mirror of
https://github.com/hanzoai/team.git
synced 2026-09-30 01:57:35 +00:00
zeekay
8feb24ea1f
The server module named github.com/hanzoai/team/server/v8 — a path that resolves to the retired workspace's repository, not this one — while server/public still published github.com/mattermost/mattermost/server/public. Both are github.com/hanzoteam/server/... now, which is where this code actually lives. That second half is what made the binary unbootable. Upstream's public path stayed claimed by upstream, mattermost-plugin-ai imported it, and the build linked public/model twice; public/plugin's gob.Register then ran twice under one name and panicked at init, before main. Reverting the rename traded the brand for a working binary. Rebranding the plugin alongside it needs no such trade: the agents fork is github.com/hanzoteam/agents/v2 against our public module, so no module named mattermost/mattermost is in the graph at all. Measured: `go list -deps ./cmd/mattermost` names exactly one public/model, and it is ours.
278 lines
7.5 KiB
Go
278 lines
7.5 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package commands
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
|
|
gomock "github.com/golang/mock/gomock"
|
|
"github.com/pkg/errors"
|
|
|
|
"github.com/hanzoteam/server/server/public/model"
|
|
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
func (s *MmctlUnitTestSuite) TestAddPermissionsCmd() {
|
|
s.Run("Adding a new permission to an existing role", func() {
|
|
mockRole := &model.Role{
|
|
Id: "mock-id",
|
|
Name: "mock-role",
|
|
Permissions: []string{"view", "edit"},
|
|
}
|
|
newPermission := "delete"
|
|
|
|
expectedPermissions := mockRole.Permissions
|
|
expectedPermissions = append(expectedPermissions, newPermission)
|
|
expectedPatch := &model.RolePatch{
|
|
Permissions: &expectedPermissions,
|
|
}
|
|
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(mockRole, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
s.client.
|
|
EXPECT().
|
|
PatchRole(context.TODO(), mockRole.Id, expectedPatch).
|
|
Return(&model.Role{}, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name, newPermission}
|
|
err := addPermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().Nil(err)
|
|
})
|
|
|
|
s.Run("Trying to add a new permission to a non existing role", func() {
|
|
expectedError := errors.New("role_not_found")
|
|
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), gomock.Any()).
|
|
Return(nil, &model.Response{StatusCode: http.StatusNotFound}, expectedError).
|
|
Times(1)
|
|
|
|
args := []string{"mockRole", "newPermission"}
|
|
err := addPermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().Equal(expectedError, err)
|
|
})
|
|
|
|
s.Run("Adding a new sysconsole_* permission to a role", func() {
|
|
mockRole := &model.Role{
|
|
Id: "mock-id",
|
|
Name: "mock-role",
|
|
Permissions: []string{},
|
|
}
|
|
newPermission := "sysconsole_read_user_management_channels"
|
|
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(mockRole, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
s.Run("with ancillary permissions", func() {
|
|
expectedPermissions := mockRole.Permissions
|
|
expectedPermissions = append(expectedPermissions, []string{newPermission, "read_public_channel", "read_channel", "read_public_channel_groups", "read_private_channel_groups"}...)
|
|
expectedPatch := &model.RolePatch{
|
|
Permissions: &expectedPermissions,
|
|
}
|
|
s.client.
|
|
EXPECT().
|
|
PatchRole(context.TODO(), mockRole.Id, expectedPatch).
|
|
Return(&model.Role{}, &model.Response{}, nil).
|
|
Times(1)
|
|
args := []string{mockRole.Name, newPermission}
|
|
cmd := &cobra.Command{}
|
|
err := addPermissionsCmdF(s.client, cmd, args)
|
|
s.Require().Nil(err)
|
|
})
|
|
})
|
|
}
|
|
|
|
func (s *MmctlUnitTestSuite) TestRemovePermissionsCmd() {
|
|
s.Run("Removing a permission from an existing role", func() {
|
|
mockRole := &model.Role{
|
|
Id: "mock-id",
|
|
Name: "mock-role",
|
|
Permissions: []string{"view", "edit", "delete"},
|
|
}
|
|
|
|
expectedPatch := &model.RolePatch{
|
|
Permissions: &[]string{"view", "edit"},
|
|
}
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(mockRole, &model.Response{}, nil).
|
|
Times(1)
|
|
s.client.
|
|
EXPECT().
|
|
PatchRole(context.TODO(), mockRole.Id, expectedPatch).
