webapp/bookstack
1
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2025-08-07 23:03:00 +03:00
Code Activity

Added a bunch of role content permissions

Browse Source
This commit is contained in:
Dan Brown
2022-12-17 19:46:48 +00:00
parent 491beee93e
commit 6a6f5e4d19
5 changed files with 173 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

72
dev/docs/permission-scenario-testing.md
View File

@@ -6,6 +6,64 @@ Test cases are written ability abstract, since all abilities should act the same
## Cases
TODO - User permissions
TODO - Role & entity-role interplay
TODO - entity-user permissions
TODO - entity-user & entity-role interplay
### Content Role Permissions
These are tests related to item/entity permissions that are set only at a role level.
#### test_01_allow
- Role A has role all-page permission.
- User has Role A.
User granted page permission.
#### test_02_deny
- Role A has no page permission.
- User has Role A.
User denied page permission.
#### test_10_allow_on_own_with_own
- Role A has role own-page permission.
- User has Role A.
- User is owner of page.
User granted page permission.
#### test_11_deny_on_other_with_own
- Role A has role own-page permission.
- User has Role A.
- User is not owner of page.
User denied page permission.
#### test_20_multiple_role_conflicting_all
- Role A has role all-page permission.
- Role B has no page permission.
- User has Role A & B.
User granted page permission.
#### test_21_multiple_role_conflicting_own
- Role A has role own-page permission.
- Role B has no page permission.
- User has Role A & B.
- User is owner of page.
User granted page permission.
---
### Entity Role Permissions
These are tests related to entity-level role-specific permission overrides.
@@ -16,7 +74,7 @@ These are tests related to entity-level role-specific permission overrides.
- Role A has entity allow page permission.
- User has Role A.
User should have page permission.
User granted page permission.
#### test_02_explicit_deny
@@ -33,7 +91,7 @@ User denied page permission.
- Role B has entity deny page permission.
- User has both Role A & B.
User should have page permission.
User granted page permission.
Explicit grant overrides entity deny at same level.
#### test_20_inherit_allow
@@ -41,16 +99,16 @@ Explicit grant overrides entity deny at same level.
- Page permissions have inherit enabled.
- Chapter permissions has inherit disabled.
- Role A has entity allow chapter permission.
- User has both Role A.
- User has Role A.
User should have page permission.
User granted page permission.
#### test_21_inherit_deny
- Page permissions have inherit enabled.
- Chapter permissions has inherit disabled.
- Role A has entity deny chapter permission.
- User has both Role A.
- User has Role A.
User denied page permission.
@@ -62,7 +120,7 @@ User denied page permission.
- Role B has entity allow chapter permission.
- User has both Role A & B.
User should have page permission.
User granted page permission.
#### test_30_child_inherit_override_allow
@@ -72,7 +130,7 @@ User should have page permission.
- Role A has entity allow page permission.
- User has Role A.
User should have page permission.
User granted page permission.
#### test_31_child_inherit_override_deny