Function TestPermissionCombinations

pkg/workflow/permissions_enum_test.go:419–466

TestPermissionCombinations tests various permission combinations

(t *testing.T)

// TestPermissionCombinations tests various permission combinations
func TestPermissionCombinations(t *testing.T) {
	tests := []struct {
		name        string
		permissions string
		expectValid bool
		description string
	}{
		{
			name: "multiple read permissions",
			permissions: `permissions:
  contents: read
  issues: read
  pull-requests: read`,
			expectValid: true,
			description: "multiple read permissions are valid",
		},
		{
			name: "mixed read and write permissions",
			permissions: `permissions:
  contents: read
  issues: write
  pull-requests: write`,
			expectValid: true,
			description: "mixing read and write is valid",
		},
		{
			name: "all scopes with none",
			permissions: `permissions:
  contents: none
  issues: none
  pull-requests: none`,
			expectValid: true,
			description: "all none is valid (explicit deny)",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			parser := NewPermissionsParser(tt.permissions)

			if tt.expectValid {
				if len(parser.parsedPerms) == 0 && !parser.isShorthand {
					t.Errorf("%s: expected permissions to be parsed", tt.description)
				}
			}
		})
	}
}

// TestPermissionsWhitespaceHandling tests whitespace handling in permissions
func TestPermissionsWhitespaceHandling(t *testing.T) {