package buscompose

import (
	"testing"

	"git.novox.be/novox/mesh-sdk/go/catalogue"
	"git.novox.be/novox/mesh-sdk/go/membership"
)

// Design 47 G §58, §59, §91, §124: a state's `<state>-objects` store is its owner's alone, and a sent store is read, never
// written, by the modules it is for.
func TestStateObjectsAndSentStores(t *testing.T) {
	owner, err := PermissionsFor(Principal{Kind: KindModule, Node: "one", Module: "shop", Bound: []membership.BusBinding{
		{Local: "orders", Storage: catalogue.StorageKeyValue, Template: catalogue.TemplateState, Bucket: "shop_orders", Objects: "shop_orders-objects"}}})
	if err != nil {
		t.Fatal(err)
	}
	other, err := PermissionsFor(Principal{Kind: KindModule, Node: "one", Module: "bank"})
	if err != nil {
		t.Fatal(err)
	}
	for _, subject := range []string{"$O.shop_orders-objects.C.x", "$O.shop_orders-objects.M.x", "$JS.API.DIRECT.GET.OBJ_shop_orders-objects.x"} {
		if !MayPublish(owner, subject) {
			t.Errorf("the owner may not publish %s", subject)
		}
		if MayPublish(other, subject) {
			t.Errorf("another module may publish %s", subject)
		}
	}
	reader, err := PermissionsFor(Principal{Kind: KindModule, Node: "one", Module: "bank", ReadsObjects: []string{"shop_sent-objects"}})
	if err != nil {
		t.Fatal(err)
	}
	if !MayPublish(reader, "$JS.API.DIRECT.GET.OBJ_shop_sent-objects.x") || MayPublish(reader, "$O.shop_sent-objects.C.x") ||
		MayPublish(reader, "$JS.API.DIRECT.GET.OBJ_other_sent-objects.x") {
		t.Error("a reader of a sent store reads that one and writes none")
	}
}