Function TestUpdateChatACLByIDGuards

coderd/database/dbauthz/dbauthz_test.go:212–258

nolint:tparallel,paralleltest // It toggles the global chat ACL flag.

(t *testing.T)

//nolint:tparallel,paralleltest // It toggles the global chat ACL flag.
func TestUpdateChatACLByIDGuards(t *testing.T) {
	ctx := dbauthz.As(context.Background(), rbac.Subject{
		ID:    uuid.NewString(),
		Scope: rbac.ScopeAll,
	})
	arg := database.UpdateChatACLByIDParams{
		ID:       uuid.New(),
		UserACL:  database.ChatACL{},
		GroupACL: database.ChatACL{},
	}

	t.Run("Disabled", func(t *testing.T) { //nolint:paralleltest // It toggles the global chat ACL flag.
		rbac.SetChatACLDisabled(true)
		t.Cleanup(func() { rbac.SetChatACLDisabled(false) })

		ctrl := gomock.NewController(t)
		db := dbmock.NewMockStore(ctrl)
		db.EXPECT().Wrappers().Return([]string{}).AnyTimes()

		q := dbauthz.New(db, &coderdtest.FakeAuthorizer{}, slogtest.Make(t, nil), coderdtest.AccessControlStorePointer())
		err := q.UpdateChatACLByID(ctx, arg)

		require.Error(t, err)
		require.True(t, dbauthz.IsNotAuthorizedError(err))
		require.ErrorContains(t, err, "chat sharing is disabled")
	})

	t.Run("SubChat", func(t *testing.T) { //nolint:paralleltest // It depends on the global chat ACL flag.
		rbac.SetChatACLDisabled(false)

		ctrl := gomock.NewController(t)
		db := dbmock.NewMockStore(ctrl)
		db.EXPECT().Wrappers().Return([]string{}).AnyTimes()
		db.EXPECT().GetChatByID(gomock.Any(), arg.ID).Return(database.Chat{
			ID:           arg.ID,
			RootChatID:   uuid.NullUUID{UUID: uuid.New(), Valid: true},
			ParentChatID: uuid.NullUUID{UUID: uuid.New(), Valid: true},
		}, nil)

		q := dbauthz.New(db, &coderdtest.FakeAuthorizer{}, slogtest.Make(t, nil), coderdtest.AccessControlStorePointer())
		err := q.UpdateChatACLByID(ctx, arg)

		require.Error(t, err)
		require.True(t, dbauthz.IsNotAuthorizedError(err))
		require.ErrorContains(t, err, "root chats")
	})
}

// TestDBAuthzRecursive is a simple test to search for infinite recursion
// bugs. It isn't perfect, and only catches a subset of the possible bugs