Function TestMaxHierarchyLevelConsistency

rbac_api_test.go:715–846

(t *testing.T)

}

func TestMaxHierarchyLevelConsistency(t *testing.T) {
	// Test consistency behavior under different maxHierarchyLevel values
	testCases := []struct {
		maxLevel int
		name     string
	}{
		{1, "maxHierarchyLevel=1"},
		{2, "maxHierarchyLevel=2"},
		{3, "maxHierarchyLevel=3"},
	}

	for _, tc := range testCases {
		t.Run(tc.name, func(t *testing.T) {
			// Use model files from examples
			e, err := NewEnforcer("examples/rbac_model.conf", "examples/rbac_policy.csv")
			if err != nil {
				t.Fatalf("Failed to create enforcer: %v", err)
			}

			// Set the maximum hierarchy level for role manager
			rm := defaultrolemanager.NewRoleManager(tc.maxLevel)
			e.SetRoleManager(rm)

			// Add role hierarchy: level0 -> level1 -> level2 -> level3 -> level4
			_, err = e.AddRoleForUser("level0", "level1")
			if err != nil {
				t.Fatalf("Failed to add role for user: %v", err)
			}
			_, err = e.AddRoleForUser("level1", "level2")
			if err != nil {
				t.Fatalf("Failed to add role for user: %v", err)
			}
			_, err = e.AddRoleForUser("level2", "level3")
			if err != nil {
				t.Fatalf("Failed to add role for user: %v", err)
			}
			_, err = e.AddRoleForUser("level3", "level4")
			if err != nil {
				t.Fatalf("Failed to add role for user: %v", err)
			}

			// Test HasLink method
			t.Run("HasLink", func(t *testing.T) {
				for i := 1; i <= 4; i++ {
					hasLink, err := rm.HasLink("level0", fmt.Sprintf("level%d", i))
					if err != nil {
						t.Fatalf("HasLink error: %v", err)
					}
					expected := i <= tc.maxLevel
					if hasLink != expected {
						t.Errorf("HasLink(level0, level%d): got %v, want %v", i, hasLink, expected)
					}
				}
			})

			// Test GetImplicitRolesForUser method
			t.Run("GetImplicitRolesForUser", func(t *testing.T) {
				implicitRoles, err := e.GetImplicitRolesForUser("level0")