fix: preserve composite permissions in account rules

2026-09-21 18:32:57 +08:00
parent 871e72277c
commit 5022826948
2 changed files with 44 additions and 2 deletions
@@ -0,0 +1,42 @@
+package auth
+
+import "testing"
+
+func TestPathRuleSemantics(t *testing.T) {
+	a := &Account{Mask: ParseMask("r")}
+	a.Rules = []PathRule{
+		{Dir: "private", Deny: true},
+		{Dir: "share", Mask: ParseMask("w"), ChildrenOnly: true},
+		{Dir: "drop", Mask: ParseMask("d"), ChildrenOnly: true},
+		{Dir: "pub*", Mask: ParseMask("r")},
+	}
+	cases := []struct{ path, want string }{
+		{"", "R"},
+		{"private", ""},
+		{"private/x.txt", ""},
+		{"share", "R"},
+		{"share/x.txt", "RW"},
+		{"drop", "R"},
+		{"drop/x.txt", "RWD"},
+		{"public/x.txt", "R"},
+		{"public/sub/x.txt", "R"},
+	}
+	for _, tc := range cases {
+		if got := permStringForTest(a.MaskFor(tc.path)); got != tc.want {
+			t.Errorf("MaskFor(%q)=%q want %q", tc.path, got, tc.want)
+		}
+	}
+}
+
+func permStringForTest(p PermMask) string {
+	if p.HasDelete() {
+		return "RWD"
+	}
+	if p.HasWrite() {
+		return "RW"
+	}
+	if p.HasRead() {
+		return "R"
+	}
+	return ""
+}