DenozordecandCursor
0e9349e508
Docker images / prepare-release (push) Successful in 5s
Docker images / backend-image (push) Successful in 2m52s
Docker images / frontend-image (push) Successful in 2m23s
Docker images / notify-webhook (push) Skipped
Docker images / updater-image (push) Successful in 38s
Docker images / publish-release (push) Successful in 8s
JWT на backend, handoff/callback на UI, RBAC mm:*, AUTH_* в compose. Co-authored-by: Cursor <cursoragent@cursor.com>
26 lines
743 B
TypeScript
26 lines
743 B
TypeScript
import assert from "node:assert/strict"
|
|
import { hasPermission, permissionForRequest } from "./permissions.js"
|
|
|
|
assert.equal(hasPermission(["mm:servers:write"], "mm:servers:read"), true)
|
|
assert.equal(hasPermission(["mm:servers:admin"], "mm:servers:write"), true)
|
|
assert.equal(hasPermission(["mm:servers:read"], "mm:servers:write"), false)
|
|
|
|
assert.equal(
|
|
permissionForRequest("GET", "/api/servers"),
|
|
"mm:servers:read",
|
|
)
|
|
assert.equal(
|
|
permissionForRequest("POST", "/api/servers"),
|
|
"mm:servers:write",
|
|
)
|
|
assert.equal(
|
|
permissionForRequest("GET", "/api/system/database/backup"),
|
|
"mm:settings:admin",
|
|
)
|
|
assert.equal(
|
|
permissionForRequest("GET", "/api/unknown-thing"),
|
|
"mm:dashboard:read",
|
|
)
|
|
|
|
console.log("permissions.test.ts: ok")
|