chore(test): проверить права и восстановление базы в браузере

2026-10-08 00:03:13 +07:00
1 parent 1adb82c9a2
commit c337fddac9
@@ -0,0 +1,140 @@
+{
+  "date": "2026-10-08",
+  "source": "4c12c55",
+  "database": "mmapp_acceptance_20261007",
+  "authRequired": true,
+  "realChildProcesses": true,
+  "denials": [
+    {
+      "label": "anonymous",
+      "method": "GET",
+      "path": "backup",
+      "status": 401
+    },
+    {
+      "label": "anonymous",
+      "method": "POST",
+      "path": "restore",
+      "status": 401
+    },
+    {
+      "label": "settings-reader",
+      "method": "GET",
+      "path": "backup",
+      "status": 403
+    },
+    {
+      "label": "settings-reader",
+      "method": "POST",
+      "path": "restore",
+      "status": 403
+    },
+    {
+      "label": "settings-writer",
+      "method": "GET",
+      "path": "backup",
+      "status": 403
+    },
+    {
+      "label": "settings-writer",
+      "method": "POST",
+      "path": "restore",
+      "status": 403
+    },
+    {
+      "label": "traffic-admin",
+      "method": "GET",
+      "path": "backup",
+      "status": 403
+    },
+    {
+      "label": "traffic-admin",
+      "method": "POST",
+      "path": "restore",
+      "status": 403
+    },
+    {
+      "label": "missing-app",
+      "method": "GET",
+      "path": "backup",
+      "status": 403
+    },
+    {
+      "label": "missing-app",
+      "method": "POST",
+      "path": "restore",
+      "status": 403
+    },
+    {
+      "label": "wrong-issuer",
+      "method": "GET",
+      "path": "backup",
+      "status": 401
+    },
+    {
+      "label": "wrong-issuer",
+      "method": "POST",
+      "path": "restore",
+      "status": 401
+    },
+    {
+      "label": "expired",
+      "method": "GET",
+      "path": "backup",
+      "status": 401
+    },
+    {
+      "label": "expired",
+      "method": "POST",
+      "path": "restore",
+      "status": 401
+    },
+    {
+      "label": "invalid-signature",
+      "method": "GET",
+      "path": "backup",
+      "status": 401
+    },
+    {
+      "label": "invalid-signature",
+      "method": "POST",
+      "path": "restore",
+      "status": 401
+    }
+  ],
+  "mainDatabaseTouched": false,
+  "deniedChildProcessCounts": {
+    "pg_dump": 0,
+    "pg_restore": 0,
+    "psql": 0
+  },
+  "deniedControlsUnchanged": true,
+  "adminBackup": {
+    "status": 200,
+    "bytes": 478183,
+    "childProcessCounts": {
+      "pg_dump": 1,
+      "pg_restore": 0,
+      "psql": 0
+    }
+  },
+  "limits": [
+    "JWT generated only in memory with configured test issuer; real Portal SSO not tested",
+    "No browser restore UI and no successful admin restore in this RBAC block",
+    "Instrumentation observes production child_process.spawn without replacing command execution"
+  ],
+  "healthMainAfter": {
+    "status": "ok",
+    "timestamp": "2026-10-07T17:00:26.577Z",
+    "version": "1.0.0-test.4c12c55",
+    "eventLoopDelayMs": 20,
+    "flowWorker": {
+      "alive": false,
+      "bound": false,
+      "pendingSize": 0,
+      "dropped": 0,
+      "packetsReceived": 0
+    }
+  },
+  "startedClientDate": "2026-10-07"
+}