@jmruthers/pace-core 0.5.76 → 0.5.78

package/src/rbac/providers/__tests__/RBACProvider.test.tsx

@@ -1,1186 +0,0 @@
-/**
- * @file RBACProvider Tests
- * @package @jmruthers/pace-core
- * @module Providers/RBACProvider
- * @since 1.0.0
- * 
- * Comprehensive tests for the RBACProvider component covering all critical functionality.
- */
-
-import { render, screen, waitFor } from '@testing-library/react';
-import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { ReactNode } from 'react';
-import { RBACProvider } from '../RBACProvider';
-import { useRBAC } from '../../hooks/useRBAC';
-
-// Mock the RBAC hooks
-vi.mock('../../hooks/useRBAC', () => ({
-  useRBAC: vi.fn(),
-}));
-
-// Mock the auth provider
-vi.mock('../../../providers/UnifiedAuthProvider', () => ({
-  useUnifiedAuth: vi.fn(),
-}));
-
-// Mock the organisation provider
-vi.mock('../../../providers/OrganisationProvider', () => ({
-  useOrganisations: vi.fn(),
-}));
-
-// Mock the event provider
-vi.mock('../../../providers/EventProvider', () => ({
-  useEvents: vi.fn(),
-}));
-
-// Mock the RBAC API
-vi.mock('../../api', () => ({
-  setupRBAC: vi.fn(),
-  check_page_permission: vi.fn(),
-  getPermissionMap: vi.fn(),
-  isPermitted: vi.fn(),
-}));
-
-// Test component that uses RBAC context
-const TestComponent = () => {
-  const rbac = useRBAC();
-
-  return (
-    <div data-testid="test-component">
-      <div data-testid="permissions">
-        {rbac.permissions.permissions?.join(', ') || 'No permissions'}
-      </div>
-      <div data-testid="can-read-users">
-        {rbac.can.can('read:users') ? 'Can read users' : 'Cannot read users'}
-      </div>
-      <div data-testid="organisation-permissions">
-        {rbac.organisationPermissions.permissions?.join(', ') || 'No org permissions'}
-      </div>
-      <div data-testid="can-access-org">
-        {rbac.organisationSecurity.canAccessOrganisation() ? 'Can access org' : 'Cannot access org'}
-      </div>
-    </div>
-  );
-};
-
-describe('RBACProvider', () => {
-  const mockUseRBAC = vi.mocked(useRBAC);
-
-      describe('Basic functionality', () => {
-    it('should provide RBAC context to children', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users', 'write:events'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation', 'write:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-      expect(screen.getByTestId('permissions')).toHaveTextContent('read:users, write:events');
-      expect(screen.getByTestId('can-read-users')).toHaveTextContent('Can read users');
-      expect(screen.getByTestId('organisation-permissions')).toHaveTextContent('read:organisation, write:organisation');
-      expect(screen.getByTestId('can-access-org')).toHaveTextContent('Can access org');
-    });
-
-    it('should handle loading states', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: [],
-          isLoading: true,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn(),
-          canAny: vi.fn(),
-          canAll: vi.fn(),
-          isLoading: true,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: [],
-          isLoading: true,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(false),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn(),
-          canAccessEvent: vi.fn(),
-          isOrganisationAdmin: vi.fn(),
-          isEventAdmin: vi.fn(),
-          isLoading: true,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-      expect(screen.getByTestId('permissions')).toHaveTextContent('No permissions');
-    });
-
-    it('should handle error states', () => {
-      const error = new Error('RBAC error');
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: [],
-          isLoading: false,
-          error,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn(),
-          canAny: vi.fn(),
-          canAll: vi.fn(),
-          isLoading: false,
-          error,
-        },
-        organisationPermissions: {
-          permissions: [],
-          isLoading: false,
-          error,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(false),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn(),
-          canAccessEvent: vi.fn(),
-          isOrganisationAdmin: vi.fn(),
-          isEventAdmin: vi.fn(),
-          isLoading: false,
-          error,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-      expect(screen.getByTestId('permissions')).toHaveTextContent('No permissions');
-    });
-  });
-
-  describe('Context updates', () => {
-    it('should update context when permissions change', async () => {
-      // Initial state
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      const { rerender } = render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('permissions')).toHaveTextContent('read:users');
-
-      // Updated state
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users', 'write:events'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation', 'write:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      rerender(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      await waitFor(() => {
