bb5ac362ed
Editors publish post/tag/media without PII or campaign access; existing users backfill as admin.
99 lines
3.1 KiB
TypeScript
99 lines
3.1 KiB
TypeScript
// @vitest-environment node
|
|
|
|
import type { PayloadRequest } from 'payload'
|
|
import { describe, expect, it } from 'vitest'
|
|
|
|
import type { CampaignUser, User } from '@/payload-types'
|
|
import {
|
|
canManagePublishedContent,
|
|
hasPayloadPanelAccess,
|
|
isPayloadAdmin,
|
|
isPayloadEditor,
|
|
} from '@/utilities/access/shared'
|
|
import { stub } from '../helpers/stub'
|
|
|
|
const adminUser = stub<User>({
|
|
id: 1,
|
|
collection: 'users',
|
|
email: 'admin@example.com',
|
|
roles: ['admin'],
|
|
})
|
|
|
|
const editorUser = stub<User>({
|
|
id: 2,
|
|
collection: 'users',
|
|
email: 'editor@example.com',
|
|
roles: ['editor'],
|
|
})
|
|
|
|
const dualRoleUser = stub<User>({
|
|
id: 3,
|
|
collection: 'users',
|
|
email: 'both@example.com',
|
|
roles: ['admin', 'editor'],
|
|
})
|
|
|
|
/** Runtime-missing roles — Partial stub omits the field. */
|
|
const usersMissingRoles = stub<User>({
|
|
id: 4,
|
|
collection: 'users',
|
|
email: 'legacy@example.com',
|
|
})
|
|
|
|
const usersEmptyRoles = stub<User>({
|
|
id: 5,
|
|
collection: 'users',
|
|
email: 'empty@example.com',
|
|
roles: [],
|
|
})
|
|
|
|
const campaignCoordinator = stub<CampaignUser>({
|
|
id: 10,
|
|
collection: 'campaignUser',
|
|
role: 'coordinator',
|
|
name: 'Coord',
|
|
})
|
|
|
|
const accessArgs = (user: User | CampaignUser | null) =>
|
|
stub<Parameters<typeof canManagePublishedContent>[0]>({
|
|
req: stub<PayloadRequest>({ user }),
|
|
})
|
|
|
|
describe('payload admin role predicates', () => {
|
|
it('isPayloadAdmin requires the users collection and the admin role', () => {
|
|
expect(isPayloadAdmin(adminUser)).toBe(true)
|
|
expect(isPayloadAdmin(dualRoleUser)).toBe(true)
|
|
expect(isPayloadAdmin(editorUser)).toBe(false)
|
|
expect(isPayloadAdmin(usersMissingRoles)).toBe(false)
|
|
expect(isPayloadAdmin(usersEmptyRoles)).toBe(false)
|
|
expect(isPayloadAdmin(campaignCoordinator)).toBe(false)
|
|
expect(isPayloadAdmin(null)).toBe(false)
|
|
expect(isPayloadAdmin(undefined)).toBe(false)
|
|
})
|
|
|
|
it('isPayloadEditor requires the editor role', () => {
|
|
expect(isPayloadEditor(editorUser)).toBe(true)
|
|
expect(isPayloadEditor(dualRoleUser)).toBe(true)
|
|
expect(isPayloadEditor(adminUser)).toBe(false)
|
|
expect(isPayloadEditor(usersMissingRoles)).toBe(false)
|
|
expect(isPayloadEditor(usersEmptyRoles)).toBe(false)
|
|
expect(isPayloadEditor(campaignCoordinator)).toBe(false)
|
|
})
|
|
|
|
it('hasPayloadPanelAccess allows admin or editor', () => {
|
|
expect(hasPayloadPanelAccess(adminUser)).toBe(true)
|
|
expect(hasPayloadPanelAccess(editorUser)).toBe(true)
|
|
expect(hasPayloadPanelAccess(dualRoleUser)).toBe(true)
|
|
expect(hasPayloadPanelAccess(usersMissingRoles)).toBe(false)
|
|
expect(hasPayloadPanelAccess(usersEmptyRoles)).toBe(false)
|
|
expect(hasPayloadPanelAccess(campaignCoordinator)).toBe(false)
|
|
})
|
|
|
|
it('canManagePublishedContent mirrors panel access', () => {
|
|
expect(canManagePublishedContent(accessArgs(adminUser))).toBe(true)
|
|
expect(canManagePublishedContent(accessArgs(editorUser))).toBe(true)
|
|
expect(canManagePublishedContent(accessArgs(usersEmptyRoles))).toBe(false)
|
|
expect(canManagePublishedContent(accessArgs(campaignCoordinator))).toBe(false)
|
|
expect(canManagePublishedContent(accessArgs(null))).toBe(false)
|
|
})
|
|
})
|