@feltdb/core 0.8.4 → 0.8.6

package/dist/create/server-source/crates/feltdb/src/authorization_security_tests.rs

@@ -88,15 +88,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         let project = json!({"_id": "proj1", "organization": "org-A"});
@@ -149,15 +180,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         let project = json!({"_id": "proj1", "organization": "org-A"});
@@ -192,21 +254,50 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         let project = json!({"_id": "proj1", "organization": "org-A"});
-        let snapshot = vec![
-            make_stored_row("Project", "proj1", project),
-        ];
+        let snapshot = vec![make_stored_row("Project", "proj1", project)];
 
         let auth_state = make_auth_state(schema, snapshot);
 
@@ -237,15 +328,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         // Three projects: alice can access proj1 and proj3 (org-A),
@@ -301,19 +423,28 @@ mod security_tests {
     fn invariant_d_update_auth_uses_existing_state() {
         use state_contract::FieldType;
 
-        let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("owner_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-            ]),
-        ]);
+        let schema = make_schema_with_collections(vec![make_collection(
+            "Project",
+            vec![
+                make_field(
+                    "_id",
+                    FieldType::Primitive {
+                        primitive: state_contract::PrimitiveType::String,
+                    },
+                ),
+                make_field(
+                    "owner_id",
+                    FieldType::Primitive {
+                        primitive: state_contract::PrimitiveType::String,
+                    },
+                ),
+            ],
+        )]);
 
         // Existing project owned by alice
         let existing = json!({"_id": "proj1", "owner_id": "alice", "title": "Secret"});
 
-        let snapshot = vec![
-            make_stored_row("Project", "proj1", existing.clone()),
-        ];
+        let snapshot = vec![make_stored_row("Project", "proj1", existing.clone())];
 
         let auth_state = make_auth_state(schema, snapshot);
 
@@ -345,15 +476,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         // Alice is member of org-A only
@@ -392,15 +554,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         // Alice is member of org-A
@@ -446,17 +639,21 @@ mod security_tests {
     fn reference_missing_organization_reference_in_schema() {
         use state_contract::FieldType;
 
-        let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
+        let schema = make_schema_with_collections(vec![make_collection(
+            "Project",
+            vec![
+                make_field(
+                    "_id",
+                    FieldType::Primitive {
+                        primitive: state_contract::PrimitiveType::String,
+                    },
+                ),
                 // No organization reference
-            ]),
-        ]);
+            ],
+        )]);
 
         let proj = json!({"_id": "proj1"});
-        let snapshot = vec![
-            make_stored_row("Project", "proj1", proj),
-        ];
+        let snapshot = vec![make_stored_row("Project", "proj1", proj)];
 
         let auth_state = make_auth_state(schema, snapshot);
 
@@ -482,17 +679,26 @@ mod security_tests {
     fn reference_missing_organization_value_in_record() {
         use state_contract::FieldType;
 
-        let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-        ]);
+        let schema = make_schema_with_collections(vec![make_collection(
+            "Project",
+            vec![
+                make_field(
+                    "_id",
+                    FieldType::Primitive {
+                        primitive: state_contract::PrimitiveType::String,
+                    },
+                ),
+                make_field(
+                    "organization",
+                    FieldType::Reference {
+                        collection: "Organization".into(),
+                    },
+                ),
+            ],
+        )]);
 
         let proj = json!({"_id": "proj1"}); // Missing organization field
-        let snapshot = vec![
-            make_stored_row("Project", "proj1", proj),
-        ];
+        let snapshot = vec![make_stored_row("Project", "proj1", proj)];
 
         let auth_state = make_auth_state(schema, snapshot);
 
@@ -517,17 +723,26 @@ mod security_tests {
     fn reference_null_organization_value() {
         use state_contract::FieldType;
 
-        let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-        ]);
+        let schema = make_schema_with_collections(vec![make_collection(
+            "Project",
+            vec![
+                make_field(
+                    "_id",
+                    FieldType::Primitive {
+                        primitive: state_contract::PrimitiveType::String,
+                    },
+                ),
+                make_field(
+                    "organization",
+                    FieldType::Reference {
+                        collection: "Organization".into(),
+                    },
+                ),
+            ],
+        )]);
 
         let proj = json!({"_id": "proj1", "organization": null});
-        let snapshot = vec![
-            make_stored_row("Project", "proj1", proj),
-        ];
+        let snapshot = vec![make_stored_row("Project", "proj1", proj)];
 
         let auth_state = make_auth_state(schema, snapshot);
 
@@ -557,26 +772,57 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         let proj = json!({"_id": "proj1", "organization": "org-A"});
-        let mut mem = make_stored_row("Membership", "mem1",
-            json!({"_id": "mem1", "user": "alice", "organization": "org-A"}));
+        let mut mem = make_stored_row(
+            "Membership",
+            "mem1",
+            json!({"_id": "mem1", "user": "alice", "organization": "org-A"}),
+        );
         mem.deleted = true; // Mark as deleted
 
-        let snapshot = vec![
-            make_stored_row("Project", "proj1", proj),
-            mem,
-        ];
+        let snapshot = vec![make_stored_row("Project", "proj1", proj), mem];
 
         let auth_state = make_auth_state(schema, snapshot);
 
@@ -603,15 +849,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         let proj = json!({"_id": "proj1", "organization": "org-B"});
@@ -654,15 +931,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         let proj = json!({"_id": "proj1", "organization": "org-A"});
@@ -697,12 +1005,8 @@ mod security_tests {
     fn anonymous_owner_policy_denied() {
         let proj = json!({"_id": "proj1", "owner": "alice"});
 
-        let context = policy_evaluation::RecordAuthorizationContext::new(
-            None,
-            "Project",
-            "proj1",
-            proj,
-        );
+        let context =
+            policy_evaluation::RecordAuthorizationContext::new(None, "Project", "proj1", proj);
 
         let result = policy_evaluation::PolicyEvaluator::evaluate_record(
             policy_evaluation::PolicySubject::Owner,
@@ -722,15 +1026,46 @@ mod security_tests {
         use state_contract::FieldType;
 
         let schema = make_schema_with_collections(vec![
-            make_collection("Project", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
-            make_collection("Membership", vec![
-                make_field("_id", FieldType::Primitive { primitive: state_contract::PrimitiveType::String }),
-                make_field("user", FieldType::Reference { collection: "User".into() }),
-                make_field("organization", FieldType::Reference { collection: "Organization".into() }),
-            ]),
+            make_collection(
+                "Project",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
+            make_collection(
+                "Membership",
+                vec![
+                    make_field(
+                        "_id",
+                        FieldType::Primitive {
+                            primitive: state_contract::PrimitiveType::String,
+                        },
+                    ),
+                    make_field(
+                        "user",
+                        FieldType::Reference {
+                            collection: "User".into(),
+                        },
+                    ),
+                    make_field(
+                        "organization",
+                        FieldType::Reference {
+                            collection: "Organization".into(),
+                        },
+                    ),
+                ],
+            ),
         ]);
 
         let proj = json!({"_id": "proj1", "organization": "org-A"});