-        expect(screen.getByTestId('permissions')).toHaveTextContent('read:users, write:events');
-      });
-    });
-
-    it('should handle permission refetch', async () => {
-      const mockRefetch = vi.fn();
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: mockRefetch,
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      // Trigger refetch
-      mockRefetch();
-
-      expect(mockRefetch).toHaveBeenCalled();
-    });
-  });
-
-  describe('Error handling', () => {
-    it('should handle RBAC initialization errors', () => {
-      mockUseRBAC.mockImplementation(() => {
-        throw new Error('RBAC initialization failed');
-      });
-
-      expect(() => {
-        render(
-          <RBACProvider>
-            <TestComponent />
-          </RBACProvider>
-        );
-      }).toThrow('RBAC initialization failed');
-    });
-
-    it('should handle permission check errors gracefully', () => {
-      const error = new Error('Permission check failed');
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: [],
-          isLoading: false,
-          error,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(false),
-          canAny: vi.fn().mockReturnValue(false),
-          canAll: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error,
-        },
-        organisationPermissions: {
-          permissions: [],
-          isLoading: false,
-          error,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(false),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(false),
-          canAccessEvent: vi.fn().mockReturnValue(false),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-  });
-
-  describe('Performance', () => {
-    it('should maintain stable references for same props', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      const { rerender } = render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      const firstRender = screen.getByTestId('test-component');
-      rerender(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-      const secondRender = screen.getByTestId('test-component');
-
-      expect(firstRender).toBe(secondRender);
-    });
-
-    it('should handle rapid context changes efficiently', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      const { rerender } = render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      // Rapid changes should be handled efficiently
-      for (let i = 0; i < 10; i++) {
-        rerender(
-          <RBACProvider>
-            <TestComponent />
-          </RBACProvider>
-        );
-      }
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-  });
-
-  describe('Edge cases', () => {
-    it('should handle empty children', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: [],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn(),
-          canAny: vi.fn(),
-          canAll: vi.fn(),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: [],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(false),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn(),
-          canAccessEvent: vi.fn(),
-          isOrganisationAdmin: vi.fn(),
-          isEventAdmin: vi.fn(),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      const { container } = render(
-        <RBACProvider>
-          {null}
-        </RBACProvider>
-      );
-
-      expect(container.firstChild).toBeNull();
-    });
-
-    it('should handle undefined children', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: [],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn(),
-          canAny: vi.fn(),
-          canAll: vi.fn(),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: [],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(false),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn(),
-          canAccessEvent: vi.fn(),
-          isOrganisationAdmin: vi.fn(),
-          isEventAdmin: vi.fn(),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      const { container } = render(
-        <RBACProvider>
-          {undefined}
-        </RBACProvider>
-      );
-
-      expect(container.firstChild).toBeNull();
-    });
-  });
-
-  describe('Accessibility', () => {
-    it('should maintain accessibility throughout context changes', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-      expect(screen.getByTestId('permissions')).toBeInTheDocument();
-      expect(screen.getByTestId('can-read-users')).toBeInTheDocument();
-    });
-  });
-
-  describe('[integration] Provider Initialization', () => {
-    it('initializes without errors', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-      expect(screen.getByTestId('permissions')).toBeInTheDocument();
-    });
-
-    it('handles missing dependencies gracefully', () => {
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: [],
-          isLoading: true,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(false),
