Function TestAccessController_RevokeRole

pkg/security/access_control_test.go:241–271

(t *testing.T)

}

func TestAccessController_RevokeRole(t *testing.T) {
	ac := NewAccessController(&AccessControlConfig{}, &mockAuditLog{})

	// 创建用户
	user := &User{
		ID:       "user1",
		Username: "testuser",
		Status:   UserStatusActive,
	}
	_ = ac.CreateUser(user)

	// 创建并分配角色
	role := &Role{
		ID:   "role1",
		Name: "Admin",
	}
	ac.roles = map[string]*Role{"role1": role}
	_ = ac.AssignRole("user1", "role1")

	// 撤销角色
	err := ac.RevokeRole("user1", "role1")
	if err != nil {
		t.Fatalf("RevokeRole failed: %v", err)
	}

	// 验证角色已撤销
	userRoles := ac.userRoles["user1"]
	if len(userRoles) != 0 {
		t.Errorf("expected user to have no roles, got %v", userRoles)
	}
}

func TestAccessController_CheckPermission(t *testing.T) {
	ac := NewAccessController(&AccessControlConfig{}, &mockAuditLog{})