@feltdb/core 0.13.0 → 0.16.0

package/dist/create/server-source/crates/feltdb/tests/pr9_phase3c_simple_auth_delete.rs

@@ -1,93 +0,0 @@
-//! PR #9 Phase 3C: Simple Authorization Delete Test
-//!
-//! Minimal test to verify authorized deletion works
-
-use feltdb::{state_contract::AuthorizationContext, FeltDb};
-use serde_json::json;
-use tempfile::TempDir;
-
-#[test]
-fn simple_authorized_delete() -> Result<(), Box<dyn std::error::Error>> {
-    let temp_dir = TempDir::new()?;
-    let db = FeltDb::open(temp_dir.path().join("test.db"))?;
-
-    // Create a simple record
-    db.insert(
-        "Team#team-1",
-        json!({"_id": "team-1", "name": "Engineering"}),
-    )?;
-    println!("Created Team#team-1");
-
-    // Verify it exists
-    let value = db.get::<serde_json::Value>("Team#team-1")?;
-    assert!(value.is_some(), "Record should exist");
-    println!("Verified Team#team-1 exists");
-
-    // Create authorized context
-    let context = AuthorizationContext {
-        subject: ":user-1".to_string(),
-        tenant_id: "tenant-1".to_string(),
-        application_id: "app".to_string(),
-        revision_id: "rev-1".to_string(),
-        capabilities: vec!["state:write".to_string()].into_iter().collect(),
-        readable_collections: Default::default(),
-        writable_collections: Default::default(),
-        field_projections: Default::default(),
-    };
-    println!("Created AuthorizationContext with state:write");
-
-    // Try authorized delete
-    println!("Attempting delete_with_authorization...");
-    let result = db.delete_with_authorization("Team#team-1", &context);
-    println!("Delete result: {:?}", result);
-
-    match result {
-        Ok(_) => {
-            println!("✓ Delete succeeded");
-            let value = db.get::<serde_json::Value>("Team#team-1")?;
-            assert!(value.is_none(), "Record should be deleted");
-            println!("✓ Record verified deleted");
-            Ok(())
-        }
-        Err(e) => {
-            println!("✗ Delete failed: {}", e);
-            Err(Box::new(e))
-        }
-    }
-}
-
-#[test]
-fn authorized_delete_unauthorized_context() -> Result<(), Box<dyn std::error::Error>> {
-    let temp_dir = TempDir::new()?;
-    let db = FeltDb::open(temp_dir.path().join("test2.db"))?;
-
-    // Create a record
-    db.insert("Team#team-2", json!({"_id": "team-2", "name": "Product"}))?;
-
-    // Create unauthorized context (no write capability)
-    let context = AuthorizationContext {
-        subject: ":user-2".to_string(),
-        tenant_id: "tenant-1".to_string(),
-        application_id: "app".to_string(),
-        revision_id: "rev-1".to_string(),
-        capabilities: vec!["state:read".to_string()].into_iter().collect(),
-        readable_collections: Default::default(),
-        writable_collections: Default::default(),
-        field_projections: Default::default(),
-    };
-
-    // Try delete - should fail authorization
-    let result = db.delete_with_authorization("Team#team-2", &context);
-    assert!(result.is_err(), "Delete should be denied");
-    println!("✓ Unauthorized delete correctly denied");
-
-    // Verify record still exists
-    let value = db.get::<serde_json::Value>("Team#team-2")?;
-    assert!(
-        value.is_some(),
-        "Record should still exist after denied delete"
-    );
-    println!("✓ Record unchanged after authorization denial");
-
-    Ok(())
-}