{ID: uuid.New()}}, nil)

		q := dbauthz.New(db, authorizer, slogtest.Make(t, nil), coderdtest.AccessControlStorePointer())
		got, err := q.GetChatFileByID(ctx, file.ID)

		require.NoError(t, err)
		require.Equal(t, file, got)
	})

	t.Run("GetChatFilesByIDs", func(t *testing.T) {
		t.Parallel()

		ctrl := gomock.NewController(t)
		db := dbmock.NewMockStore(ctrl)
		file := testutil.Fake(t, gofakeit.New(0), database.ChatFile{})

		db.EXPECT().Wrappers().Return([]string{}).AnyTimes()
		db.EXPECT().GetChatFilesByIDs(gomock.Any(), []uuid.UUID{file.ID}).Return([]database.ChatFile{file}, nil)
		db.EXPECT().GetAuthorizedChatsByChatFileID(gomock.Any(), file.ID, gomock.Any()).Return([]database.Chat{{ID: uuid.New()}}, nil)

		q := dbauthz.New(db, authorizer, slogtest.Make(t, nil), coderdtest.AccessControlStorePointer())
		got, err := q.GetChatFilesByIDs(ctx, []uuid.UUID{file.ID})

		require.NoError(t, err)
		require.Equal(t, []database.ChatFile{file}, got)
	})
}

//nolint:tparallel,paralleltest // It toggles the global chat ACL flag.
func TestUpdateChatACLByIDGuards(t *testing.T) {