import 'reflect-metadata';
import assert from 'node:assert/strict';
import test from 'node:test';
import { REQUIRED_PERMISSIONS_KEY } from '../../src/authorization/decorators/require-permissions.decorator';
import {
  AssetGeometriesController,
  MapAssetsController,
} from '../../src/asset-master/asset-geometries.controller';

function permissionFor(controller: object, method: string): string[] {
  const handler = controller[method as keyof typeof controller];
  return Reflect.getMetadata(REQUIRED_PERMISSIONS_KEY, handler) as string[];
}

test('geometry reads use assets.read and writes require the specific permission', () => {
  const controller = AssetGeometriesController.prototype;
  assert.deepEqual(permissionFor(controller, 'get'), ['assets.read']);
  assert.deepEqual(permissionFor(controller, 'upsert'), ['assets.update_geometry']);
  assert.deepEqual(permissionFor(controller, 'remove'), ['assets.update_geometry']);
});

test('the operational map is protected by assets.read', () => {
  assert.deepEqual(permissionFor(MapAssetsController.prototype, 'map'), ['assets.read']);
});