[Developer] #573 normalize vector access whitelist

src/test/java/com/cloudhandson/vpdbackoffice/service/OrdsProbeServiceTest.java

@@ -23,4 +23,16 @@ class OrdsProbeServiceTest {
         .contains("ROWNUM <= LEAST(GREATEST(NVL(:row_limit, 10), 1), 100)")
         .doesNotContain("Bearer", "0.10", "0.20");
   }
+
+  @Test
+  void omitsNoopAllowAllPredicateFromVectorEffectiveSql() {
+    ProtectedObject object = new ProtectedObject(
+        5L, "ADMIN", "CB_VECTOR_SEARCH_DOCUMENTS", "cb-agent-vector/search", "Y");
+
+    String sql = OrdsProbeService.vectorEffectiveSql(object, "  1 = 1  ");
+
+    assertThat(sql)
+        .contains("WHERE d.embedding IS NOT NULL ORDER BY score")
+        .doesNotContain("AND (1 = 1)", "REGEXP_LIKE");
+  }
 }

src/test/java/com/cloudhandson/vpdbackoffice/web/GuidedFlowTemplateTest.java

@@ -147,10 +147,26 @@ class GuidedFlowTemplateTest {
     assertThat(result)
         .contains("토큰 적용 후 SQL")
         .contains("권한 적용 SQL")
-        .contains("VPD가 추가한 WHERE 조건");
+        .contains("VPD가 추가한 WHERE 조건")
+        .contains("ALL: 추가 행 필터 없음")
+        .contains("기본 whitelist 역할");
     assertThat(vectorSql)
         .contains("VECTOR_DISTANCE(d.embedding, TO_VECTOR(:embedding), COSINE)")
-        .contains("WHERE d.embedding IS NOT NULL AND (' || v_vpd_predicate || ')");
+        .contains("IF TRIM(v_vpd_predicate) <> '1 = 1' THEN")
+        .contains("' AND (' || v_vpd_predicate || ')'");
+  }
+
+  @Test
+  void vectorDefaultRolesAreSeededAsWhitelistAllRules() throws IOException {
+    String setup = Files.readString(Path.of("sql/adb/32_dds_vector_tag_setup.sql"));
+
+    assertThat(setup)
+        .contains("ensure_vector_all_permission(10)")
+        .contains("ensure_vector_all_permission(20)")
+        .contains("ensure_vector_all_permission(30)")
+        .contains("UPPER(TRIM(rule_type)) = 'TAG'")
+        .contains("NULL, 'ALL', NULL")
+        .doesNotContain("SYS.ODCIVARCHAR2LIST('SPRING_BOOT', 'ORDS')");
   }
 
   @Test