@bananapus/core-v6 0.0.37 → 0.0.38

package/test/TestPermissions.sol

@@ -1,324 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity ^0.8.6;
-
-import {TestBaseWorkflow} from "./helpers/TestBaseWorkflow.sol";
-import {MockERC20} from "./mock/MockERC20.sol";
-import {JBPermissions} from "../src/JBPermissions.sol";
-import {JBPermissioned} from "../src/abstract/JBPermissioned.sol";
-import {IJBController} from "../src/interfaces/IJBController.sol";
-import {IJBPermissions} from "../src/interfaces/IJBPermissions.sol";
-import {IJBRulesetApprovalHook} from "../src/interfaces/IJBRulesetApprovalHook.sol";
-import {IJBTerminal} from "../src/interfaces/IJBTerminal.sol";
-import {IJBToken} from "../src/interfaces/IJBToken.sol";
-import {JBConstants} from "../src/libraries/JBConstants.sol";
-import {JBAccountingContext} from "../src/structs/JBAccountingContext.sol";
-import {JBFundAccessLimitGroup} from "../src/structs/JBFundAccessLimitGroup.sol";
-import {JBPermissionsData} from "../src/structs/JBPermissionsData.sol";
-import {JBRulesetConfig} from "../src/structs/JBRulesetConfig.sol";
-import {JBRulesetMetadata} from "../src/structs/JBRulesetMetadata.sol";
-import {JBSplitGroup} from "../src/structs/JBSplitGroup.sol";
-import {JBTerminalConfig} from "../src/structs/JBTerminalConfig.sol";
-import {JBPermissionIds} from "@bananapus/permission-ids-v6/src/JBPermissionIds.sol";
-
-contract TestPermissions_Local is TestBaseWorkflow {
-    IJBController private _controller;
-    JBRulesetMetadata private _metadata;
-    IJBTerminal private _terminal;
-    IJBPermissions private _permissions;
-
-    address private _projectOwner;
-    uint64 private _projectZero;
-    uint64 private _projectOne;
-
-    function setUp() public override {
-        super.setUp();
-
-        _projectOwner = multisig();
-        _terminal = jbMultiTerminal();
-        _controller = jbController();
-        _permissions = jbPermissions();
-
-        _metadata = JBRulesetMetadata({
-            reservedPercent: 0,
-            cashOutTaxRate: 0,
-            baseCurrency: uint32(uint160(JBConstants.NATIVE_TOKEN)),
-            pausePay: false,
-            pauseCreditTransfers: false,
-            allowOwnerMinting: false,
-            allowSetCustomToken: true,
-            allowTerminalMigration: false,
-            allowSetTerminals: false,
-            ownerMustSendPayouts: false,
-            allowSetController: false,
-            allowAddAccountingContext: true,
-            allowAddPriceFeed: false,
-            holdFees: false,
-            useTotalSurplusForCashOuts: false,
-            useDataHookForPay: false,
-            useDataHookForCashOut: false,
-            dataHook: address(0),
-            metadata: 0
-        });
-
-        // Package up ruleset configuration.
-        JBRulesetConfig[] memory _rulesetConfig = new JBRulesetConfig[](1);
-        _rulesetConfig[0].mustStartAtOrAfter = 0;
-        _rulesetConfig[0].duration = 0;
-        _rulesetConfig[0].weight = 0;
-        _rulesetConfig[0].weightCutPercent = 0;
-        _rulesetConfig[0].approvalHook = IJBRulesetApprovalHook(address(0));
-        _rulesetConfig[0].metadata = _metadata;
-        _rulesetConfig[0].splitGroups = new JBSplitGroup[](0);
-        _rulesetConfig[0].fundAccessLimitGroups = new JBFundAccessLimitGroup[](0);
-
-        // Package up terminal configuration.
