Files
dh-inspeccion-v2/api-v3/test/unit/asset-registry-authorization.test.ts
T

19 lines
994 B
TypeScript

import 'reflect-metadata';
import assert from 'node:assert/strict';
import test from 'node:test';
import { AssetRegistryController } from '../../src/asset-master/asset-registry.controller';
import { REQUIRED_PERMISSIONS_KEY } from '../../src/authorization/decorators/require-permissions.decorator';
function permissionFor(method: string): string[] {
const handler = AssetRegistryController.prototype[method as keyof AssetRegistryController];
return Reflect.getMetadata(REQUIRED_PERMISSIONS_KEY, handler) as string[];
}
test('D5.3.3 registry separates consultation and administration', () => {
assert.deepEqual(permissionFor('get'), ['asset_registry.read']);
assert.deepEqual(permissionFor('documents'), ['asset_registry.read']);
for (const method of ['createDocument','profile','addMembership','endMembership','link','identifier','endIdentifier','legalRight','updateRight','rightOrg','endRightOrg']) {
assert.deepEqual(permissionFor(method), ['asset_registry.manage']);
}
});