4195697b54
New test files for database functionalities like transfer of ownership, schema conditions, and updating roles have been added. Changes have also been made in the schema.sql file for checking the role hierarchy levels and updating rules for permissions. Modifications in account permissions test have also been performed for more accuracy.
63 lines
2.8 KiB
PL/PgSQL
63 lines
2.8 KiB
PL/PgSQL
begin;
|
|
create extension "basejump-supabase_test_helpers" version '0.0.6';
|
|
|
|
select no_plan();
|
|
|
|
-- test
|
|
|
|
select makerkit.set_identifier('test', 'test@makerkit.dev');
|
|
select makerkit.set_identifier('member', 'member@makerkit.dev');
|
|
select makerkit.set_identifier('custom', 'custom@makerkit.dev');
|
|
|
|
select tests.authenticate_as('test');
|
|
|
|
select lives_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite1@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'member', gen_random_uuid()); $$,
|
|
'owner should be able to create invitations'
|
|
);
|
|
|
|
-- check two invitations to the same email/account are not allowed
|
|
select throws_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite1@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'member', gen_random_uuid()) $$,
|
|
'duplicate key value violates unique constraint "invitations_email_account_id_key"'
|
|
);
|
|
|
|
select tests.authenticate_as('member');
|
|
|
|
-- check a member cannot invite members with higher roles
|
|
select throws_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite2@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'owner', gen_random_uuid()) $$,
|
|
'new row violates row-level security policy for table "invitations"'
|
|
);
|
|
|
|
-- check a member can invite members with the same or lower roles
|
|
select lives_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite2@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'member', gen_random_uuid()) $$,
|
|
'member should be able to create invitations for members or lower roles'
|
|
);
|
|
|
|
-- authenticate_as the custom role
|
|
select tests.authenticate_as('custom');
|
|
|
|
-- it will fail because the custom role does not have the invites.manage permission
|
|
select throws_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite3@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'custom-role', gen_random_uuid()) $$,
|
|
'new row violates row-level security policy for table "invitations"'
|
|
);
|
|
|
|
set local role postgres;
|
|
|
|
-- add permissions to invite members to the custom role
|
|
insert into public.role_permissions (role, permission) values ('custom-role', 'invites.manage');
|
|
|
|
-- authenticate_as the custom role
|
|
select tests.authenticate_as('custom');
|
|
|
|
select lives_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite3@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'custom-role', gen_random_uuid()) $$,
|
|
'custom role should be able to create invitations'
|
|
);
|
|
|
|
select * from finish();
|
|
|
|
rollback; |