logikonline
12f4ea03a8
Some checks failed
Build and Release / Create Release (push) Successful in 0s
Trigger Vault Plugin Rebuild / Trigger Vault Rebuild (push) Successful in 0s
Build and Release / Integration Tests (PostgreSQL) (push) Successful in 2m48s
Build and Release / Lint (push) Failing after 5m2s
Build and Release / Build Binaries (amd64, windows, windows-latest) (push) Has been skipped
Build and Release / Build Binaries (amd64, darwin, linux-latest) (push) Has been skipped
Build and Release / Build Binaries (amd64, linux, linux-latest) (push) Has been skipped
Build and Release / Build Binaries (arm64, darwin, linux-latest) (push) Has been skipped
Build and Release / Build Binaries (arm64, linux, linux-latest) (push) Has been skipped
Build and Release / Unit Tests (push) Successful in 5m37s
Go's semantic import versioning requires v2+ modules to include the major version in the module path. This enables using proper version tags (v3.x.x) instead of pseudo-versions. Updated module path: code.gitcaddy.com/server/v3
62 lines
1.8 KiB
Go
62 lines
1.8 KiB
Go
// Copyright 2023 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package integration
|
|
|
|
import (
|
|
"net/http"
|
|
"slices"
|
|
"testing"
|
|
|
|
unit_model "code.gitcaddy.com/server/v3/models/unit"
|
|
"code.gitcaddy.com/server/v3/tests"
|
|
)
|
|
|
|
func TestOrgProjectAccess(t *testing.T) {
|
|
defer tests.PrepareTestEnv(t)()
|
|
|
|
disabledRepoUnits := unit_model.DisabledRepoUnitsGet()
|
|
unit_model.DisabledRepoUnitsSet(append(slices.Clone(disabledRepoUnits), unit_model.TypeProjects))
|
|
defer unit_model.DisabledRepoUnitsSet(disabledRepoUnits)
|
|
|
|
// repo project, 404
|
|
req := NewRequest(t, "GET", "/user2/repo1/projects")
|
|
MakeRequest(t, req, http.StatusNotFound)
|
|
|
|
// user project, 200
|
|
req = NewRequest(t, "GET", "/user2/-/projects")
|
|
MakeRequest(t, req, http.StatusOK)
|
|
|
|
// org project, 200
|
|
req = NewRequest(t, "GET", "/org3/-/projects")
|
|
MakeRequest(t, req, http.StatusOK)
|
|
|
|
// change the org's visibility to private
|
|
session := loginUser(t, "user2")
|
|
req = NewRequestWithValues(t, "POST", "/org/org3/settings", map[string]string{
|
|
"name": "org3",
|
|
"visibility": "2",
|
|
})
|
|
session.MakeRequest(t, req, http.StatusSeeOther)
|
|
|
|
// user4 can still access the org's project because its team(team1) has the permission
|
|
session = loginUser(t, "user4")
|
|
req = NewRequest(t, "GET", "/org3/-/projects")
|
|
session.MakeRequest(t, req, http.StatusOK)
|
|
|
|
// disable team1's project unit
|
|
session = loginUser(t, "user2")
|
|
req = NewRequestWithValues(t, "POST", "/org/org3/teams/team1/edit", map[string]string{
|
|
"team_name": "team1",
|
|
"repo_access": "specific",
|
|
"permission": "read",
|
|
"unit_8": "0",
|
|
})
|
|
session.MakeRequest(t, req, http.StatusSeeOther)
|
|
|
|
// user4 can no longer access the org's project
|
|
session = loginUser(t, "user4")
|
|
req = NewRequest(t, "GET", "/org3/-/projects")
|
|
session.MakeRequest(t, req, http.StatusNotFound)
|
|
}
|