@@ -1840,21 +1840,21 @@ func (s *MethodTestSuite) TestUser() {
1840
1840
s .Run ("InsertGitSSHKey" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1841
1841
u := testutil .Fake (s .T (),faker , database.User {})
1842
1842
arg := database.InsertGitSSHKeyParams {UserID :u .ID }
1843
- dbm .EXPECT ().InsertGitSSHKey (gomock .Any (),arg ).Return (database.GitSSHKey {},nil ).AnyTimes ()
1843
+ dbm .EXPECT ().InsertGitSSHKey (gomock .Any (),arg ).Return (database.GitSSHKey {UserID : u . ID },nil ).AnyTimes ()
1844
1844
check .Args (arg ).Asserts (u ,policy .ActionUpdatePersonal )
1845
1845
}))
1846
1846
s .Run ("UpdateGitSSHKey" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1847
1847
key := testutil .Fake (s .T (),faker , database.GitSSHKey {})
1848
1848
arg := database.UpdateGitSSHKeyParams {UserID :key .UserID ,UpdatedAt :key .UpdatedAt }
1849
1849
dbm .EXPECT ().GetGitSSHKey (gomock .Any (),key .UserID ).Return (key ,nil ).AnyTimes ()
1850
1850
dbm .EXPECT ().UpdateGitSSHKey (gomock .Any (),arg ).Return (key ,nil ).AnyTimes ()
1851
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( key . UserID ) ,policy .ActionUpdatePersonal ).Returns (key )
1851
+ check .Args (arg ).Asserts (key ,policy .ActionUpdatePersonal ).Returns (key )
1852
1852
}))
1853
1853
s .Run ("GetExternalAuthLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1854
1854
link := testutil .Fake (s .T (),faker , database.ExternalAuthLink {})
1855
1855
arg := database.GetExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID }
1856
1856
dbm .EXPECT ().GetExternalAuthLink (gomock .Any (),arg ).Return (link ,nil ).AnyTimes ()
1857
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionReadPersonal ).Returns (link )
1857
+ check .Args (arg ).Asserts (link ,policy .ActionReadPersonal ).Returns (link )
1858
1858
}))
1859
1859
s .Run ("InsertExternalAuthLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1860
1860
u := testutil .Fake (s .T (),faker , database.User {})
@@ -1867,21 +1867,21 @@ func (s *MethodTestSuite) TestUser() {
1867
1867
arg := database.UpdateExternalAuthLinkRefreshTokenParams {OAuthRefreshToken :"" ,OAuthRefreshTokenKeyID :"" ,ProviderID :link .ProviderID ,UserID :link .UserID ,UpdatedAt :link .UpdatedAt }
1868
1868
dbm .EXPECT ().GetExternalAuthLink (gomock .Any (), database.GetExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID }).Return (link ,nil ).AnyTimes ()
1869
1869
dbm .EXPECT ().UpdateExternalAuthLinkRefreshToken (gomock .Any (),arg ).Return (nil ).AnyTimes ()
1870
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionUpdatePersonal )
1870
+ check .Args (arg ).Asserts (link ,policy .ActionUpdatePersonal )
1871
1871
}))
1872
1872
s .Run ("UpdateExternalAuthLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1873
1873
link := testutil .Fake (s .T (),faker , database.ExternalAuthLink {})
1874
1874
arg := database.UpdateExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID ,OAuthAccessToken :link .OAuthAccessToken ,OAuthRefreshToken :link .OAuthRefreshToken ,OAuthExpiry :link .OAuthExpiry ,UpdatedAt :link .UpdatedAt }
1875
1875
dbm .EXPECT ().GetExternalAuthLink (gomock .Any (), database.GetExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID }).Return (link ,nil ).AnyTimes ()
1876
1876
dbm .EXPECT ().UpdateExternalAuthLink (gomock .Any (),arg ).Return (link ,nil ).AnyTimes ()
1877
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionUpdatePersonal ).Returns (link )
1877
+ check .Args (arg ).Asserts (link ,policy .ActionUpdatePersonal ).Returns (link )
1878
1878
}))
1879
1879
s .Run ("UpdateUserLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1880
1880
link := testutil .Fake (s .T (),faker , database.UserLink {})
1881
1881
arg := database.UpdateUserLinkParams {OAuthAccessToken :link .OAuthAccessToken ,OAuthRefreshToken :link .OAuthRefreshToken ,OAuthExpiry :link .OAuthExpiry ,UserID :link .UserID ,LoginType :link .LoginType ,Claims : database.UserLinkClaims {}}
1882
1882
dbm .EXPECT ().GetUserLinkByUserIDLoginType (gomock .Any (), database.GetUserLinkByUserIDLoginTypeParams {UserID :link .UserID ,LoginType :link .LoginType }).Return (link ,nil ).AnyTimes ()
1883
1883
dbm .EXPECT ().UpdateUserLink (gomock .Any (),arg ).Return (link ,nil ).AnyTimes ()
1884
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionUpdatePersonal ).Returns (link )
1884
+ check .Args (arg ).Asserts (link ,policy .ActionUpdatePersonal ).Returns (link )
1885
1885
}))
1886
1886
s .Run ("UpdateUserRoles" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1887
1887
u := testutil .Fake (s .T (),faker , database.User {RBACRoles : []string {codersdk .RoleTemplateAdmin }})
@@ -1952,6 +1952,7 @@ func (s *MethodTestSuite) TestUser() {
1952
1952
dbm .EXPECT ().UpdateCustomRole (gomock .Any (),arg ).Return (database.CustomRole {},nil ).AnyTimes ()
1953
1953
check .Args (arg ).Asserts (
1954
1954
rbac .ResourceAssignOrgRole .InOrg (orgID ),policy .ActionUpdate ,
1955
+ // Escalation checks
1955
1956
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionCreate ,
1956
1957
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionRead ,
1957
1958
)
@@ -1989,6 +1990,7 @@ func (s *MethodTestSuite) TestUser() {
1989
1990
dbm .EXPECT ().InsertCustomRole (gomock .Any (),arg ).Return (database.CustomRole {},nil ).AnyTimes ()
1990
1991
check .Args (arg ).Asserts (
1991
1992
rbac .ResourceAssignOrgRole .InOrg (orgID ),policy .ActionCreate ,
1993
+ // Escalation checks
1992
1994
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionCreate ,
1993
1995
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionRead ,
1994
1996
)