a55655a61a
Extended the account ownership transfer tests and implemented several updates. This includes transferring the ownership only to an existing account member, sorting team members based on role hierarchy and whether a member is the primary owner. In the permissions check, prevented non-members from creating invitations and enhanced the styling of role badges depending on if they are custom or not.
80 lines
3.4 KiB
PL/PgSQL
80 lines
3.4 KiB
PL/PgSQL
begin;
|
|
create extension "basejump-supabase_test_helpers" version '0.0.6';
|
|
|
|
select no_plan();
|
|
|
|
-- test
|
|
|
|
select makerkit.set_identifier('test', 'test@makerkit.dev');
|
|
select makerkit.set_identifier('member', 'member@makerkit.dev');
|
|
select makerkit.set_identifier('custom', 'custom@makerkit.dev');
|
|
|
|
select tests.authenticate_as('test');
|
|
|
|
select lives_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite1@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'member', gen_random_uuid()); $$,
|
|
'owner should be able to create invitations'
|
|
);
|
|
|
|
-- check two invitations to the same email/account are not allowed
|
|
select throws_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite1@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'member', gen_random_uuid()) $$,
|
|
'duplicate key value violates unique constraint "invitations_email_account_id_key"'
|
|
);
|
|
|
|
select tests.authenticate_as('member');
|
|
|
|
-- check a member cannot invite members with higher roles
|
|
select throws_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite2@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'owner', gen_random_uuid()) $$,
|
|
'new row violates row-level security policy for table "invitations"'
|
|
);
|
|
|
|
-- check a member can invite members with the same or lower roles
|
|
select lives_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite2@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'member', gen_random_uuid()) $$,
|
|
'member should be able to create invitations for members or lower roles'
|
|
);
|
|
|
|
-- authenticate_as the custom role
|
|
select tests.authenticate_as('custom');
|
|
|
|
-- it will fail because the custom role does not have the invites.manage permission
|
|
select throws_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite3@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'custom-role', gen_random_uuid()) $$,
|
|
'new row violates row-level security policy for table "invitations"'
|
|
);
|
|
|
|
set local role postgres;
|
|
|
|
-- add permissions to invite members to the custom role
|
|
insert into public.role_permissions (role, permission) values ('custom-role', 'invites.manage');
|
|
|
|
-- authenticate_as the custom role
|
|
select tests.authenticate_as('custom');
|
|
|
|
select lives_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite3@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'custom-role', gen_random_uuid()) $$,
|
|
'custom role should be able to create invitations'
|
|
);
|
|
|
|
-- Foreigners should not be able to create invitations
|
|
|
|
select tests.create_supabase_user('user');
|
|
|
|
select tests.authenticate_as('user');
|
|
|
|
-- it will fail because the user is not a member of the account
|
|
select throws_ok(
|
|
$$ insert into public.invitations (email, invited_by, account_id, role, invite_token) values ('invite4@makerkit.dev', auth.uid(), makerkit.get_account_id_by_slug('makerkit'), 'member', gen_random_uuid()) $$,
|
|
'new row violates row-level security policy for table "invitations"'
|
|
);
|
|
|
|
select is_empty($$
|
|
select * from public.invitations where account_id = makerkit.get_account_id_by_slug('makerkit') $$,
|
|
'no invitations should be listed'
|
|
);
|
|
|
|
select * from finish();
|
|
|
|
rollback; |