joungmin/vpd-permission-poc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[DBA] add KB VPD admin full access condition

Browse Source
This commit is contained in:
devmrko
2026-07-08 13:02:11 +09:00
parent fbeb18ccec
commit 403298d474
5 changed files with 236 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
src/test/java/com/cloudhandson/vpdbackoffice/service/PermissionServiceTest.java
View File

@@ -2,6 +2,7 @@ package com.cloudhandson.vpdbackoffice.service;
import static org.assertj.core.api.Assertions.assertThat;
import static org.assertj.core.api.Assertions.assertThatThrownBy;
import static org.assertj.core.groups.Tuple.tuple;
import com.cloudhandson.vpdbackoffice.domain.audit.AuditEvent;
import com.cloudhandson.vpdbackoffice.domain.permission.AppRole;
@@ -271,6 +272,25 @@ class PermissionServiceTest {
.containsExactly("", "DEPT_CODE IN ('HR', 'FIN')");
}
@Test
void acceptsExplicitUnconditionalStaticSqlPredicateForAdminRole() {
var command = new PermissionSetCommand(
10L,
1L,
"SELECT",
"ALLOW",
List.of(new RuleCommand(null, "STATIC_SQL", "1 = 1")),
List.of()
);
permissionService.savePermissionSet(command);
FakePermissionMapper mapper = (FakePermissionMapper) permissionMapper;
assertThat(mapper.insertedRules)
.extracting(PermissionRule::ruleType, PermissionRule::ruleValue)
.containsExactly(tuple("STATIC_SQL", "1 = 1"));
}
@Test
void rejectsStaticSqlStatementOrUnknownColumn() {
var statementCommand = new PermissionSetCommand(