stwaidele/dorfteich
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 22 Wiki Activity

#302: configurable pond start page, created with every new pond #310

Merged
opus-5 merged 3 commits from issue-302-pond-start-page into main 2026-08-01 12:14:27 +02:00
Conversation 0 Commits 3 Files Changed 24 +8 -4
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 30fd1ff53b - Show all commits

12
apps/web/e2e/permission-matrix.spec.ts
View File

@ -173,10 +173,14 @@ test('page read & edit — the 404-vs-403 policy holds per subject', async () =>
});
test('sidebar list is filtered to each subject’s visible pages', async () => {
expect(await listCount(f.admin.request, f.pondId)).toBe(3);
expect(await listCount(f.owner.request, f.pondId)).toBe(3);
expect(await listCount(f.reader.request, f.pondId)).toBe(3);
expect(await listCount(f.editor.request, f.pondId)).toBe(2); // secret hidden
// Three fixture pages plus the pond's own start page (issue #302), which
// every pond created through the api now carries. It is an ordinary page
// with no grant of its own, so it follows the pond-wide permissions: the
// outsider, who reaches only the explicitly public page, still sees one.
expect(await listCount(f.admin.request, f.pondId)).toBe(4);
expect(await listCount(f.owner.request, f.pondId)).toBe(4);
expect(await listCount(f.reader.request, f.pondId)).toBe(4);
expect(await listCount(f.editor.request, f.pondId)).toBe(3); // secret hidden
expect(await listCount(f.outsider.request, f.pondId)).toBe(1); // only the public page
// Anonymous cannot hit the authenticated list endpoint at all.
expect(await listCount(f.anon, f.pondId)).toBe(401);