hashiccandLisbet Alvarez
3a847605ed
* chore: 🤖 reapply previous ember-can upgrade from #3093 * chore: 🤖 add missing ember-inflector dependency * chore: 🤖 move @ember/string to be a dependency in desktop * chore: 🤖 re-run pnpm install to resolve lockfile dupe key error * chore: 🤖 remove unused abilities service injections Co-Authored-By: Lisbet Alvarez <107949262+lisbet-alvarez@users.noreply.github.com> --------- Co-authored-by: Lisbet Alvarez <107949262+lisbet-alvarez@users.noreply.github.com>
109 lines
4.3 KiB
JavaScript
109 lines
4.3 KiB
JavaScript
/**
|
|
* Copyright IBM Corp. 2021, 2026
|
|
* SPDX-License-Identifier: BUSL-1.1
|
|
*/
|
|
|
|
import { module, test } from 'qunit';
|
|
import { setupTest } from 'ember-qunit';
|
|
import {
|
|
TYPE_AUTH_METHOD_PASSWORD,
|
|
TYPE_AUTH_METHOD_OIDC,
|
|
TYPE_AUTH_METHOD_LDAP,
|
|
} from 'api/models/auth-method';
|
|
|
|
module('Unit | Abilities | Auth Method', function (hooks) {
|
|
setupTest(hooks);
|
|
|
|
let abilitiesService;
|
|
let store;
|
|
|
|
hooks.beforeEach(function () {
|
|
abilitiesService = this.owner.lookup('service:abilities');
|
|
store = this.owner.lookup('service:store');
|
|
});
|
|
|
|
test('can read known auth method types when authorized', function (assert) {
|
|
const authMethod = store.createRecord('auth-method', {
|
|
authorized_actions: ['read'],
|
|
type: TYPE_AUTH_METHOD_OIDC,
|
|
});
|
|
assert.true(abilitiesService.can('read auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_PASSWORD;
|
|
assert.true(abilitiesService.can('read auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_LDAP;
|
|
assert.true(abilitiesService.can('read auth-method', authMethod));
|
|
authMethod.type = 'no-such-type';
|
|
assert.false(abilitiesService.can('read auth-method', authMethod));
|
|
});
|
|
|
|
test('cannot read auth methods when unauthorized', function (assert) {
|
|
const authMethod = store.createRecord('auth-method', {
|
|
authorized_actions: [],
|
|
type: TYPE_AUTH_METHOD_OIDC,
|
|
});
|
|
assert.false(abilitiesService.can('read auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_PASSWORD;
|
|
assert.false(abilitiesService.can('read auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_LDAP;
|
|
assert.false(abilitiesService.can('read auth-method', authMethod));
|
|
authMethod.type = 'no-such-type';
|
|
assert.false(abilitiesService.can('read auth-method', authMethod));
|
|
});
|
|
|
|
test('can delete known auth method types when authorized', function (assert) {
|
|
const authMethod = store.createRecord('auth-method', {
|
|
authorized_actions: ['delete'],
|
|
type: TYPE_AUTH_METHOD_OIDC,
|
|
});
|
|
assert.true(abilitiesService.can('delete auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_PASSWORD;
|
|
assert.true(abilitiesService.can('delete auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_LDAP;
|
|
assert.true(abilitiesService.can('delete auth-method', authMethod));
|
|
authMethod.type = 'no-such-type';
|
|
assert.false(abilitiesService.can('delete auth-method', authMethod));
|
|
});
|
|
|
|
test('cannot delete auth methods when unauthorized', function (assert) {
|
|
const authMethod = store.createRecord('auth-method', {
|
|
authorized_actions: ['delete'],
|
|
type: TYPE_AUTH_METHOD_OIDC,
|
|
});
|
|
assert.true(abilitiesService.can('delete auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_PASSWORD;
|
|
assert.true(abilitiesService.can('delete auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_LDAP;
|
|
assert.true(abilitiesService.can('delete auth-method', authMethod));
|
|
authMethod.type = 'no-such-type';
|
|
assert.false(abilitiesService.can('delete auth-method', authMethod));
|
|
});
|
|
|
|
test('can update known auth method types when authorized', function (assert) {
|
|
const authMethod = store.createRecord('auth-method', {
|
|
authorized_actions: ['update'],
|
|
type: TYPE_AUTH_METHOD_OIDC,
|
|
});
|
|
assert.true(abilitiesService.can('update auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_PASSWORD;
|
|
assert.true(abilitiesService.can('update auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_LDAP;
|
|
assert.true(abilitiesService.can('update auth-method', authMethod));
|
|
authMethod.type = 'no-such-type';
|
|
assert.false(abilitiesService.can('update auth-method', authMethod));
|
|
});
|
|
|
|
test('cannot update auth methods when unauthorized', function (assert) {
|
|
const authMethod = store.createRecord('auth-method', {
|
|
authorized_actions: [],
|
|
type: TYPE_AUTH_METHOD_OIDC,
|
|
});
|
|
assert.false(abilitiesService.can('update auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_PASSWORD;
|
|
assert.false(abilitiesService.can('update auth-method', authMethod));
|
|
authMethod.type = TYPE_AUTH_METHOD_LDAP;
|
|
assert.false(abilitiesService.can('update auth-method', authMethod));
|
|
authMethod.type = 'no-such-type';
|
|
assert.false(abilitiesService.can('update auth-method', authMethod));
|
|
});
|
|
});
|