import 'reflect-metadata'; import assert from 'node:assert/strict'; import test from 'node:test'; import { REQUIRED_PERMISSIONS_KEY } from '../../src/authorization/decorators/require-permissions.decorator'; import { InspectionActsController, InspectionVisitActsController, } from '../../src/inspection-acts/inspection-acts.controller'; function permissionFor(controller: object, method: string): string[] { const handler = controller[method as keyof typeof controller]; return Reflect.getMetadata(REQUIRED_PERMISSIONS_KEY, handler) as string[]; } test('inspection act endpoints separate reading, creation, editing and cancellation', () => { assert.deepEqual(permissionFor(InspectionVisitActsController.prototype, 'list'), [ 'inspection_acts.read', ]); assert.deepEqual(permissionFor(InspectionVisitActsController.prototype, 'create'), [ 'inspection_acts.create', ]); assert.deepEqual(permissionFor(InspectionActsController.prototype, 'list'), [ 'inspection_acts.read', ]); assert.deepEqual(permissionFor(InspectionActsController.prototype, 'get'), [ 'inspection_acts.read', ]); assert.deepEqual(permissionFor(InspectionActsController.prototype, 'update'), [ 'inspection_acts.update', ]); assert.deepEqual(permissionFor(InspectionActsController.prototype, 'cancel'), [ 'inspection_acts.cancel', ]); });