-        JBTerminalConfig[] memory _terminalConfigurations = new JBTerminalConfig[](1);
-        JBAccountingContext[] memory _tokensToAccept = new JBAccountingContext[](1);
-        _tokensToAccept[0] = JBAccountingContext({
-            token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: uint32(uint160(JBConstants.NATIVE_TOKEN))
-        });
-        _terminalConfigurations[0] =
-            JBTerminalConfig({terminal: _terminal, accountingContextsToAccept: _tokensToAccept});
-
-        _projectZero = uint64(
-            _controller.launchProjectFor({
-                owner: makeAddr("zeroOwner"),
-                projectUri: "myIPFSHash",
-                rulesetConfigurations: _rulesetConfig,
-                terminalConfigurations: _terminalConfigurations,
-                memo: ""
-            })
-        );
-
-        _projectOne = uint64(
-            _controller.launchProjectFor({
-                owner: _projectOwner,
-                projectUri: "myIPFSHash",
-                rulesetConfigurations: _rulesetConfig,
-                terminalConfigurations: _terminalConfigurations,
-                memo: ""
-            })
-        );
-    }
-
-    function test_RevertIf_MostBasicAccess() public {
-        // Package up ruleset configuration.
-        JBRulesetConfig[] memory _rulesetConfig = new JBRulesetConfig[](1);
-        _rulesetConfig[0].mustStartAtOrAfter = 0;
-        _rulesetConfig[0].duration = 0;
-        _rulesetConfig[0].weight = 0;
-        _rulesetConfig[0].weightCutPercent = 0;
-        _rulesetConfig[0].approvalHook = IJBRulesetApprovalHook(address(0));
-        _rulesetConfig[0].metadata = _metadata;
-        _rulesetConfig[0].splitGroups = new JBSplitGroup[](0);
-        _rulesetConfig[0].fundAccessLimitGroups = new JBFundAccessLimitGroup[](0);
-
-        vm.prank(makeAddr("zeroOwner"));
-        vm.expectRevert(
-            abi.encodeWithSelector(
-                JBPermissioned.JBPermissioned_Unauthorized.selector,
-                _projectOwner,
-                makeAddr("zeroOwner"),
-                _projectOne,
-                JBPermissionIds.QUEUE_RULESETS
-            )
-        );
-        uint256 queued = _controller.queueRulesetsOf(_projectOne, _rulesetConfig, "");
-
-        assertNotEq(queued, block.timestamp);
-    }
-
-    function test_RevertIf_SetOperators() public {
-        // Pack up our permission data.
-        JBPermissionsData[] memory permData = new JBPermissionsData[](1);
-
-        uint8[] memory permIds = new uint8[](256);
-
-        // Push an index higher than 255.
-        for (uint8 i; i < 255; i++) {
-            permIds[i] = i;
-
-            permData[0] = JBPermissionsData({operator: address(0), projectId: _projectOne, permissionIds: permIds});
-
-            // Set em.
-            vm.prank(_projectOwner);
-            vm.expectRevert(JBPermissions.JBPermissions_NoZeroPermission.selector);
-            _permissions.setPermissionsFor(_projectOwner, permData[0]);
-        }
-    }
-
-    function testHasPermissions(
-        address _account,
-        address _op,
-        uint56 _projectId,
-        uint8 _checkedId,
-        // forge-lint: disable-next-line(mixed-case-variable)
-        uint8[] memory _set_permissions
-    )
-        public
-    {
-        vm.assume(_projectId != 0);
-        vm.assume(_set_permissions.length != 0);
-        vm.assume(_account != trustedForwarder());
-
-        // forge-lint: disable-next-line(mixed-case-variable)
-        uint256[] memory _check_permissions = new uint256[](1);
-        _check_permissions[0] = _checkedId;
-
-        bool hasPerm;
-        bool hasZero;
-        for (uint256 i; i < _set_permissions.length; i++) {
-            // Flag if index is zero, meaning set call should revert later.
-            if (_set_permissions[i] == 0) hasZero = true;
-
-            // Flag if hasPermissions check will be true if the array contains it or has root ID.
-            if (_set_permissions[i] == _checkedId) hasPerm = true;
-        }
-
-        // If setting with a zero permission id, will revert.
