fix: complete audit security and frontend gaps
This commit is contained in:
@@ -40,6 +40,19 @@ func TestShareObjectRejectsUnsupportedType(t *testing.T) {
|
||||
require.ErrorContains(t, err, "unsupported shared object type")
|
||||
}
|
||||
|
||||
func TestShareObjectRejectsObjectFromAnotherProject(t *testing.T) {
|
||||
database := newTestDB(t)
|
||||
task := domain.Task{ProjectID: 1, CreatedBy: 1, Title: "Review"}
|
||||
note := domain.Note{ProjectID: 2, CreatedBy: 1, Title: "Other project", Markdown: "Private context"}
|
||||
require.NoError(t, database.Create(&task).Error)
|
||||
require.NoError(t, database.Create(¬e).Error)
|
||||
service := NewService(database)
|
||||
|
||||
err := service.ShareObject(task.ID, "note", note.ID)
|
||||
|
||||
require.ErrorContains(t, err, "shared object not found in task project")
|
||||
}
|
||||
|
||||
func TestAssignRecordsProjectEvent(t *testing.T) {
|
||||
database := newTestDB(t)
|
||||
task := domain.Task{ProjectID: 7, CreatedBy: 1, Title: "安排评审"}
|
||||
|
||||
Reference in New Issue
Block a user