jschoubben
bc1857ec73
Builds: design 47 G §560, A-77, A-92 Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h
35 lines
1.1 KiB
Go
35 lines
1.1 KiB
Go
package buscompose
|
|
|
|
import "testing"
|
|
|
|
// Design 47 G A-77, A-92: the node-engine's account is granted the state bounds, to write a bound key with its time to live,
|
|
// to delete it, and to watch it for the bus's marker; and no other node-engine state or module's bucket by that grant.
|
|
func TestTheNodeEngineIsGrantedItsBoundsState(t *testing.T) {
|
|
users, err := Users(Records{Nodes: []string{"one"}, Engine: &Declared{Module: EngineModule}})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
var node Principal
|
|
for _, u := range users {
|
|
if u.Kind == KindNode {
|
|
node = u
|
|
}
|
|
}
|
|
perms, err := PermissionsFor(node)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for _, want := range []string{
|
|
"$KV.mesh-host_bounds.recovery.act-1", "$JS.API.STREAM.INFO.KV_mesh-host_bounds",
|
|
"$JS.API.CONSUMER.CREATE.KV_mesh-host_bounds.*.$KV.mesh-host_bounds.recovery.act-1",
|
|
"$JS.API.CONSUMER.DELETE.KV_mesh-host_bounds.x",
|
|
} {
|
|
if !MayPublish(perms, want) {
|
|
t.Errorf("the node-engine of one may not publish %s", want)
|
|
}
|
|
}
|
|
if MayPublish(perms, "$KV.other_bounds.recovery.act-1") {
|
|
t.Error("the node-engine of one may publish another module's bounds")
|
|
}
|
|
}
|