优化结构
This commit is contained in:
@@ -2,10 +2,10 @@ package system
|
||||
|
||||
import (
|
||||
"context"
|
||||
"kra/internal/biz/system"
|
||||
"strings"
|
||||
"testing"
|
||||
|
||||
"kra/internal/biz"
|
||||
"kra/internal/conf"
|
||||
)
|
||||
|
||||
@@ -33,7 +33,7 @@ func apiPolicyUintPointer(value uint) *uint { return &value }
|
||||
|
||||
func TestSetPolicyPathsStrictRootRequiresRegisteredAPI(t *testing.T) {
|
||||
data := newPolicyTestData(t)
|
||||
ctx := biz.NewActorContext(context.Background(), biz.Actor{AuthorityID: 888})
|
||||
ctx := system.NewActorContext(context.Background(), system.Actor{AuthorityID: 888})
|
||||
if err := data.gormDB.WithContext(ctx).Create(&[]authorityPO{
|
||||
{AuthorityID: 888, ParentID: apiPolicyUintPointer(0)},
|
||||
{AuthorityID: 999, ParentID: apiPolicyUintPointer(888)},
|
||||
@@ -44,18 +44,18 @@ func TestSetPolicyPathsStrictRootRequiresRegisteredAPI(t *testing.T) {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 999, []*biz.API{{Path: "/unknown", Method: "POST"}})
|
||||
err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 999, []*system.API{{Path: "/unknown", Method: "POST"}})
|
||||
if err == nil || !strings.Contains(err.Error(), "存在api不在权限列表中") {
|
||||
t.Fatalf("unregistered root assignment error = %v", err)
|
||||
}
|
||||
if err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 999, []*biz.API{{Path: "/known", Method: "POST"}}); err != nil {
|
||||
if err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 999, []*system.API{{Path: "/known", Method: "POST"}}); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
}
|
||||
|
||||
func TestSetPolicyPathsStrictChildRejectsStalePolicy(t *testing.T) {
|
||||
data := newPolicyTestData(t)
|
||||
ctx := biz.NewActorContext(context.Background(), biz.Actor{AuthorityID: 1001})
|
||||
ctx := system.NewActorContext(context.Background(), system.Actor{AuthorityID: 1001})
|
||||
if err := data.gormDB.WithContext(ctx).Create(&[]authorityPO{
|
||||
{AuthorityID: 888, ParentID: apiPolicyUintPointer(0)},
|
||||
{AuthorityID: 1001, ParentID: apiPolicyUintPointer(888)},
|
||||
@@ -73,18 +73,18 @@ func TestSetPolicyPathsStrictChildRejectsStalePolicy(t *testing.T) {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 1002, []*biz.API{{Path: "/stale", Method: "POST"}})
|
||||
err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 1002, []*system.API{{Path: "/stale", Method: "POST"}})
|
||||
if err == nil || !strings.Contains(err.Error(), "存在api不在权限列表中") {
|
||||
t.Fatalf("stale child assignment error = %v", err)
|
||||
}
|
||||
if err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 1002, []*biz.API{{Path: "/known", Method: "POST"}}); err != nil {
|
||||
if err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 1002, []*system.API{{Path: "/known", Method: "POST"}}); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
}
|
||||
|
||||
func TestSetPolicyPathsUsesCompatibleDedupeKey(t *testing.T) {
|
||||
data := newPolicyTestData(t)
|
||||
ctx := biz.NewActorContext(context.Background(), biz.Actor{AuthorityID: 888})
|
||||
ctx := system.NewActorContext(context.Background(), system.Actor{AuthorityID: 888})
|
||||
if err := data.gormDB.WithContext(ctx).Create(&[]authorityPO{
|
||||
{AuthorityID: 888, ParentID: apiPolicyUintPointer(0)},
|
||||
{AuthorityID: 999, ParentID: apiPolicyUintPointer(888)},
|
||||
@@ -98,7 +98,7 @@ func TestSetPolicyPathsUsesCompatibleDedupeKey(t *testing.T) {
|
||||
t.Fatal(err)
|
||||
}
|
||||
|
||||
if err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 999, []*biz.API{
|
||||
if err := (&apiRepo{data: data}).SetPolicyPaths(ctx, 999, []*system.API{
|
||||
{Path: "/a", Method: "BC"},
|
||||
{Path: "/aB", Method: "C"},
|
||||
}); err != nil {
|
||||
@@ -148,7 +148,7 @@ func TestSetAPIRolesStrictOnlyChangesManagedAuthorities(t *testing.T) {
|
||||
}).Error; err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
ctx := biz.NewActorContext(context.Background(), biz.Actor{AuthorityID: actorID})
|
||||
ctx := system.NewActorContext(context.Background(), system.Actor{AuthorityID: actorID})
|
||||
repo := &apiRepo{data: data}
|
||||
if err := repo.SetAPIRoles(ctx, "/known", "POST", []uint{siblingID}); err == nil {
|
||||
t.Fatal("SetAPIRoles() accepted an out-of-scope authority")
|
||||
|
||||
Reference in New Issue
Block a user