-          canAny: vi.fn().mockReturnValue(false),
-          canAll: vi.fn().mockReturnValue(false),
-          isLoading: true,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: [],
-          isLoading: true,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(false),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(false),
-          canAccessEvent: vi.fn().mockReturnValue(false),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: true,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-  });
-
-  describe('[integration] Concurrent Permission Checks', () => {
-    it('handles multiple permission checks simultaneously', () => {
-      const mockCan = vi.fn().mockReturnValue(true);
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: mockCan,
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-
-    it('maintains performance under high permission check load', () => {
-      const mockCan = vi.fn().mockReturnValue(true);
-      let callCount = 0;
-      
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: () => {
-            callCount++;
-            return mockCan();
-          },
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-  });
-
-  describe('[integration] Permission Cache Management', () => {
-    it('provides cache invalidation functionality', () => {
-      const mockClearCache = vi.fn();
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: mockClearCache,
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-      expect(mockClearCache).toBeDefined();
-    });
-
-    it('handles cache validation states', () => {
-      let cacheValid = false;
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn(() => cacheValid),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      const { rerender } = render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-
-      // Toggle cache validity
-      cacheValid = true;
-      rerender(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-  });
-
-  describe('[integration] Security and Access Control', () => {
-    it('validates organization access', () => {
-      const mockCanAccessOrg = vi.fn().mockReturnValue(true);
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: mockCanAccessOrg,
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(mockCanAccessOrg).toBeDefined();
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-
-    it('validates event access', () => {
-      const mockCanAccessEvent = vi.fn().mockReturnValue(true);
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: mockCanAccessEvent,
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(mockCanAccessEvent).toBeDefined();
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-
-    it('checks admin roles correctly', () => {
-      const mockIsOrgAdmin = vi.fn().mockReturnValue(false);
-      const mockIsEventAdmin = vi.fn().mockReturnValue(false);
-      
-      mockUseRBAC.mockReturnValue({
-        permissions: {
-          permissions: ['read:users'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: mockIsOrgAdmin,
-          isEventAdmin: mockIsEventAdmin,
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(mockIsOrgAdmin).toBeDefined();
-      expect(mockIsEventAdmin).toBeDefined();
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-  });
-
-  describe('[integration] Rapid State Changes', () => {
-    it('handles rapid permission updates without errors', () => {
-      let permissionState = { permissions: ['read:users'], isLoading: false, error: null, refetch: vi.fn() };
-      
-      mockUseRBAC.mockReturnValue({
-        permissions: permissionState,
-        can: {
-          can: vi.fn().mockReturnValue(true),
-          canAny: vi.fn().mockReturnValue(true),
-          canAll: vi.fn().mockReturnValue(true),
-          isLoading: false,
-          error: null,
-        },
-        organisationPermissions: {
-          permissions: ['read:organisation'],
-          isLoading: false,
-          error: null,
-          refetch: vi.fn(),
-        },
-        permissionCache: {
-          getCachedPermission: vi.fn(),
-          setCachedPermission: vi.fn(),
-          clearCache: vi.fn(),
-          isCacheValid: vi.fn().mockReturnValue(true),
-        },
-        organisationSecurity: {
-          canAccessOrganisation: vi.fn().mockReturnValue(true),
-          canAccessEvent: vi.fn().mockReturnValue(true),
-          isOrganisationAdmin: vi.fn().mockReturnValue(false),
-          isEventAdmin: vi.fn().mockReturnValue(false),
-          isLoading: false,
-          error: null,
-        },
-      });
-
-      const { rerender } = render(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-
-      // Rapid updates
-      permissionState = { permissions: ['write:users'], isLoading: false, error: null, refetch: vi.fn() };
-      rerender(
-        <RBACProvider>
-          <TestComponent />
-        </RBACProvider>
-      );
-
-      expect(screen.getByTestId('test-component')).toBeInTheDocument();
-    });
-  });
-});