Function resolve_inheritance_bounded

nodedb/src/control/security/role.rs:630–651

()

    /// entries and never spin infinitely.
    #[test]
    fn resolve_inheritance_bounded() {
        let store = RoleStore::new();
        // Build a valid chain of exactly MAX_ROLE_INHERITANCE_DEPTH roles.
        store
            .create_role("root", TenantId::new(1), None, None)
            .unwrap();
        let mut prev = "root".to_string();
        for i in 1..MAX_ROLE_INHERITANCE_DEPTH {
            let name = format!("node{i}");
            store
                .create_role(&name, TenantId::new(1), Some(&prev), None)
                .unwrap();
            prev = name;
        }
        let chain = store.resolve_inheritance(&Role::Custom(prev)).unwrap();
        assert!(
            chain.len() <= MAX_ROLE_INHERITANCE_DEPTH,
            "chain length {} exceeds MAX_ROLE_INHERITANCE_DEPTH {}",
            chain.len(),
            MAX_ROLE_INHERITANCE_DEPTH
        );
    }
}