fix(assetsGroups): disable checkRights on impersonate (#325)

kuzzleio · Jan 9, 2024 · eaa3edc · eaa3edc
1 parent 5f87787
commit eaa3edc
Show file tree

Hide file tree

Showing 3 changed files with 565 additions and 1 deletion.
diff --git a/lib/modules/asset/AssetsGroupsController.ts b/lib/modules/asset/AssetsGroupsController.ts
@@ -106,7 +106,7 @@ export class AssetsGroupsController {
   private get as() {
     return (user: User | null): EmbeddedSDK => {
       if (user?._id) {
-        return this.sdk.as(user, { checkRights: true });
+        return this.sdk.as(user, { checkRights: false });
       }
       return this.sdk;
     };

diff --git a/tests/fixtures/rights.ts b/tests/fixtures/rights.ts
@@ -11,5 +11,86 @@ export default {
         },
       },
     },
+    "ayse-admin": {
+      content: {
+        profileIds: ["ayse-admin"],
+      },
+      credentials: {
+        local: {
+          username: "ayse-admin",
+          password: "password",
+        },
+      },
+    },
+  },
+  profiles: {
+    "ayse-admin": {
+      rateLimit: 0,
+      policies: [
+        {
+          roleId: "tests",
+        },
+        {
+          roleId: "assets.admin",
+          restrictedTo: [
+            {
+              index: "engine-ayse",
+            },
+          ],
+        },
+        {
+          roleId: "devices.admin",
+          restrictedTo: [
+            {
+              index: "engine-ayse",
+            },
+          ],
+        },
+        {
+          roleId: "assetsGroup.admin",
+          restrictedTo: [
+            {
+              index: "engine-ayse",
+            },
+          ],
+        },
+      ],
+      optimizedPolicies: [
+        {
+          roleId: "assets.admin",
+          restrictedTo: {},
+        },
+        {
+          roleId: "devices.admin",
+          restrictedTo: {},
+        },
+        {
+          roleId: "assetsGroup.admin",
+          restrictedTo: {},
+        },
+      ],
+    },
+  },
+  roles: {
+    tests: {
+      controllers: {
+        admin: {
+          actions: {
+            loadFixtures: true,
+          },
+        },
+        collection: {
+          actions: {
+            refresh: true,
+          },
+        },
+        document: {
+          actions: {
+            get: true,
+            deleteByQuery: true,
+          },
+        },
+      },
+    },
   },
 };