GEWIS / sudosos-backend

SudoSOS is a Node.js-based Bar and POS system made for study association GEWIS.
https://sudosos.gewis.nl
GNU Affero General Public License v3.0
6 stars 3 forks source link

Production RBAC roles and permissions are not tested #166

Open JustSamuel opened 5 months ago

JustSamuel commented 5 months ago

In the test suite we define roles with permissions per file, which means the actual roles and permission used in production are not tested.

Not tested here means that we never check that a LOCAL_USER should have the rights in production to update their own mail, or preferences.

To fix this we should load the production RBAC in the test suite and rewrite some cases.