Files
dh-inspeccion-v2/api-v3/test/unit/asset-imports-authorization.test.ts
T

21 lines
1.1 KiB
TypeScript

import 'reflect-metadata';
import assert from 'node:assert/strict';
import test from 'node:test';
import { REQUIRED_PERMISSIONS_KEY } from '../../src/authorization/decorators/require-permissions.decorator';
import { AssetImportsController } from '../../src/asset-imports/asset-imports.controller';
function permissionFor(controller: object, method: string): string[] {
const handler = controller[method as keyof typeof controller];
return Reflect.getMetadata(REQUIRED_PERMISSIONS_KEY, handler) as string[];
}
test('D5.3.5 separates import analysis reading from batch administration', () => {
const controller = AssetImportsController.prototype;
assert.deepEqual(permissionFor(controller, 'list'), ['asset_imports.read']);
assert.deepEqual(permissionFor(controller, 'get'), ['asset_imports.read']);
assert.deepEqual(permissionFor(controller, 'rows'), ['asset_imports.read']);
assert.deepEqual(permissionFor(controller, 'upload'), ['asset_imports.manage']);
assert.deepEqual(permissionFor(controller, 'reconcile'), ['asset_imports.manage']);
assert.deepEqual(permissionFor(controller, 'cancel'), ['asset_imports.manage']);
});