()
| 328 | |
| 329 | #[test] |
| 330 | fn missing_auth_ref_denies() { |
| 331 | let pred = RlsPredicate::Compare { |
| 332 | field: "org_id".into(), |
| 333 | op: CompareOp::Eq, |
| 334 | value: PredicateValue::AuthRef("nonexistent_field".into()), |
| 335 | }; |
| 336 | let auth = make_auth(); |
| 337 | assert!(substitute_to_scan_filters(&pred, &auth).is_none()); |
| 338 | } |
| 339 | |
| 340 | #[test] |
| 341 | fn policy_combination_permissive_and_restrictive() { |
nothing calls this directly
no test coverage detected