134 lines
4.5 KiB
JavaScript
134 lines
4.5 KiB
JavaScript
import * as Factory from '../lib/factory.js'
|
|
import * as Collaboration from '../lib/Collaboration.js'
|
|
|
|
chai.use(chaiAsPromised)
|
|
const expect = chai.expect
|
|
|
|
describe('shared vault permissions', function () {
|
|
this.timeout(Factory.TwentySecondTimeout)
|
|
|
|
let context
|
|
|
|
beforeEach(async function () {
|
|
localStorage.clear()
|
|
|
|
context = await Factory.createVaultsContextWithRealCrypto()
|
|
|
|
await context.launch()
|
|
await context.register()
|
|
})
|
|
|
|
afterEach(async function () {
|
|
await context.deinit()
|
|
localStorage.clear()
|
|
sinon.restore()
|
|
context = undefined
|
|
})
|
|
|
|
it('non-admin user should not be able to invite user', async () => {
|
|
context.anticipateConsoleError('Could not create invite')
|
|
|
|
const { sharedVault, contactContext, deinitContactContext } =
|
|
await Collaboration.createSharedVaultWithAcceptedInviteAndNote(context)
|
|
|
|
const thirdParty = await Collaboration.createContactContext()
|
|
const thirdPartyContact = await Collaboration.createTrustedContactForUserOfContext(
|
|
contactContext,
|
|
thirdParty.contactContext,
|
|
)
|
|
const result = await contactContext.vaultInvites.inviteContactToSharedVault(
|
|
sharedVault,
|
|
thirdPartyContact,
|
|
SharedVaultUserPermission.PERMISSIONS.Write,
|
|
)
|
|
|
|
expect(result.isFailed()).to.be.true
|
|
|
|
await thirdParty.deinitContactContext()
|
|
|
|
await deinitContactContext()
|
|
})
|
|
|
|
it('should not be able to leave shared vault as creator', async () => {
|
|
context.anticipateConsoleError('Could not delete user')
|
|
|
|
const sharedVault = await Collaboration.createSharedVault(context)
|
|
|
|
const result = await context.vaultUsers.removeUserFromSharedVault(sharedVault, context.userUuid)
|
|
expect(result.isFailed()).to.be.true
|
|
})
|
|
|
|
it('should be able to leave shared vault as added admin', async () => {
|
|
const { contactVault, contactContext, deinitContactContext } =
|
|
await Collaboration.createSharedVaultWithAcceptedInvite(context, SharedVaultUserPermission.PERMISSIONS.Admin)
|
|
|
|
const result = await contactContext.vaultUsers.leaveSharedVault(contactVault)
|
|
|
|
expect(isClientDisplayableError(result)).to.be.false
|
|
|
|
await deinitContactContext()
|
|
})
|
|
|
|
it('non-admin user should not be able to create or update vault items keys with the server', async () => {
|
|
const { sharedVault, contactContext, deinitContactContext } =
|
|
await Collaboration.createSharedVaultWithAcceptedInvite(context)
|
|
|
|
const keySystemItemsKey = contactContext.keys.getKeySystemItemsKeys(sharedVault.systemIdentifier)[0]
|
|
|
|
await contactContext.mutator.changeItem(keySystemItemsKey, () => {})
|
|
const promise = contactContext.resolveWithConflicts()
|
|
await contactContext.sync()
|
|
|
|
const conflicts = await promise
|
|
|
|
expect(conflicts.length).to.equal(1)
|
|
expect(conflicts[0].unsaved_item.content_type).to.equal(ContentType.TYPES.KeySystemItemsKey)
|
|
|
|
await deinitContactContext()
|
|
})
|
|
|
|
it('read user should not be able to make changes to items', async () => {
|
|
const { sharedVault, contactContext, deinitContactContext } =
|
|
await Collaboration.createSharedVaultWithAcceptedInvite(context, SharedVaultUserPermission.PERMISSIONS.Read)
|
|
const note = await context.createSyncedNote('foo', 'bar')
|
|
await Collaboration.moveItemToVault(context, sharedVault, note)
|
|
await contactContext.sync()
|
|
|
|
await contactContext.mutator.changeItem({ uuid: note.uuid }, (mutator) => {
|
|
mutator.title = 'new title'
|
|
})
|
|
|
|
const promise = contactContext.resolveWithConflicts()
|
|
await contactContext.sync()
|
|
const conflicts = await promise
|
|
|
|
expect(conflicts.length).to.equal(1)
|
|
expect(conflicts[0].unsaved_item.content_type).to.equal(ContentType.TYPES.Note)
|
|
|
|
await deinitContactContext()
|
|
})
|
|
|
|
it('should be able to move item from vault to user as a write user if the item belongs to me', async () => {
|
|
const { sharedVault, contactContext, deinitContactContext } =
|
|
await Collaboration.createSharedVaultWithAcceptedInvite(context)
|
|
|
|
const note = await contactContext.createSyncedNote('foo', 'bar')
|
|
await Collaboration.moveItemToVault(contactContext, sharedVault, note)
|
|
await contactContext.sync()
|
|
|
|
const promise = contactContext.resolveWithConflicts()
|
|
await contactContext.vaults.removeItemFromVault(note)
|
|
const conflicts = await promise
|
|
|
|
expect(conflicts.length).to.equal(0)
|
|
|
|
const duplicateNote = contactContext.findDuplicateNote(note.uuid)
|
|
expect(duplicateNote).to.be.undefined
|
|
|
|
const existingNote = contactContext.items.findItem(note.uuid)
|
|
expect(existingNote.key_system_identifier).to.not.be.ok
|
|
|
|
await deinitContactContext()
|
|
})
|
|
})
|