dify

dify/web/utils/permission.spec.ts

@@ -0,0 +1,95 @@
+/**
+ * Test suite for permission utility functions
+ * Tests dataset edit permission logic based on user roles and dataset settings
+ */
+import { hasEditPermissionForDataset } from './permission'
+import { DatasetPermission } from '@/models/datasets'
+
+describe('permission', () => {
+  /**
+   * Tests hasEditPermissionForDataset which checks if a user can edit a dataset
+   * Based on three permission levels:
+   * - onlyMe: Only the creator can edit
+   * - allTeamMembers: All team members can edit
+   * - partialMembers: Only specified members can edit
+   */
+  describe('hasEditPermissionForDataset', () => {
+    const userId = 'user-123'
+    const creatorId = 'creator-456'
+    const otherUserId = 'user-789'
+
+    test('returns true when permission is onlyMe and user is creator', () => {
+      const config = {
+        createdBy: userId,
+        partialMemberList: [],
+        permission: DatasetPermission.onlyMe,
+      }
+      expect(hasEditPermissionForDataset(userId, config)).toBe(true)
+    })
+
+    test('returns false when permission is onlyMe and user is not creator', () => {
+      const config = {
+        createdBy: creatorId,
+        partialMemberList: [],
+        permission: DatasetPermission.onlyMe,
+      }
+      expect(hasEditPermissionForDataset(userId, config)).toBe(false)
+    })
+
+    test('returns true when permission is allTeamMembers for any user', () => {
+      const config = {
+        createdBy: creatorId,
+        partialMemberList: [],
+        permission: DatasetPermission.allTeamMembers,
+      }
+      expect(hasEditPermissionForDataset(userId, config)).toBe(true)
+      expect(hasEditPermissionForDataset(otherUserId, config)).toBe(true)
+      expect(hasEditPermissionForDataset(creatorId, config)).toBe(true)
+    })
+
+    test('returns true when permission is partialMembers and user is in list', () => {
+      const config = {
+        createdBy: creatorId,
+        partialMemberList: [userId, otherUserId],
+        permission: DatasetPermission.partialMembers,
+      }
+      expect(hasEditPermissionForDataset(userId, config)).toBe(true)
+    })
+
+    test('returns false when permission is partialMembers and user is not in list', () => {
+      const config = {
+        createdBy: creatorId,
+        partialMemberList: [otherUserId],
+        permission: DatasetPermission.partialMembers,
+      }
+      expect(hasEditPermissionForDataset(userId, config)).toBe(false)
+    })
+
+    test('returns false when permission is partialMembers with empty list', () => {
+      const config = {
+        createdBy: creatorId,
+        partialMemberList: [],
+        permission: DatasetPermission.partialMembers,
+      }
+      expect(hasEditPermissionForDataset(userId, config)).toBe(false)
+    })
+
+    test('creator is not automatically granted access with partialMembers permission', () => {
+      const config = {
+        createdBy: creatorId,
+        partialMemberList: [userId],
+        permission: DatasetPermission.partialMembers,
+      }
+      expect(hasEditPermissionForDataset(creatorId, config)).toBe(false)
+    })
+
+    test('creator has access when included in partialMemberList', () => {
+      const config = {
+        createdBy: creatorId,
+        partialMemberList: [creatorId, userId],
+        permission: DatasetPermission.partialMembers,
+      }
+      expect(hasEditPermissionForDataset(creatorId, config)).toBe(true)
+    })
+  })
+})