dborkan
commented
9 years ago We will also want tests to verify that Firebase permissions continue working as intended. These test cases have all been manually verified, but it would be good to have tests:
- I can't write to users inboxes who aren't my friends
- I can't write to a users inbox meant for another friend
- I can't see clients of users who aren't my friends
- I can only write to my own clientStates
- I can't read another users list of friends (even if they are my friend)
- I can't read messages sent from one user to another, even for friends
- I can't see who my friends are friends with
Ideally we should be able to just run existing social provider unit/integration tests, but some level of rigging up will presumably be required.