Spaces:
Sleeping
Sleeping
File size: 4,654 Bytes
79ed62f | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 | import { describe, it, expect, beforeEach } from 'vitest';
import { renderHook } from '@testing-library/react';
import { usePermissionsStore, useCanDo } from '../../../src/store/permissionsStore';
import { useAuthStore } from '../../../src/store/authStore';
import { resetAllStores } from '../../helpers/store';
import { buildUser, buildAdmin } from '../../helpers/factories';
beforeEach(() => {
resetAllStores();
});
describe('permissionsStore', () => {
describe('FE-PERMS-001: setPermissions()', () => {
it('stores the permission map', () => {
const perms = { trip_create: 'everybody', file_upload: 'trip_member' } as const;
usePermissionsStore.getState().setPermissions(perms);
expect(usePermissionsStore.getState().permissions).toEqual(perms);
});
});
describe('FE-PERMS-002: useCanDo() — basic allow/deny', () => {
it('returns false when user is not authenticated', () => {
usePermissionsStore.getState().setPermissions({ trip_create: 'everybody' });
const { result } = renderHook(() => useCanDo());
expect(result.current('trip_create')).toBe(false);
});
it('returns true for "everybody" when user is authenticated', () => {
useAuthStore.setState({ user: buildUser(), isAuthenticated: true });
usePermissionsStore.getState().setPermissions({ trip_create: 'everybody' });
const { result } = renderHook(() => useCanDo());
expect(result.current('trip_create')).toBe(true);
});
it('returns true when action has no configured permission (default allow)', () => {
useAuthStore.setState({ user: buildUser(), isAuthenticated: true });
usePermissionsStore.getState().setPermissions({});
const { result } = renderHook(() => useCanDo());
expect(result.current('unconfigured_action')).toBe(true);
});
});
describe('Admin user', () => {
it('can do anything regardless of configured permissions', () => {
useAuthStore.setState({ user: buildAdmin(), isAuthenticated: true });
usePermissionsStore.getState().setPermissions({ restricted_action: 'admin' });
const { result } = renderHook(() => useCanDo());
expect(result.current('restricted_action')).toBe(true);
});
});
describe('Owner permissions', () => {
it('trip_owner level: owner can act, member cannot', () => {
const user = buildUser({ id: 42 });
useAuthStore.setState({ user, isAuthenticated: true });
usePermissionsStore.getState().setPermissions({ delete_trip: 'trip_owner' });
const { result } = renderHook(() => useCanDo());
const trip = { owner_id: 42 }; // user is owner
const otherTrip = { owner_id: 99 }; // user is not owner
expect(result.current('delete_trip', trip)).toBe(true);
expect(result.current('delete_trip', otherTrip)).toBe(false);
});
it('trip_owner level: is_owner flag grants access', () => {
const user = buildUser({ id: 1 });
useAuthStore.setState({ user, isAuthenticated: true });
usePermissionsStore.getState().setPermissions({ delete_trip: 'trip_owner' });
const { result } = renderHook(() => useCanDo());
expect(result.current('delete_trip', { is_owner: true })).toBe(true);
expect(result.current('delete_trip', { is_owner: false })).toBe(false);
});
});
describe('Member permissions', () => {
it('trip_member level: members and owners can act, unauthenticated trip context cannot', () => {
const user = buildUser({ id: 1 });
useAuthStore.setState({ user, isAuthenticated: true });
usePermissionsStore.getState().setPermissions({ upload_file: 'trip_member' });
const { result } = renderHook(() => useCanDo());
const asOwner = { owner_id: 1 }; // user is owner
const asMember = { owner_id: 99 }; // user is member (trip context provided, not owner)
const noTrip = null; // no trip context
expect(result.current('upload_file', asOwner)).toBe(true);
expect(result.current('upload_file', asMember)).toBe(true);
expect(result.current('upload_file', noTrip)).toBe(false);
});
});
describe('Nobody / admin-only level', () => {
it('admin level: regular user is denied even as trip owner', () => {
const user = buildUser({ id: 1 });
useAuthStore.setState({ user, isAuthenticated: true });
usePermissionsStore.getState().setPermissions({ admin_action: 'admin' });
const { result } = renderHook(() => useCanDo());
expect(result.current('admin_action', { owner_id: 1 })).toBe(false);
expect(result.current('admin_action')).toBe(false);
});
});
});
|