完善审计日志展示与导出权限
This commit is contained in:
@@ -29,6 +29,19 @@ describe("admin project route permissions", () => {
|
||||
expect(source).toContain("studyStore.currentPermissions?.[role]?.[operationKey]");
|
||||
});
|
||||
|
||||
it("checks admin project permissions against query project id when present", () => {
|
||||
const source = readRouter();
|
||||
const accessStart = source.indexOf("const ensureAdminProjectAccess");
|
||||
const accessEnd = source.indexOf("const ensureRouteProjectMember", accessStart);
|
||||
const accessBlock = source.slice(accessStart, accessEnd);
|
||||
|
||||
expect(accessBlock).toContain("const targetProjectId = getTargetProjectId(to);");
|
||||
expect(accessBlock).toContain("studyStore.currentStudy?.id !== targetProjectId");
|
||||
expect(accessBlock).toContain("fetchStudyDetail(targetProjectId)");
|
||||
expect(accessBlock).toContain("fetchApiEndpointPermissions(targetProjectId)");
|
||||
expect(accessBlock).not.toContain("typeof to.params.projectId");
|
||||
});
|
||||
|
||||
it("guards project permission configuration with the system-level project config permission", () => {
|
||||
const source = readRouter();
|
||||
const projectPermissionRouteStart = source.indexOf('name: "AdminPermissionsProject"');
|
||||
|
||||
Reference in New Issue
Block a user