|
|
@ -67,6 +67,28 @@ describe('testing permissions', () => { |
|
|
|
expect(Permission.allPermissions.every(b => NO_PERMISSION.get(b))).toBe(true); |
|
|
|
expect(Permission.allPermissions.every(b => NO_PERMISSION.get(b))).toBe(true); |
|
|
|
}); |
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
//todo: what othe rpermissions test should be added?
|
|
|
|
test('handleBody() by somebody with editorPermission NOT having Permissions.ROOT cannot set Permissions.ROOT', () => { |
|
|
|
|
|
|
|
const TEST_PERMISSION = new Permission(); |
|
|
|
|
|
|
|
TEST_PERMISSION.handleBody({ |
|
|
|
|
|
|
|
'permission_bit_0': 0, |
|
|
|
|
|
|
|
}, ANON); |
|
|
|
|
|
|
|
expect(TEST_PERMISSION.get(0)).toBe(false); |
|
|
|
|
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
test('handleBody() by somebody with editorPermission having Permissions.ROOT CAN set Permissions.ROOT', () => { |
|
|
|
|
|
|
|
const TEST_PERMISSION = new Permission(); |
|
|
|
|
|
|
|
TEST_PERMISSION.handleBody({ |
|
|
|
|
|
|
|
'permission_bit_0': 0, |
|
|
|
|
|
|
|
}, ROOT); |
|
|
|
|
|
|
|
expect(TEST_PERMISSION.get(0)).toBe(true); |
|
|
|
|
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
test('handleBody() does not allow setting permission outside of _MANAGE_BOARD_BITS when boardOnly=true, even with permission', () => { |
|
|
|
|
|
|
|
const TEST_PERMISSION = new Permission(); |
|
|
|
|
|
|
|
TEST_PERMISSION.handleBody({ |
|
|
|
|
|
|
|
'permission_bit_0': 0, |
|
|
|
|
|
|
|
}, ROOT, true); |
|
|
|
|
|
|
|
expect(TEST_PERMISSION.get(0)).toBe(false); |
|
|
|
|
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
}); |
|
|
|
}); |
|
|
|