Function TestGetWorkspaceAgentByID_FastPath

coderd/database/dbauthz/dbauthz_test.go:6713–6789

(t *testing.T)

}

func TestGetWorkspaceAgentByID_FastPath(t *testing.T) {
	t.Parallel()

	agentID := uuid.New()
	ownerID := uuid.New()
	wsID := uuid.New()
	orgID := uuid.New()

	agent := database.WorkspaceAgent{
		ID:   agentID,
		Name: "test-agent",
	}

	workspace := database.Workspace{
		ID:             wsID,
		OwnerID:        ownerID,
		OrganizationID: orgID,
	}

	wsIdentity := database.WorkspaceIdentity{
		ID:             wsID,
		OwnerID:        ownerID,
		OrganizationID: orgID,
	}

	actor := rbac.Subject{
		ID:     ownerID.String(),
		Roles:  rbac.RoleIdentifiers{rbac.RoleOwner()},
		Groups: []string{orgID.String()},
		Scope:  rbac.ScopeAll,
	}

	authorizer := &coderdtest.RecordingAuthorizer{
		Wrapped: (&coderdtest.FakeAuthorizer{}).AlwaysReturn(nil),
	}

	t.Run("WithWorkspaceRBAC", func(t *testing.T) {
		t.Parallel()

		ctx := dbauthz.As(context.Background(), actor)
		ctrl := gomock.NewController(t)
		mockDB := dbmock.NewMockStore(ctrl)

		rbacObj := wsIdentity.RBACObject()
		ctx, err := dbauthz.WithWorkspaceRBAC(ctx, rbacObj)
		require.NoError(t, err)

		mockDB.EXPECT().Wrappers().Return([]string{})
		// GetWorkspaceByAgentID should NOT be called
		mockDB.EXPECT().GetWorkspaceAgentByID(gomock.Any(), agentID).Return(agent, nil)

		q := dbauthz.New(mockDB, authorizer, slogtest.Make(t, nil), coderdtest.AccessControlStorePointer())

		result, err := q.GetWorkspaceAgentByID(ctx, agentID)
		require.NoError(t, err)
		require.Equal(t, agent, result)
	})