internal: incomplete vault systems behind feature flag (#2340)

packages/snjs/mocha/vaults/permissions.test.js

@@ -0,0 +1,133 @@
+import * as Factory from '../lib/factory.js'
+import * as Collaboration from '../lib/Collaboration.js'
+
+chai.use(chaiAsPromised)
+const expect = chai.expect
+
+describe('shared vault permissions', function () {
+  this.timeout(Factory.TwentySecondTimeout)
+
+  let context
+  let sharedVaults
+
+  afterEach(async function () {
+    await context.deinit()
+    localStorage.clear()
+  })
+
+  beforeEach(async function () {
+    localStorage.clear()
+
+    context = await Factory.createAppContextWithRealCrypto()
+
+    await context.launch()
+    await context.register()
+
+    sharedVaults = context.sharedVaults
+  })
+
+  it('non-admin user should not be able to invite user', async () => {
+    context.anticipateConsoleError('Could not create invite')
+
+    const { sharedVault, contactContext, deinitContactContext } =
+      await Collaboration.createSharedVaultWithAcceptedInviteAndNote(context)
+
+    const thirdParty = await Collaboration.createContactContext()
+    const thirdPartyContact = await Collaboration.createTrustedContactForUserOfContext(
+      contactContext,
+      thirdParty.contactContext,
+    )
+    const result = await contactContext.sharedVaults.inviteContactToSharedVault(
+      sharedVault,
+      thirdPartyContact,
+      SharedVaultPermission.Write,
+    )
+
+    expect(isClientDisplayableError(result)).to.be.true
+
+    await deinitContactContext()
+  })
+
+  it('should not be able to leave shared vault as creator', async () => {
+    context.anticipateConsoleError('Could not delete user')
+
+    const sharedVault = await Collaboration.createSharedVault(context)
+
+    const result = await sharedVaults.removeUserFromSharedVault(sharedVault, context.userUuid)
+
+    expect(isClientDisplayableError(result)).to.be.true
+  })
+
+  it('should be able to leave shared vault as added admin', async () => {
+    const { contactVault, contactContext, deinitContactContext } =
+      await Collaboration.createSharedVaultWithAcceptedInvite(context, SharedVaultPermission.Admin)
+
+    const result = await contactContext.sharedVaults.leaveSharedVault(contactVault)
+
+    expect(isClientDisplayableError(result)).to.be.false
+
+    await deinitContactContext()
+  })
+
+  it('non-admin user should not be able to create or update vault items keys with the server', async () => {
+    const { sharedVault, contactContext, deinitContactContext } =
+      await Collaboration.createSharedVaultWithAcceptedInvite(context)
+
+    const keySystemItemsKey = contactContext.keys.getKeySystemItemsKeys(sharedVault.systemIdentifier)[0]
+
+    await contactContext.mutator.changeItem(keySystemItemsKey, () => {})
+    const promise = contactContext.resolveWithConflicts()
+    await contactContext.sync()
+
+    const conflicts = await promise
+
+    expect(conflicts.length).to.equal(1)
+    expect(conflicts[0].unsaved_item.content_type).to.equal(ContentType.KeySystemItemsKey)
+
+    await deinitContactContext()
+  })
+
+  it('read user should not be able to make changes to items', async () => {
+    const { sharedVault, contactContext, deinitContactContext } =
+      await Collaboration.createSharedVaultWithAcceptedInvite(context, SharedVaultPermission.Read)
+    const note = await context.createSyncedNote('foo', 'bar')
+    await Collaboration.moveItemToVault(context, sharedVault, note)
+    await contactContext.sync()
+
+    await contactContext.mutator.changeItem({ uuid: note.uuid }, (mutator) => {
+      mutator.title = 'new title'
+    })
+
+    const promise = contactContext.resolveWithConflicts()
+    await contactContext.sync()
+    const conflicts = await promise
+
+    expect(conflicts.length).to.equal(1)
+    expect(conflicts[0].unsaved_item.content_type).to.equal(ContentType.Note)
+
+    await deinitContactContext()
+  })
+
+  it('should be able to move item from vault to user as a write user if the item belongs to me', async () => {
+    const { sharedVault, contactContext, deinitContactContext } =
+      await Collaboration.createSharedVaultWithAcceptedInvite(context)
+
+    const note = await contactContext.createSyncedNote('foo', 'bar')
+    await Collaboration.moveItemToVault(contactContext, sharedVault, note)
+    await contactContext.sync()
+
+    const promise = contactContext.resolveWithConflicts()
+    await contactContext.vaults.removeItemFromVault(note)
+    const conflicts = await promise
+
+    expect(conflicts.length).to.equal(0)
+
+    const duplicateNote = contactContext.findDuplicateNote(note.uuid)
+    expect(duplicateNote).to.be.undefined
+
+    const existingNote = contactContext.items.findItem(note.uuid)
+    expect(existingNote.key_system_identifier).to.not.be.ok
+
+    await deinitContactContext()
+  })
+})