| 43 | } |
| 44 | |
| 45 | func TestDeniesUnknownIDs(t *testing.T) { |
| 46 | t.Parallel() |
| 47 | |
| 48 | db, _ := dbtestutil.NewDB(t) |
| 49 | ctx := testutil.Context(t, testutil.WaitShort) |
| 50 | |
| 51 | update := codersdk.UpdateWorkspaceACL{ |
| 52 | UserRoles: map[string]codersdk.WorkspaceRole{ |
| 53 | uuid.NewString(): codersdk.WorkspaceRoleAdmin, |
| 54 | }, |
| 55 | GroupRoles: map[string]codersdk.WorkspaceRole{ |
| 56 | uuid.NewString(): codersdk.WorkspaceRoleAdmin, |
| 57 | }, |
| 58 | } |
| 59 | errors := acl.Validate(ctx, db, coderd.WorkspaceACLUpdateValidator(update)) |
| 60 | require.Len(t, errors, 2) |
| 61 | require.Equal(t, errors[0].Field, "group_roles") |
| 62 | require.ErrorContains(t, errors[0], "does not exist") |
| 63 | require.Equal(t, errors[1].Field, "user_roles") |
| 64 | require.ErrorContains(t, errors[1], "does not exist") |
| 65 | } |
| 66 | |
| 67 | func TestDeniesUnknownRolesAndInvalidIDs(t *testing.T) { |
| 68 | t.Parallel() |