67b67b791e
* Changed before for beforeAll, refactored Bouncer tests. * Fixed linter errors. * fix: updates for SignatureBouncer tests and voucher construction
99 lines
3.0 KiB
JavaScript
99 lines
3.0 KiB
JavaScript
const { expectThrow } = require('../../helpers/expectThrow');
|
|
const expectEvent = require('../../helpers/expectEvent');
|
|
|
|
const RBACMock = artifacts.require('RBACMock');
|
|
|
|
require('chai')
|
|
.use(require('chai-as-promised'))
|
|
.should();
|
|
|
|
const ROLE_ADVISOR = 'advisor';
|
|
|
|
contract('RBAC', function (accounts) {
|
|
let mock;
|
|
|
|
const [
|
|
admin,
|
|
anyone,
|
|
futureAdvisor,
|
|
...advisors
|
|
] = accounts;
|
|
|
|
beforeEach(async () => {
|
|
mock = await RBACMock.new(advisors, { from: admin });
|
|
});
|
|
|
|
context('in normal conditions', () => {
|
|
it('allows admin to call #onlyAdminsCanDoThis', async () => {
|
|
await mock.onlyAdminsCanDoThis({ from: admin })
|
|
.should.be.fulfilled;
|
|
});
|
|
it('allows admin to call #onlyAdvisorsCanDoThis', async () => {
|
|
await mock.onlyAdvisorsCanDoThis({ from: admin })
|
|
.should.be.fulfilled;
|
|
});
|
|
it('allows advisors to call #onlyAdvisorsCanDoThis', async () => {
|
|
await mock.onlyAdvisorsCanDoThis({ from: advisors[0] })
|
|
.should.be.fulfilled;
|
|
});
|
|
it('allows admin to call #eitherAdminOrAdvisorCanDoThis', async () => {
|
|
await mock.eitherAdminOrAdvisorCanDoThis({ from: admin })
|
|
.should.be.fulfilled;
|
|
});
|
|
it('allows advisors to call #eitherAdminOrAdvisorCanDoThis', async () => {
|
|
await mock.eitherAdminOrAdvisorCanDoThis({ from: advisors[0] })
|
|
.should.be.fulfilled;
|
|
});
|
|
it('does not allow admins to call #nobodyCanDoThis', async () => {
|
|
await expectThrow(
|
|
mock.nobodyCanDoThis({ from: admin })
|
|
);
|
|
});
|
|
it('does not allow advisors to call #nobodyCanDoThis', async () => {
|
|
await expectThrow(
|
|
mock.nobodyCanDoThis({ from: advisors[0] })
|
|
);
|
|
});
|
|
it('does not allow anyone to call #nobodyCanDoThis', async () => {
|
|
await expectThrow(
|
|
mock.nobodyCanDoThis({ from: anyone })
|
|
);
|
|
});
|
|
it('allows an admin to remove an advisor\'s role', async () => {
|
|
await mock.removeAdvisor(advisors[0], { from: admin })
|
|
.should.be.fulfilled;
|
|
});
|
|
it('allows admins to #adminRemoveRole', async () => {
|
|
await mock.adminRemoveRole(advisors[3], ROLE_ADVISOR, { from: admin })
|
|
.should.be.fulfilled;
|
|
});
|
|
|
|
it('announces a RoleAdded event on addRole', async () => {
|
|
await expectEvent.inTransaction(
|
|
mock.adminAddRole(futureAdvisor, ROLE_ADVISOR, { from: admin }),
|
|
'RoleAdded'
|
|
);
|
|
});
|
|
|
|
it('announces a RoleRemoved event on removeRole', async () => {
|
|
await expectEvent.inTransaction(
|
|
mock.adminRemoveRole(futureAdvisor, ROLE_ADVISOR, { from: admin }),
|
|
'RoleRemoved'
|
|
);
|
|
});
|
|
});
|
|
|
|
context('in adversarial conditions', () => {
|
|
it('does not allow an advisor to remove another advisor', async () => {
|
|
await expectThrow(
|
|
mock.removeAdvisor(advisors[1], { from: advisors[0] })
|
|
);
|
|
});
|
|
it('does not allow "anyone" to remove an advisor', async () => {
|
|
await expectThrow(
|
|
mock.removeAdvisor(advisors[0], { from: anyone })
|
|
);
|
|
});
|
|
});
|
|
});
|