admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
85 lines
3.0 KiB
TypeScript
85 lines
3.0 KiB
TypeScript
import { describe, it, expect } from 'vitest'
|
|
import { getPool, withUserContext } from './setup'
|
|
import { seedCompany } from './fixtures'
|
|
|
|
// categorize_calibration_samples (20260821100000): RLS via user_company_ids()
|
|
// on SELECT + INSERT only (append-only: no UPDATE/DELETE policy), the
|
|
// confidence CHECK [0,1], and company scoping on both read and write.
|
|
|
|
async function insertSample(
|
|
client: { query: (q: string, p: unknown[]) => Promise<{ rows: unknown[]; rowCount: number | null }> },
|
|
companyId: string,
|
|
confidence = 0.9,
|
|
) {
|
|
return client.query(
|
|
`INSERT INTO public.categorize_calibration_samples
|
|
(company_id, confidence, booked_account, was_correct)
|
|
VALUES ($1, $2, '5410', true) RETURNING id`,
|
|
[companyId, confidence],
|
|
)
|
|
}
|
|
|
|
describe('categorize_calibration_samples', () => {
|
|
it('lets a member insert and read their own company samples', async () => {
|
|
const { userId, companyId } = await seedCompany()
|
|
await withUserContext(userId, async (client) => {
|
|
await insertSample(client, companyId)
|
|
const { rows } = await client.query(
|
|
`SELECT company_id, was_correct FROM public.categorize_calibration_samples WHERE company_id = $1`,
|
|
[companyId],
|
|
)
|
|
expect(rows.length).toBe(1)
|
|
})
|
|
})
|
|
|
|
it('hides another company samples (RLS SELECT)', async () => {
|
|
const a = await seedCompany()
|
|
const b = await seedCompany()
|
|
await insertSample({ query: (q, p) => getPool().query(q, p) } as never, a.companyId)
|
|
await withUserContext(b.userId, async (client) => {
|
|
const { rows } = await client.query(
|
|
`SELECT id FROM public.categorize_calibration_samples WHERE company_id = $1`,
|
|
[a.companyId],
|
|
)
|
|
expect(rows.length).toBe(0)
|
|
})
|
|
})
|
|
|
|
it('refuses inserting a sample for another company (RLS WITH CHECK)', async () => {
|
|
const a = await seedCompany()
|
|
const b = await seedCompany()
|
|
await withUserContext(a.userId, async (client) => {
|
|
await expect(insertSample(client, b.companyId)).rejects.toThrow()
|
|
})
|
|
})
|
|
|
|
it('is append-only: UPDATE and DELETE affect zero rows', async () => {
|
|
const { userId, companyId } = await seedCompany()
|
|
await withUserContext(userId, async (client) => {
|
|
const { rows } = await insertSample(client, companyId)
|
|
const id = (rows[0] as { id: string }).id
|
|
const upd = await client.query(
|
|
`UPDATE public.categorize_calibration_samples SET was_correct = false WHERE id = $1`,
|
|
[id],
|
|
)
|
|
expect(upd.rowCount).toBe(0)
|
|
const del = await client.query(
|
|
`DELETE FROM public.categorize_calibration_samples WHERE id = $1`,
|
|
[id],
|
|
)
|
|
expect(del.rowCount).toBe(0)
|
|
})
|
|
})
|
|
|
|
it('enforces the confidence CHECK [0,1]', async () => {
|
|
const { companyId } = await seedCompany()
|
|
await expect(
|
|
getPool().query(
|
|
`INSERT INTO public.categorize_calibration_samples (company_id, confidence, booked_account, was_correct)
|
|
VALUES ($1, 2, '5410', true)`,
|
|
[companyId],
|
|
),
|
|
).rejects.toThrow()
|
|
})
|
|
})
|