|
|
Return(&model.Role{}, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name, "delete"}
|
|
err := removePermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().Nil(err)
|
|
})
|
|
|
|
s.Run("Removing multiple permissions from an existing role", func() {
|
|
mockRole := &model.Role{
|
|
Id: "mock-id",
|
|
Name: "mock-role",
|
|
Permissions: []string{"view", "edit", "delete"},
|
|
}
|
|
|
|
expectedPatch := &model.RolePatch{
|
|
Permissions: &[]string{"edit"},
|
|
}
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(mockRole, &model.Response{}, nil).
|
|
Times(1)
|
|
s.client.
|
|
EXPECT().
|
|
PatchRole(context.TODO(), mockRole.Id, expectedPatch).
|
|
Return(&model.Role{}, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name, "view", "delete"}
|
|
err := removePermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().Nil(err)
|
|
})
|
|
|
|
s.Run("Removing a non-existing permission from an existing role", func() {
|
|
mockRole := &model.Role{
|
|
Id: "mock-id",
|
|
Name: "mock-role",
|
|
Permissions: []string{"view", "edit"},
|
|
}
|
|
|
|
expectedPatch := &model.RolePatch{
|
|
Permissions: &[]string{"view", "edit"},
|
|
}
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(mockRole, &model.Response{}, nil).
|
|
Times(1)
|
|
s.client.
|
|
EXPECT().
|
|
PatchRole(context.TODO(), mockRole.Id, expectedPatch).
|
|
Return(&model.Role{}, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name, "delete"}
|
|
err := removePermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().Nil(err)
|
|
})
|
|
|
|
s.Run("Removing a permission from a non-existing role", func() {
|
|
mockRole := model.Role{
|
|
Name: "exampleName",
|
|
}
|
|
|
|
mockError := errors.New("role_not_found")
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(nil, &model.Response{StatusCode: http.StatusNotFound}, mockError).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name, "delete"}
|
|
err := removePermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().EqualError(err, "role_not_found")
|
|
})
|
|
}
|
|
|
|
func (s *MmctlUnitTestSuite) TestResetPermissionsCmd() {
|
|
s.Run("A non-existent role", func() {
|
|
mockRole := model.Role{
|
|
Name: "exampleName",
|
|
}
|
|
|
|
mockError := errors.New("role_not_found")
|
|
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(nil, &model.Response{StatusCode: http.StatusNotFound}, mockError).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name}
|
|
err := resetPermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().EqualError(err, "role_not_found")
|
|
})
|
|
|
|
s.Run("A role without default permissions", func() {
|
|
mockRole := model.Role{
|
|
Id: "mock-id",
|
|
Name: "mock-role",
|
|
Permissions: []string{"view", "edit", "delete"},
|
|
}
|
|
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(&mockRole, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name}
|
|
err := resetPermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().EqualError(err, "no default permissions available for role")
|
|
})
|
|
|
|
s.Run("Resets the permissions", func() {
|
|
mockRole := model.Role{
|
|
Id: "mock-id",
|
|
Name: "channel_admin",
|
|
Permissions: []string{"view_foos", "delete_bars"},
|
|
}
|
|
|
|
expectedPermissions := []string{
|
|
"manage_channel_roles",
|
|
"use_group_mentions",
|
|
"add_bookmark_public_channel",
|
|
"edit_bookmark_public_channel",
|
|
"delete_bookmark_public_channel",
|
|
"order_bookmark_public_channel",
|
|
"add_bookmark_private_channel",
|
|
"edit_bookmark_private_channel",
|
|
"delete_bookmark_private_channel",
|
|
"order_bookmark_private_channel",
|
|
"manage_public_channel_banner",
|
|
"manage_private_channel_banner",
|
|
"manage_channel_access_rules",
|
|
"manage_public_channel_auto_translation",
|
|
"manage_private_channel_auto_translation",
|
|
"manage_private_channel_discoverability",
|
|
"manage_channel_join_requests",
|
|
}
|
|
expectedPatch := &model.RolePatch{
|
|
Permissions: &expectedPermissions,
|
|
}
|
|
|
|
s.client.
|
|
EXPECT().
|
|
GetRoleByName(context.TODO(), mockRole.Name).
|
|
Return(&mockRole, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
s.client.
|
|
EXPECT().
|
|
PatchRole(context.TODO(), mockRole.Id, expectedPatch).
|
|
Return(&model.Role{}, &model.Response{}, nil).
|
|
Times(1)
|
|
|
|
args := []string{mockRole.Name}
|
|
err := resetPermissionsCmdF(s.client, &cobra.Command{}, args)
|
|
s.Require().Nil(err)
|
|
})
|
|
}
|