Files
dh-inspeccion-v2/api-v3/test/unit/inspection-acts-authorization.test.ts

35 lines
1.3 KiB
TypeScript

import 'reflect-metadata';
import assert from 'node:assert/strict';
import test from 'node:test';
import { REQUIRED_PERMISSIONS_KEY } from '../../src/authorization/decorators/require-permissions.decorator';
import {
InspectionActsController,
InspectionVisitActsController,
} from '../../src/inspection-acts/inspection-acts.controller';
function permissionFor(controller: object, method: string): string[] {
const handler = controller[method as keyof typeof controller];
return Reflect.getMetadata(REQUIRED_PERMISSIONS_KEY, handler) as string[];
}
test('inspection act endpoints separate reading, creation, editing and cancellation', () => {
assert.deepEqual(permissionFor(InspectionVisitActsController.prototype, 'list'), [
'inspection_acts.read',
]);
assert.deepEqual(permissionFor(InspectionVisitActsController.prototype, 'create'), [
'inspection_acts.create',
]);
assert.deepEqual(permissionFor(InspectionActsController.prototype, 'list'), [
'inspection_acts.read',
]);
assert.deepEqual(permissionFor(InspectionActsController.prototype, 'get'), [
'inspection_acts.read',
]);
assert.deepEqual(permissionFor(InspectionActsController.prototype, 'update'), [
'inspection_acts.update',
]);
assert.deepEqual(permissionFor(InspectionActsController.prototype, 'cancel'), [
'inspection_acts.cancel',
]);
});