Function TestOK

coderd/rbac/acl/updatevalidator_test.go:18–43

(t *testing.T)

)

func TestOK(t *testing.T) {
	t.Parallel()

	db, _ := dbtestutil.NewDB(t)
	o := dbgen.Organization(t, db, database.Organization{})
	g := dbgen.Group(t, db, database.Group{OrganizationID: o.ID})
	u := dbgen.User(t, db, database.User{})
	ctx := testutil.Context(t, testutil.WaitShort)

	update := codersdk.UpdateWorkspaceACL{
		UserRoles: map[string]codersdk.WorkspaceRole{
			u.ID.String(): codersdk.WorkspaceRoleAdmin,
			// An unknown ID is allowed if and only if the specified role is either
			// codersdk.WorkspaceRoleDeleted or codersdk.TemplateRoleDeleted.
			uuid.NewString(): codersdk.WorkspaceRoleDeleted,
		},
		GroupRoles: map[string]codersdk.WorkspaceRole{
			g.ID.String(): codersdk.WorkspaceRoleAdmin,
			// An unknown ID is allowed if and only if the specified role is either
			// codersdk.WorkspaceRoleDeleted or codersdk.TemplateRoleDeleted.
			uuid.NewString(): codersdk.WorkspaceRoleDeleted,
		},
	}
	errors := acl.Validate(ctx, db, coderd.WorkspaceACLUpdateValidator(update))
	require.Empty(t, errors)
}

func TestDeniesUnknownIDs(t *testing.T) {
	t.Parallel()