mirror of
https://github.com/ash-project/ash.git
synced 2024-09-20 13:33:20 +12:00
89 lines
2.1 KiB
Elixir
89 lines
2.1 KiB
Elixir
defmodule Ash.Test.Policy.SimpleTest do
|
|
@doc false
|
|
use ExUnit.Case
|
|
require Ash.Query
|
|
|
|
alias Ash.Test.Support.PolicySimple.{Api, Car, Organization, Post, Trip, User}
|
|
|
|
setup do
|
|
[
|
|
user: Api.create!(Ash.Changeset.new(User))
|
|
]
|
|
end
|
|
|
|
test "filter checks work on create/update/destroy actions", %{user: user} do
|
|
user2 = Api.create!(Ash.Changeset.new(User))
|
|
|
|
assert_raise Ash.Error.Forbidden, fn ->
|
|
Api.update!(Ash.Changeset.new(user), actor: user2)
|
|
end
|
|
end
|
|
|
|
test "non-filter checks work on create/update/destroy actions" do
|
|
user = Api.create!(Ash.Changeset.new(User))
|
|
|
|
assert_raise Ash.Error.Forbidden, fn ->
|
|
Api.create!(Ash.Changeset.new(Post, %{text: "foo"}), actor: user)
|
|
end
|
|
end
|
|
|
|
test "filter checks work with related data", %{user: user} do
|
|
organization =
|
|
Organization
|
|
|> Ash.Changeset.for_create(:create, %{owner: user.id})
|
|
|> Api.create!()
|
|
|
|
post1 =
|
|
Post
|
|
|> Ash.Changeset.for_create(:create, %{author: user.id, text: "aaa"})
|
|
|> Api.create!()
|
|
|
|
post2 =
|
|
Post
|
|
|> Ash.Changeset.for_create(:create, %{organization: organization.id, text: "bbb"})
|
|
|> Api.create!()
|
|
|
|
Post
|
|
|> Ash.Changeset.for_create(:create, %{text: "invalid"})
|
|
|> Api.create!()
|
|
|
|
ids =
|
|
Post
|
|
|> Api.read!(actor: user)
|
|
|> Enum.map(& &1.id)
|
|
|> Enum.sort()
|
|
|
|
assert ids == Enum.sort([post1.id, post2.id])
|
|
end
|
|
|
|
test "filter checks work with many to many related data and a filter", %{user: user} do
|
|
car1 =
|
|
Car
|
|
|> Ash.Changeset.for_create(:create, %{users: [user.id]})
|
|
|> Api.create!()
|
|
|
|
car2 =
|
|
Car
|
|
|> Ash.Changeset.for_create(:create, %{})
|
|
|> Api.create!()
|
|
|
|
results =
|
|
Car
|
|
|> Ash.Query.filter(id == ^car2.id)
|
|
|> Api.read!(actor: user)
|
|
|
|
assert results == []
|
|
|
|
results =
|
|
Car
|
|
|> Ash.Query.filter(id == ^car1.id)
|
|
|> Api.read!(actor: user)
|
|
|> Enum.map(& &1.id)
|
|
|
|
assert results == [car1.id]
|
|
end
|
|
|
|
test "filter checks work via deeply related data", %{user: user} do
|
|
assert Api.read!(Trip, actor: user) == []
|
|
end
|
|
end
|