-        if (hasZero) vm.expectRevert(JBPermissions.JBPermissions_NoZeroPermission.selector);
-
-        // Set the permissions.
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _op, projectId: _projectId, permissionIds: _set_permissions})
-        );
-
-        // Check permissions if the call didn't revert.
-        if (!hasZero) {
-            // Call has permissions and assert.
-            assertEq(_permissions.hasPermissions(_op, _account, _projectId, _check_permissions, false, false), hasPerm);
-        }
-    }
-
-    function testBasicAccessSetup() public {
-        address zeroOwner = makeAddr("zeroOwner");
-        address token = address(usdcToken());
-
-        // Pack up our permission data.
-        JBPermissionsData[] memory permData = new JBPermissionsData[](1);
-        uint8[] memory permIds = new uint8[](1);
-        permIds[0] = 1;
-
-        permData[0] = JBPermissionsData({operator: address(this), projectId: _projectZero, permissionIds: permIds});
-
-        // Set em.
-        vm.prank(zeroOwner);
-        _permissions.setPermissionsFor(zeroOwner, permData[0]);
-
-        // Should be true given root check
-        bool _check = _permissions.hasPermission(address(this), zeroOwner, _projectZero, 2, true, true);
-        assertEq(_check, true);
-
-        // Will revert attempting to set another projects token
-        vm.expectRevert(
-            abi.encodeWithSelector(
-                JBPermissioned.JBPermissioned_Unauthorized.selector,
-                _projectOwner,
-                address(this),
-                2,
-                JBPermissionIds.SET_TOKEN
-            )
-        );
-        _controller.setTokenFor(2, IJBToken(token));
-
-        // Will succeed when setting the correct projects token
-        mockExpect(token, abi.encodeCall(MockERC20.decimals, ()), abi.encode(18));
-        mockExpect(token, abi.encodeCall(IJBToken.canBeAddedTo, (1)), abi.encode(true));
-        _controller.setTokenFor(1, IJBToken(token));
-    }
-
-    function testCannotForwardRoot() public {
-        address zeroOwner = makeAddr("zeroOwner");
-
-        // Pack up our permission data.
-        JBPermissionsData[] memory permData = new JBPermissionsData[](1);
-        uint8[] memory permIds = new uint8[](1);
-        permIds[0] = 1;
-
-        permData[0] = JBPermissionsData({operator: address(this), projectId: _projectZero, permissionIds: permIds});
-
-        // Set em.
-        vm.prank(zeroOwner);
-        _permissions.setPermissionsFor(zeroOwner, permData[0]);
-
-        // Should be true given root check
-        bool _check = _permissions.hasPermission(address(this), zeroOwner, _projectZero, 2, true, true);
-        assertEq(_check, true);
-
-        // Pack up our non-root permission data.
-        JBPermissionsData[] memory permData2 = new JBPermissionsData[](1);
-        uint8[] memory permIds2 = new uint8[](1);
-        permIds2[0] = 2;
-
-        permData2[0] = JBPermissionsData({operator: address(0), projectId: _projectZero, permissionIds: permIds2});
-
-        // Should be able to forward other permissions
-        // Note that this contract is now authorized to do so above- address(this)
-
-        // in emit
-        uint256 packed;
-
-        vm.expectEmit();
-        emit IJBPermissions.OperatorPermissionsSet(
-            permData2[0].operator,
-            zeroOwner,
-            permData2[0].projectId,
-            permData2[0].permissionIds,
-            packed |= 1 << 2,
-            address(this)
-        );
-        _permissions.setPermissionsFor(zeroOwner, permData2[0]);
-
-        // Change the permission being set back to root
-        permData2[0] = JBPermissionsData({operator: address(0), projectId: _projectZero, permissionIds: permIds});
-
-        // Shouldn't be able to forward root
-        vm.expectRevert(
-            abi.encodeWithSelector(
-                JBPermissions.JBPermissions_Unauthorized.selector,
-                zeroOwner,
-                address(this),
-                _projectZero,
-                JBPermissionIds.ROOT
-            )
-        );
-        _permissions.setPermissionsFor(zeroOwner, permData2[0]);
-    }
-
-    function testWildcardCannotBeSetForWildcardRootOperator() public {
-        address zeroOwner = makeAddr("zeroOwner");
-
-        // Pack up our permission data.
