CT-1402 - test fix and test also componentAccess

keboola · Apr 30, 2024 · f15df6d · f15df6d
1 parent 68def4a
commit f15df6d
Showing 1 changed file with 22 additions and 2 deletions.
diff --git a/tests/ProjectsTest.php b/tests/ProjectsTest.php
@@ -6,6 +6,7 @@
 use Keboola\ManageApi\Backend;
 use Keboola\ManageApi\Client;
 use Keboola\ManageApi\ClientException;
+use Keboola\ManageApi\Exception;
 use Keboola\ManageApi\ProjectRole;
 use Keboola\StorageApi\ClientException as StorageApiClientException;
 use Keboola\StorageApi\Options\ListFilesOptions;
@@ -1149,7 +1150,7 @@ public function testCreateProjectStorageTokenWithBucketPermissions()
         $this->assertEquals([$newBucketId => 'read'], $verified['bucketPermissions']);
     }
 
-    public function testCreateProjectStorageTokenWithMangeTokensPermission()
+    public function testCreateProjectStorageTokenWithMangeTokensPermissionAndComponentAccess()
     {
         $organization = $this->client->createOrganization($this->testMaintainerId, [
             'name' => 'My org',
@@ -1159,11 +1160,29 @@ public function testCreateProjectStorageTokenWithMangeTokensPermission()
             'name' => 'My test',
         ]);
 
+        try {
+            // new token with canManageTokens
+            $this->client->createProjectStorageToken($project['id'], [
+                'description' => 'test',
+                'expiresIn' => 60,
+                'canManageBuckets' => true,
+                'canReadAllFileUploads' => true,
+                'canManageTokens' => true,
+            ]);
+            $this->fail('Should fail.');
+        } catch (ClientException $e) {
+            $this->assertEquals(400, $e->getCode());
+            $this->assertEquals('CanManageTokens is not allowed.', $e->getMessage());
+        }
+
+        $requestedComponents = ['component1', 'component2', 'component3'];
+
         $token = $this->client->createProjectStorageToken($project['id'], [
             'description' => 'test',
             'expiresIn' => 60,
             'canManageBuckets' => true,
             'canReadAllFileUploads' => true,
+            'componentAccess' => $requestedComponents,
         ]);
 
         $client = $this->getStorageClient([
@@ -1174,8 +1193,9 @@ public function testCreateProjectStorageTokenWithMangeTokensPermission()
         $verified = $client->verifyToken();
         $this->assertEquals($project['id'], $verified['owner']['id']);
         $this->assertTrue($verified['canManageBuckets']);
-        $this->assertTrue($verified['canManageTokens']);
+        $this->assertFalse($verified['canManageTokens']);
         $this->assertTrue($verified['canReadAllFileUploads']);
+        $this->assertEquals($requestedComponents, $verified['componentAccess']);
     }
 
     public function testSuperAdminCanDisableAndEnableProject()