Function TestAccessController_AssignRole

pkg/security/access_control_test.go:209–239

(t *testing.T)

}

func TestAccessController_AssignRole(t *testing.T) {
	ac := NewAccessController(&AccessControlConfig{}, &mockAuditLog{})

	// 创建用户
	user := &User{
		ID:       "user1",
		Username: "testuser",
		Status:   UserStatusActive,
	}
	_ = ac.CreateUser(user)

	// 创建角色
	role := &Role{
		ID:          "role1",
		Name:        "Admin",
		Description: "Administrator role",
	}
	ac.roles = map[string]*Role{"role1": role}

	// 分配角色
	err := ac.AssignRole("user1", "role1")
	if err != nil {
		t.Fatalf("AssignRole failed: %v", err)
	}

	// 验证角色已分配
	userRoles := ac.userRoles["user1"]
	if len(userRoles) != 1 || userRoles[0] != "role1" {
		t.Errorf("expected user to have role 'role1', got %v", userRoles)
	}
}

func TestAccessController_RevokeRole(t *testing.T) {
	ac := NewAccessController(&AccessControlConfig{}, &mockAuditLog{})