-        JBPermissionsData[] memory permData = new JBPermissionsData[](1);
-        uint8[] memory permIds = new uint8[](1);
-        permIds[0] = 1;
-
-        uint56 wildcardProjectId = 0;
-
-        permData[0] = JBPermissionsData({operator: address(this), projectId: wildcardProjectId, permissionIds: permIds});
-
-        // Set em.
-        vm.prank(zeroOwner);
-        _permissions.setPermissionsFor(zeroOwner, permData[0]);
-
-        // Should be true given root check
-        bool _check = _permissions.hasPermission(address(this), zeroOwner, _projectZero, 2, true, true);
-        assertEq(_check, true);
-
-        // Pack up our non-root wildcard permission data.
-        JBPermissionsData[] memory permData2 = new JBPermissionsData[](1);
-        uint8[] memory permIds2 = new uint8[](1);
-        permIds2[0] = 2;
-
-        permData2[0] = JBPermissionsData({operator: address(0), projectId: wildcardProjectId, permissionIds: permIds2});
-
-        // Shouldn't be able to set permission for wildcard project
-        vm.expectRevert(
-            abi.encodeWithSelector(
-                JBPermissions.JBPermissions_Unauthorized.selector, zeroOwner, address(this), 0, JBPermissionIds.ROOT
-            )
-        );
-        _permissions.setPermissionsFor(zeroOwner, permData2[0]);
-    }
-}

package/test/TestPermissionsEdge.sol

@@ -1,290 +0,0 @@
-// SPDX-License-Identifier: MIT
-pragma solidity ^0.8.6;
-
-import {TestBaseWorkflow} from "./helpers/TestBaseWorkflow.sol";
-import {JBPermissions} from "../src/JBPermissions.sol";
-import {JBPermissionsData} from "../src/structs/JBPermissionsData.sol";
-import {JBPermissionIds} from "@bananapus/permission-ids-v6/src/JBPermissionIds.sol";
-
-/// @notice Defense-in-depth validation of JBPermissions ROOT escalation prevention.
-/// Verifies that ROOT operators cannot forward ROOT, cannot set wildcard permissions,
-/// and that the permission bitmap maintains integrity through set/get cycles.
-contract TestPermissionsEdge_Local is TestBaseWorkflow {
-    JBPermissions private _permissions;
-
-    address private _account;
-    address private _operator;
-    address private _thirdParty;
-
-    uint64 constant PROJECT_ID = 5;
-
-    function setUp() public override {
-        super.setUp();
-        _permissions = jbPermissions();
-        _account = makeAddr("account");
-        _operator = makeAddr("operator");
-        _thirdParty = makeAddr("thirdParty");
-    }
-
-    // ───────────────────── ROOT cannot be forwarded
-    // ─────────────────────
-
-    /// @notice An operator with ROOT on project N cannot set ROOT for another operator.
-    function test_rootCannotBeForwarded() external {
-        // Give operator ROOT permission on PROJECT_ID.
-        uint8[] memory rootPermissions = new uint8[](1);
-        rootPermissions[0] = JBPermissionIds.ROOT;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: rootPermissions})
-        );
-
-        // Verify operator has ROOT.
-        assertTrue(
-            _permissions.hasPermission(_operator, _account, PROJECT_ID, JBPermissionIds.ROOT, false, false),
-            "Operator should have ROOT"
-        );
-
-        // Now operator tries to forward ROOT to thirdParty.
