mirror of
https://github.com/hanzoai/team.git
synced 2026-09-30 01:57:35 +00:00
zeekay
8feb24ea1f
The server module named github.com/hanzoai/team/server/v8 — a path that resolves to the retired workspace's repository, not this one — while server/public still published github.com/mattermost/mattermost/server/public. Both are github.com/hanzoteam/server/... now, which is where this code actually lives. That second half is what made the binary unbootable. Upstream's public path stayed claimed by upstream, mattermost-plugin-ai imported it, and the build linked public/model twice; public/plugin's gob.Register then ran twice under one name and panicked at init, before main. Reverting the rename traded the brand for a working binary. Rebranding the plugin alongside it needs no such trade: the agents fork is github.com/hanzoteam/agents/v2 against our public module, so no module named mattermost/mattermost is in the graph at all. Measured: `go list -deps ./cmd/mattermost` names exactly one public/model, and it is ours.
81 lines
2.7 KiB
Go
81 lines
2.7 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package commands
|
|
|
|
import (
|
|
"github.com/spf13/cobra"
|
|
|
|
"github.com/hanzoteam/server/server/v8/cmd/mmctl/client"
|
|
"github.com/hanzoteam/server/server/v8/cmd/mmctl/printer"
|
|
|
|
"github.com/hanzoteam/server/server/public/model"
|
|
)
|
|
|
|
func (s *MmctlE2ETestSuite) TestResetPermissionsCmd() {
|
|
s.SetupEnterpriseTestHelper().InitBasic(s.T())
|
|
|
|
s.Run("Shouldn't let a non-system-admin reset a role's permissions", func() {
|
|
printer.Clean()
|
|
|
|
// update the role to have some non-default permissions
|
|
role, err := s.th.App.GetRoleByName(s.th.Context, model.SystemUserManagerRoleId)
|
|
s.Require().Nil(err)
|
|
|
|
defaultPermissions := role.Permissions
|
|
expectedPermissions := []string{model.PermissionUseGroupMentions.Id, model.PermissionUseChannelMentions.Id}
|
|
role.Permissions = expectedPermissions
|
|
role, err = s.th.App.UpdateRole(role)
|
|
s.Require().Nil(err)
|
|
|
|
// reset to defaults when we're done
|
|
defer func() {
|
|
role.Permissions = defaultPermissions
|
|
_, err = s.th.App.UpdateRole(role)
|
|
s.Require().Nil(err)
|
|
}()
|
|
|
|
// try to reset the permissions
|
|
err2 := resetPermissionsCmdF(s.th.Client, &cobra.Command{}, []string{model.SystemUserManagerRoleId})
|
|
s.Require().Error(err2)
|
|
s.Require().Len(printer.GetLines(), 0)
|
|
s.Require().Len(printer.GetErrorLines(), 0)
|
|
|
|
// ensure reset didn't happen
|
|
roleAfterResetAttempt, err := s.th.App.GetRoleByName(s.th.Context, model.SystemUserManagerRoleId)
|
|
s.Require().Nil(err)
|
|
s.Require().ElementsMatch(expectedPermissions, roleAfterResetAttempt.Permissions)
|
|
})
|
|
|
|
s.RunForSystemAdminAndLocal("Reset a role's permissions", func(c client.Client) {
|
|
printer.Clean()
|
|
|
|
// update the role to have some non-default permissions
|
|
role, err := s.th.App.GetRoleByName(s.th.Context, model.SystemUserManagerRoleId)
|
|
s.Require().Nil(err)
|
|
|
|
defaultPermissions := role.Permissions
|
|
expectedPermissions := []string{model.PermissionUseGroupMentions.Id, model.PermissionUseChannelMentions.Id}
|
|
role.Permissions = expectedPermissions
|
|
role, err = s.th.App.UpdateRole(role)
|
|
|
|
// reset to defaults when we're done
|
|
defer func() {
|
|
role.Permissions = defaultPermissions
|
|
_, err = s.th.App.UpdateRole(role)
|
|
s.Require().Nil(err)
|
|
}()
|
|
|
|
// try to reset the permissions
|
|
err2 := resetPermissionsCmdF(c, &cobra.Command{}, []string{model.SystemUserManagerRoleId})
|
|
s.Require().Nil(err2)
|
|
s.Require().Len(printer.GetLines(), 1)
|
|
s.Require().Len(printer.GetErrorLines(), 0)
|
|
|
|
// ensure reset was successful
|
|
roleAfterResetAttempt, err := s.th.App.GetRoleByName(s.th.Context, model.SystemUserManagerRoleId)
|
|
s.Require().Nil(err)
|
|
s.Require().ElementsMatch(defaultPermissions, roleAfterResetAttempt.Permissions)
|
|
})
|
|
}
|