Function TestCheck

backend/component/iam/manager_test.go:14–117

(t *testing.T)

)

func TestCheck(t *testing.T) {
	testUser := &store.UserMessage{
		ID:    123,
		Email: "test@example.com",
		Type:  storepb.PrincipalType_END_USER,
	}

	rolePermissions := make(map[string]map[permission.Permission]bool)
	for _, role := range store.PredefinedRoles {
		rolePermissions[common.FormatRole(role.ResourceID)] = role.Permissions
	}
	getPermissions := func(role string) map[permission.Permission]bool {
		return rolePermissions[role]
	}

	tests := []struct {
		permission   permission.Permission
		policy       *storepb.IamPolicy
		groupMembers map[string]map[string]bool
		want         bool
	}{
		{
			permission: permission.InstancesCreate,
			policy: &storepb.IamPolicy{
				Bindings: []*storepb.Binding{
					{
						Role:    "roles/workspaceMember",
						Members: []string{"users/test@example.com"},
					},
				},
			},
			groupMembers: nil,
			want:         false,
		},
		{
			permission: permission.InstancesCreate,
			policy: &storepb.IamPolicy{
				Bindings: []*storepb.Binding{
					{
						Role:    "roles/workspaceAdmin",
						Members: []string{"users/test@example.com"},
					},
				},
			},
			groupMembers: nil,
			want:         true,
		},
		{
			permission: permission.InstancesCreate,
			policy: &storepb.IamPolicy{
				Bindings: []*storepb.Binding{
					{
						Role:    "roles/workspaceAdmin",
						Members: []string{"users/other@example.com"},
					},
				},
			},
			groupMembers: nil,