Jeff Mitchell
27919ab11b
This returns authorized actions on targets to users when they perform an operation on a target, including listing. It also prevents users from seeing values in listing targets on which they have no permissions.
48 lines
1.2 KiB
Go
48 lines
1.2 KiB
Go
package auth
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/hashicorp/boundary/internal/kms"
|
|
"github.com/hashicorp/boundary/internal/perms"
|
|
"github.com/hashicorp/boundary/internal/types/action"
|
|
"github.com/hashicorp/boundary/internal/types/resource"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
// Test_GetOpts provides unit tests for GetOpts and all the options
|
|
func Test_GetOpts(t *testing.T) {
|
|
t.Parallel()
|
|
opts := getOpts()
|
|
assert.Equal(t, options{}, opts)
|
|
|
|
withKms := new(kms.Kms)
|
|
res := new(perms.Resource)
|
|
|
|
opts = getOpts(
|
|
WithScopeId("foo"),
|
|
WithPin("bar"),
|
|
WithId("zip"),
|
|
WithAction(action.AddHosts),
|
|
WithType(resource.Group),
|
|
WithUserId("user"),
|
|
WithKms(withKms),
|
|
WithRecoveryTokenNotAllowed(true),
|
|
WithAnonymousUserNotAllowed(true),
|
|
WithResource(res),
|
|
)
|
|
exp := options{
|
|
withScopeId: "foo",
|
|
withPin: "bar",
|
|
withId: "zip",
|
|
withAction: action.AddHosts,
|
|
withType: resource.Group,
|
|
withUserId: "user",
|
|
withKms: withKms,
|
|
withRecoveryTokenNotAllowed: true,
|
|
withAnonymousUserNotAllowed: true,
|
|
withResource: res,
|
|
}
|
|
assert.Equal(t, exp, opts)
|
|
}
|