Icu 9202 disable all actions for ldap auth method (#1683)

* refactor: 💡 disable all actions for ldap auth-method

✅ Closes: ICU-9202

ui/admin/tests/unit/abilities/auth-method-test.js

@@ -0,0 +1,75 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: MPL-2.0
+ */
+
+import { module, test } from 'qunit';
+import { setupTest } from 'ember-qunit';
+import {
+  TYPE_AUTH_METHOD_LDAP,
+  TYPE_AUTH_METHOD_OIDC,
+} from 'api/models/auth-method';
+
+module('Unit | Abilities | auth-method', function (hooks) {
+  setupTest(hooks);
+
+  let canService;
+  let store;
+
+  hooks.beforeEach(function () {
+    canService = this.owner.lookup('service:can');
+    store = this.owner.lookup('service:store');
+  });
+
+  test('cannot read LDAP auth-method when authorized', function (assert) {
+    assert.expect(1);
+    const authMethod = store.createRecord('auth-method', {
+      authorized_actions: ['read'],
+      type: TYPE_AUTH_METHOD_LDAP,
+    });
+    assert.false(canService.can('read auth-method', authMethod));
+  });
+
+  test('cannot read LDAP auth-method when unauthorized', function (assert) {
+    assert.expect(1);
+    const authMethod = store.createRecord('auth-method', {
+      authorized_actions: [],
+      type: TYPE_AUTH_METHOD_LDAP,
+    });
+    assert.false(canService.can('read auth-method', authMethod));
+  });
+
+  test('can read non-LDAP auth-method when authorized', function (assert) {
+    assert.expect(1);
+    const authMethod = store.createRecord('auth-method', {
+      authorized_actions: ['read'],
+      type: TYPE_AUTH_METHOD_OIDC,
+    });
+    assert.true(canService.can('read auth-method', authMethod));
+  });
+
+  test('cannot read non-LDAP auth-method when unauthorized', function (assert) {
+    assert.expect(1);
+    const authMethod = store.createRecord('auth-method', {
+      authorized_actions: [],
+      type: TYPE_AUTH_METHOD_OIDC,
+    });
+    assert.false(canService.can('read auth-method', authMethod));
+  });
+
+  test('cannot make LDAP auth-method primary', function (assert) {
+    assert.expect(1);
+    const authMethod = store.createRecord('auth-method', {
+      type: TYPE_AUTH_METHOD_LDAP,
+    });
+    assert.false(canService.can('makePrimary auth-method', authMethod));
+  });
+
+  test('can make non-LDAP auth-method primary', function (assert) {
+    assert.expect(1);
+    const authMethod = store.createRecord('auth-method', {
+      type: TYPE_AUTH_METHOD_OIDC,
+    });
+    assert.true(canService.can('makePrimary auth-method', authMethod));
+  });
+});