-        uint8[] memory rootForThird = new uint8[](1);
-        rootForThird[0] = JBPermissionIds.ROOT;
-
-        vm.prank(_operator);
-        vm.expectRevert(
-            abi.encodeWithSelector(
-                JBPermissions.JBPermissions_Unauthorized.selector, _account, _operator, PROJECT_ID, JBPermissionIds.ROOT
-            )
-        );
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _thirdParty, projectId: PROJECT_ID, permissionIds: rootForThird})
-        );
-    }
-
-    // ───────────────────── Wildcard cannot be set by operator
-    // ─────────────────────
-
-    /// @notice An operator with ROOT cannot set permissions for the wildcard project ID.
-    function test_wildcardCannotBeSetByOperator() external {
-        // Give operator ROOT on PROJECT_ID.
-        uint8[] memory rootPermissions = new uint8[](1);
-        rootPermissions[0] = JBPermissionIds.ROOT;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: rootPermissions})
-        );
-
-        // Operator tries to set permissions on wildcard (project 0).
-        uint8[] memory somePermission = new uint8[](1);
-        somePermission[0] = 5; // Some non-ROOT permission.
-
-        vm.prank(_operator);
-        vm.expectRevert(
-            abi.encodeWithSelector(
-                JBPermissions.JBPermissions_Unauthorized.selector, _account, _operator, 0, JBPermissionIds.ROOT
-            )
-        );
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _thirdParty, projectId: 0, permissionIds: somePermission})
-        );
-    }
-
-    // ───────────────────── ROOT grants all permissions
-    // ─────────────────────
-
-    /// @notice Fuzz: ROOT holder always has permission for any ID (when includeRoot=true).
-    function testFuzz_rootGrantsAllPermissions(uint8 permissionId) external {
-        vm.assume(permissionId > 0); // 0 is reserved.
-
-        // Give operator ROOT.
-        uint8[] memory rootPermissions = new uint8[](1);
-        rootPermissions[0] = JBPermissionIds.ROOT;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: rootPermissions})
-        );
-
-        // Check any permissionId with includeRoot=true.
-        assertTrue(
-            _permissions.hasPermission(_operator, _account, PROJECT_ID, permissionId, true, false),
-            "ROOT should grant all permissions when includeRoot=true"
-        );
-
-        // Without includeRoot, only ROOT bit should be set.
-        if (permissionId != JBPermissionIds.ROOT) {
-            assertFalse(
-                _permissions.hasPermission(_operator, _account, PROJECT_ID, permissionId, false, false),
-                "Without includeRoot, only ROOT bit should match"
-            );
-        }
-    }
-
-    // ───────────────────── Permission ID boundaries
-    // ─────────────────────
-
-    /// @notice Permission 0 cannot be set.
-    function test_permissionId0_cannotBeSet() external {
-        uint8[] memory zeroPermission = new uint8[](1);
-        zeroPermission[0] = 0;
-
-        vm.prank(_account);
-        vm.expectRevert(JBPermissions.JBPermissions_NoZeroPermission.selector);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: zeroPermission})
-        );
-    }
-
-    /// @notice Permission 255 (highest) works correctly.
-    function test_permissionId255_works() external {
-        uint8[] memory maxPermission = new uint8[](1);
-        maxPermission[0] = 255;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: maxPermission})
-        );
-
-        assertTrue(
-            _permissions.hasPermission(_operator, _account, PROJECT_ID, 255, false, false), "Permission 255 should work"
-        );
-
-        // Permission 254 should NOT be set.
-        assertFalse(
-            _permissions.hasPermission(_operator, _account, PROJECT_ID, 254, false, false),
-            "Permission 254 should not be set"
-        );
-    }
-
-    // ───────────────────── Replacement not additive
-    // ─────────────────────
-
-    /// @notice Setting new permissions replaces old ones (old permissions lost).
-    function test_replacementNotAdditive() external {
-        // Set permission 5.
-        uint8[] memory perm5 = new uint8[](1);
-        perm5[0] = 5;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: perm5})
-        );
-
-        assertTrue(_permissions.hasPermission(_operator, _account, PROJECT_ID, 5, false, false), "Should have perm 5");
-
-        // Now set permission 10 — should REPLACE, not add to perm 5.
