fix(permissions): validate network access flow
This commit is contained in:
@ -45,7 +45,7 @@ fn update_project_system_permissions_request_deserializes_allow_deny_ask() {
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn resolved_agent_system_permissions_dto_carries_runtime_lock_and_read_only_control() {
|
||||
fn resolved_agent_system_permissions_dto_separates_wanted_control_from_runtime_control() {
|
||||
let dto = ResolvedAgentSystemPermissionsDto(ResolvedAgentSystemPermissions {
|
||||
wanted: Some(NetworkPolicy::Allow),
|
||||
effective: NetworkPolicy::Deny,
|
||||
@ -55,8 +55,12 @@ fn resolved_agent_system_permissions_dto_carries_runtime_lock_and_read_only_cont
|
||||
reason: Some("not inspectable".to_owned()),
|
||||
},
|
||||
control: SystemPermissionControl {
|
||||
mode: SystemPermissionControlMode::Editable,
|
||||
reason: None,
|
||||
},
|
||||
runtime_control: SystemPermissionControl {
|
||||
mode: SystemPermissionControlMode::ReadOnly,
|
||||
reason: Some("not editable".to_owned()),
|
||||
reason: Some("runtime not editable".to_owned()),
|
||||
},
|
||||
});
|
||||
|
||||
@ -65,5 +69,6 @@ fn resolved_agent_system_permissions_dto_carries_runtime_lock_and_read_only_cont
|
||||
assert_eq!(value["wanted"], "allow");
|
||||
assert_eq!(value["effective"], "deny");
|
||||
assert_eq!(value["runtimeLock"]["state"], "locked");
|
||||
assert_eq!(value["control"]["mode"], "readOnly");
|
||||
assert_eq!(value["control"]["mode"], "editable");
|
||||
assert_eq!(value["runtimeControl"]["mode"], "readOnly");
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user