Function test_delegation_allows

atomic-identity/src/delegation.rs:702–721

()

    #[test]
    fn test_delegation_allows() {
        let (user, agent) = create_test_identities();
        let scope = DelegationScope::builder()
            .permission(DelegationPermission::Read)
            .permission(DelegationPermission::Record)
            .repository_pattern("alice/*")
            .build();

        let delegation = Delegation::new(&user, &agent, scope).unwrap();

        // Allowed operations
        assert!(delegation.allows(DelegationPermission::Read, Some("alice/project"), None));
        assert!(delegation.allows(DelegationPermission::Record, Some("alice/project"), None));

        // Not allowed (wrong permission)
        assert!(!delegation.allows(DelegationPermission::Push, Some("alice/project"), None));

        // Not allowed (wrong repository)
        assert!(!delegation.allows(DelegationPermission::Read, Some("bob/project"), None));
    }

    #[test]
    fn test_delegation_id_deterministic() {