-        uint8[] memory perm10 = new uint8[](1);
-        perm10[0] = 10;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: perm10})
-        );
-
-        assertTrue(_permissions.hasPermission(_operator, _account, PROJECT_ID, 10, false, false), "Should have perm 10");
-        assertFalse(
-            _permissions.hasPermission(_operator, _account, PROJECT_ID, 5, false, false),
-            "Perm 5 should be LOST after replacement"
-        );
-    }
-
-    // ───────────────────── Wildcard overrides project-specific
-    // ─────────────────────
-
-    /// @notice Wildcard permission grants access to all projects.
-    function test_wildcardOverridesProjectSpecific() external {
-        // Set permission 5 on wildcard project (0).
-        uint8[] memory perm5 = new uint8[](1);
-        perm5[0] = 5;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: 0, permissionIds: perm5})
-        );
-
-        // Check with includeWildcardProjectId=true on any project.
-        assertTrue(
-            _permissions.hasPermission(_operator, _account, PROJECT_ID, 5, false, true),
-            "Wildcard should grant permission on any project"
-        );
-
-        // Check without wildcard — should not have permission on specific project.
-        assertFalse(
-            _permissions.hasPermission(_operator, _account, PROJECT_ID, 5, false, false),
-            "Without wildcard flag, specific project check fails"
-        );
-    }
-
-    // ───────────────────── Bit integrity fuzz
-    // ─────────────────────
-
-    /// @notice Fuzz: packed permissions maintain bit integrity through set/get cycle.
-    function testFuzz_setPermissions_bitIntegrity(uint256 bitmap) external {
-        // Build permission ID array from bitmap.
-        // Count set bits (excluding bit 0).
-        uint256 count;
-        for (uint256 i = 1; i < 256; i++) {
-            if ((bitmap >> i) & 1 == 1) count++;
-        }
-
-        if (count == 0) return; // Skip empty bitmaps.
-
-        uint8[] memory ids = new uint8[](count);
-        uint256 idx;
-        for (uint256 i = 1; i < 256; i++) {
-            if ((bitmap >> i) & 1 == 1) {
-                // forge-lint: disable-next-line(unsafe-typecast)
-                ids[idx] = uint8(i);
-                idx++;
-            }
-        }
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: ids})
-        );
-
-        // Verify packed value matches.
-        uint256 packed = _permissions.permissionsOf(_operator, _account, PROJECT_ID);
-
-        // Check each bit.
-        for (uint256 i = 1; i < 256; i++) {
-            bool expected = (bitmap >> i) & 1 == 1;
-            bool actual = ((packed >> i) & 1) == 1;
-            assertEq(actual, expected, string.concat("Bit mismatch at position ", vm.toString(i)));
-        }
-
-        // Bit 0 should never be set.
-        assertFalse(((packed >> 0) & 1) == 1, "Bit 0 should never be set");
-    }
-
-    // ───────────────────── ROOT operator can set non-ROOT permissions
-    // ─────────────────────
-
-    /// @notice ROOT operator CAN set non-ROOT permissions for others on the same project.
-    function test_rootOperator_canSetNonRootPermissions() external {
-        // Give operator ROOT.
-        uint8[] memory rootPermissions = new uint8[](1);
-        rootPermissions[0] = JBPermissionIds.ROOT;
-
-        vm.prank(_account);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _operator, projectId: PROJECT_ID, permissionIds: rootPermissions})
-        );
-
-        // Operator sets non-ROOT permission for thirdParty — should succeed.
-        uint8[] memory nonRootPerm = new uint8[](1);
-        nonRootPerm[0] = 5;
-
-        vm.prank(_operator);
-        _permissions.setPermissionsFor(
-            _account, JBPermissionsData({operator: _thirdParty, projectId: PROJECT_ID, permissionIds: nonRootPerm})
-        );
-
-        assertTrue(
-            _permissions.hasPermission(_thirdParty, _account, PROJECT_ID, 5, false, false),
-            "ROOT operator should be able to delegate non-ROOT permissions"
-        );
-    }
-}