Zhihe Li
f0530e1f8f
* feat: 🎸 Update models for vault ssh cert feature (#1591) ✅ Closes: ICU-7546 * feat: 🎸 Setup types in cred library forms and use HDS component (#1597) * feat: 🎸 Setup types in cred library forms and use HDS component ✅ Closes: ICU-7673 * feat: 🎸 Add vault ssh cert type for credential library (#1608) * feat: 🎸 Add vault ssh cert type for credential library ✅ Closes: ICU-7678 * feat: 🎸 Enable feature flag for vault ssh cert work (#1614) * fix: 🐛 Change fields to optional as they get default by backend (#1615) * Chore/cleanup vault ssh cert (#1616)
74 lines
3.3 KiB
JavaScript
74 lines
3.3 KiB
JavaScript
import { module, test } from 'qunit';
|
|
import { setupTest } from 'ember-qunit';
|
|
import {
|
|
TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC,
|
|
TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE,
|
|
} from 'api/models/credential-library';
|
|
|
|
module('Unit | Abilities | credential-library', function (hooks) {
|
|
setupTest(hooks);
|
|
|
|
let features;
|
|
|
|
hooks.beforeEach(function () {
|
|
features = this.owner.lookup('service:features');
|
|
features.enable('credential-library-vault-ssh-certificate');
|
|
});
|
|
|
|
test('can read credential library type when authorized and feature is enabled', function (assert) {
|
|
assert.expect(2);
|
|
const canService = this.owner.lookup('service:can');
|
|
const store = this.owner.lookup('service:store');
|
|
const credentialLibrary = store.createRecord('credential-library', {
|
|
authorized_actions: ['read'],
|
|
type: TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE,
|
|
});
|
|
assert.true(canService.can('read credential-library', credentialLibrary));
|
|
credentialLibrary.type = TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC;
|
|
assert.true(canService.can('read credential-library', credentialLibrary));
|
|
});
|
|
|
|
test('cannot read credential library type when unauthorized and feature is enabled', function (assert) {
|
|
assert.expect(2);
|
|
const canService = this.owner.lookup('service:can');
|
|
const store = this.owner.lookup('service:store');
|
|
const credentialLibrary = store.createRecord('credential-library', {
|
|
authorized_actions: [],
|
|
type: TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE,
|
|
});
|
|
assert.false(canService.can('read credential-library', credentialLibrary));
|
|
credentialLibrary.type = TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC;
|
|
assert.false(canService.can('read credential-library', credentialLibrary));
|
|
});
|
|
|
|
test('cannot read credential library type when unauthorized and feature is disabled', function (assert) {
|
|
assert.expect(2);
|
|
const canService = this.owner.lookup('service:can');
|
|
const store = this.owner.lookup('service:store');
|
|
const featuresService = this.owner.lookup('service:features');
|
|
featuresService.disable('credential-library-vault-ssh-certificate');
|
|
const credentialLibrary = store.createRecord('credential-library', {
|
|
authorized_actions: [],
|
|
type: TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE,
|
|
});
|
|
assert.false(canService.can('read credential-library', credentialLibrary));
|
|
credentialLibrary.type = TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC;
|
|
assert.false(canService.can('read credential-library', credentialLibrary));
|
|
});
|
|
|
|
test('can read vault-generic but not vault-ssh-certificate when authorized and feature is disabled', function (assert) {
|
|
assert.expect(2);
|
|
const canService = this.owner.lookup('service:can');
|
|
const store = this.owner.lookup('service:store');
|
|
const featuresService = this.owner.lookup('service:features');
|
|
featuresService.disable('credential-library-vault-ssh-certificate');
|
|
const credentialLibrary = store.createRecord('credential-library', {
|
|
authorized_actions: ['read'],
|
|
type: TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE,
|
|
});
|
|
assert.false(canService.can('read credential-library', credentialLibrary));
|
|
credentialLibrary.type = TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC;
|
|
assert.true(canService.can('read credential-library', credentialLibrary));
|
|
});
|
|
});
|