Function TestIsSystemTable

pkg/sql/security/scanner_test.go:607–647

(t *testing.T)

}

func TestIsSystemTable(t *testing.T) {
	scanner := NewScanner()

	// Test cases for system table detection
	tests := []struct {
		tableName string
		isSystem  bool
		desc      string
	}{
		// Exact matches
		{"information_schema", true, "exact information_schema"},
		{"INFORMATION_SCHEMA", true, "case-insensitive information_schema"},
		{"pg_catalog", true, "exact pg_catalog"},
		{"sys", true, "exact sys"},

		// Prefix matches
		{"information_schema.tables", true, "information_schema prefix"},
		{"mysql.user", true, "mysql prefix"},
		{"pg_class", true, "pg_ prefix"},
		{"sys.tables", true, "sys. prefix"},
		{"sqlite_master", true, "sqlite_ prefix"},
		{"master.dbo.sysobjects", true, "SQL Server master.dbo prefix"},

		// False positives that should NOT match
		{"users", false, "regular table"},
		{"mysystem", false, "table starting with 'my' should not match mysql"},
		{"system_logs", false, "table containing 'system' should not match"},
		{"postgresql_data", false, "table containing 'postgresql' should not match"},
		{"syslog", false, "table starting with 'sys' (no dot) should not match"},
		{"customer_info", false, "table with 'info' should not match information_schema"},
	}

	for _, tc := range tests {
		t.Run(tc.desc, func(t *testing.T) {
			result := scanner.isSystemTable(tc.tableName)
			if result != tc.isSystem {
				t.Errorf("isSystemTable(%q) = %v, want %v", tc.tableName, result, tc.isSystem)
			}
		})
	}
}

func TestShouldInclude_UnknownSeverity(t *testing.T) {
	scanner := NewScanner()