@@ -1413,21 +1413,21 @@ func (s *MethodTestSuite) TestUser() {
1413
1413
s .Run ("InsertGitSSHKey" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1414
1414
u := testutil .Fake (s .T (),faker , database.User {})
1415
1415
arg := database.InsertGitSSHKeyParams {UserID :u .ID }
1416
- dbm .EXPECT ().InsertGitSSHKey (gomock .Any (),arg ).Return (database.GitSSHKey {},nil ).AnyTimes ()
1416
+ dbm .EXPECT ().InsertGitSSHKey (gomock .Any (),arg ).Return (database.GitSSHKey {UserID : u . ID },nil ).AnyTimes ()
1417
1417
check .Args (arg ).Asserts (u ,policy .ActionUpdatePersonal )
1418
1418
}))
1419
1419
s .Run ("UpdateGitSSHKey" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1420
1420
key := testutil .Fake (s .T (),faker , database.GitSSHKey {})
1421
1421
arg := database.UpdateGitSSHKeyParams {UserID :key .UserID ,UpdatedAt :key .UpdatedAt }
1422
1422
dbm .EXPECT ().GetGitSSHKey (gomock .Any (),key .UserID ).Return (key ,nil ).AnyTimes ()
1423
1423
dbm .EXPECT ().UpdateGitSSHKey (gomock .Any (),arg ).Return (key ,nil ).AnyTimes ()
1424
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( key . UserID ) ,policy .ActionUpdatePersonal ).Returns (key )
1424
+ check .Args (arg ).Asserts (key ,policy .ActionUpdatePersonal ).Returns (key )
1425
1425
}))
1426
1426
s .Run ("GetExternalAuthLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1427
1427
link := testutil .Fake (s .T (),faker , database.ExternalAuthLink {})
1428
1428
arg := database.GetExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID }
1429
1429
dbm .EXPECT ().GetExternalAuthLink (gomock .Any (),arg ).Return (link ,nil ).AnyTimes ()
1430
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionReadPersonal ).Returns (link )
1430
+ check .Args (arg ).Asserts (link ,policy .ActionReadPersonal ).Returns (link )
1431
1431
}))
1432
1432
s .Run ("InsertExternalAuthLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1433
1433
u := testutil .Fake (s .T (),faker , database.User {})
@@ -1440,21 +1440,21 @@ func (s *MethodTestSuite) TestUser() {
1440
1440
arg := database.UpdateExternalAuthLinkRefreshTokenParams {OAuthRefreshToken :"" ,OAuthRefreshTokenKeyID :"" ,ProviderID :link .ProviderID ,UserID :link .UserID ,UpdatedAt :link .UpdatedAt }
1441
1441
dbm .EXPECT ().GetExternalAuthLink (gomock .Any (), database.GetExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID }).Return (link ,nil ).AnyTimes ()
1442
1442
dbm .EXPECT ().UpdateExternalAuthLinkRefreshToken (gomock .Any (),arg ).Return (nil ).AnyTimes ()
1443
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionUpdatePersonal )
1443
+ check .Args (arg ).Asserts (link ,policy .ActionUpdatePersonal )
1444
1444
}))
1445
1445
s .Run ("UpdateExternalAuthLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1446
1446
link := testutil .Fake (s .T (),faker , database.ExternalAuthLink {})
1447
1447
arg := database.UpdateExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID ,OAuthAccessToken :link .OAuthAccessToken ,OAuthRefreshToken :link .OAuthRefreshToken ,OAuthExpiry :link .OAuthExpiry ,UpdatedAt :link .UpdatedAt }
1448
1448
dbm .EXPECT ().GetExternalAuthLink (gomock .Any (), database.GetExternalAuthLinkParams {ProviderID :link .ProviderID ,UserID :link .UserID }).Return (link ,nil ).AnyTimes ()
1449
1449
dbm .EXPECT ().UpdateExternalAuthLink (gomock .Any (),arg ).Return (link ,nil ).AnyTimes ()
1450
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionUpdatePersonal ).Returns (link )
1450
+ check .Args (arg ).Asserts (link ,policy .ActionUpdatePersonal ).Returns (link )
1451
1451
}))
1452
1452
s .Run ("UpdateUserLink" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1453
1453
link := testutil .Fake (s .T (),faker , database.UserLink {})
1454
1454
arg := database.UpdateUserLinkParams {OAuthAccessToken :link .OAuthAccessToken ,OAuthRefreshToken :link .OAuthRefreshToken ,OAuthExpiry :link .OAuthExpiry ,UserID :link .UserID ,LoginType :link .LoginType ,Claims : database.UserLinkClaims {}}
1455
1455
dbm .EXPECT ().GetUserLinkByUserIDLoginType (gomock .Any (), database.GetUserLinkByUserIDLoginTypeParams {UserID :link .UserID ,LoginType :link .LoginType }).Return (link ,nil ).AnyTimes ()
1456
1456
dbm .EXPECT ().UpdateUserLink (gomock .Any (),arg ).Return (link ,nil ).AnyTimes ()
1457
- check .Args (arg ).Asserts (rbac . ResourceUserObject ( link . UserID ) ,policy .ActionUpdatePersonal ).Returns (link )
1457
+ check .Args (arg ).Asserts (link ,policy .ActionUpdatePersonal ).Returns (link )
1458
1458
}))
1459
1459
s .Run ("UpdateUserRoles" ,s .Mocked (func (dbm * dbmock.MockStore ,faker * gofakeit.Faker ,check * expects ) {
1460
1460
u := testutil .Fake (s .T (),faker , database.User {RBACRoles : []string {codersdk .RoleTemplateAdmin }})
@@ -1525,6 +1525,7 @@ func (s *MethodTestSuite) TestUser() {
1525
1525
dbm .EXPECT ().UpdateCustomRole (gomock .Any (),arg ).Return (database.CustomRole {},nil ).AnyTimes ()
1526
1526
check .Args (arg ).Asserts (
1527
1527
rbac .ResourceAssignOrgRole .InOrg (orgID ),policy .ActionUpdate ,
1528
+ // Escalation checks
1528
1529
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionCreate ,
1529
1530
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionRead ,
1530
1531
)
@@ -1562,6 +1563,7 @@ func (s *MethodTestSuite) TestUser() {
1562
1563
dbm .EXPECT ().InsertCustomRole (gomock .Any (),arg ).Return (database.CustomRole {},nil ).AnyTimes ()
1563
1564
check .Args (arg ).Asserts (
1564
1565
rbac .ResourceAssignOrgRole .InOrg (orgID ),policy .ActionCreate ,
1566
+ // Escalation checks
1565
1567
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionCreate ,
1566
1568
rbac .ResourceTemplate .InOrg (orgID ),policy .ActionRead ,
1567
1569
)