@lightdash/common 0.2572.2 → 0.2573.1

package/dist/esm/authorization/space/spaceAccessResolver.test.js

@@ -1,519 +1,8 @@
 import { OrganizationMemberRole } from '../../types/organizationMemberProfile';
 import { ProjectMemberRole } from '../../types/projectMemberRole';
 import { DirectSpaceAccessOrigin, ProjectSpaceAccessOrigin, SpaceMemberRole, } from '../../types/space';
-import { resolveSpaceAccess, resolveSpaceAccessWithInheritance, } from './spaceAccessResolver';
-const makeInput = (overrides = {}) => ({
-    spaceUuid: 'space-1',
-    inheritsFromOrgOrProject: true,
-    directAccess: [],
-    projectAccess: [],
-    organizationAccess: [],
-    ...overrides,
-});
+import { resolveSpaceAccess } from './spaceAccessResolver';
 describe('resolveSpaceAccess', () => {
-    it('returns empty array for empty inputs', () => {
-        const result = resolveSpaceAccess(makeInput());
-        expect(result).toEqual([]);
-    });
-    describe('admin override', () => {
-        it('org admin gets space ADMIN', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.ADMIN,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
-            expect(result[0].inheritedFrom).toBe('organization');
-        });
-        it('project admin gets space ADMIN', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.ADMIN,
-                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
-        });
-        it('group admin (project group) gets space ADMIN', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.ADMIN,
-                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
-        });
-        it('admin can access private space even without direct access', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: false,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.ADMIN,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
-        });
-    });
-    describe('direct access', () => {
-        it('USER_ACCESS role used directly', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: SpaceMemberRole.EDITOR,
-                        groupUuid: null,
-                        from: DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-            expect(result[0].hasDirectAccess).toBe(true);
-        });
-        it('GROUP_ACCESS role used when no user role', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: SpaceMemberRole.EDITOR,
-                        groupUuid: 'group-1',
-                        from: DirectSpaceAccessOrigin.GROUP_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-            expect(result[0].hasDirectAccess).toBe(true);
-        });
-        it('user + group direct access: user role wins when higher', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: SpaceMemberRole.EDITOR,
-                        groupUuid: null,
-                        from: DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: SpaceMemberRole.VIEWER,
-                        groupUuid: 'group-1',
-                        from: DirectSpaceAccessOrigin.GROUP_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            // User access takes precedence over group access
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('public space inheritance', () => {
-        it('viewer gets viewer space role', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.VIEWER);
-            expect(result[0].hasDirectAccess).toBe(false);
-            expect(result[0].inheritedFrom).toBe('organization');
-        });
-        it('editor gets editor space role', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.EDITOR,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-        });
-        it('developer gets editor space role', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.DEVELOPER,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-        });
-        it('interactive_viewer gets viewer space role', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.INTERACTIVE_VIEWER,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.VIEWER);
-        });
-    });
-    describe('private space exclusion', () => {
-        it('non-admin without direct access excluded from private space', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: false,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.EDITOR,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(0);
-        });
-        it('private space with direct access works', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: false,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: SpaceMemberRole.EDITOR,
-                        groupUuid: null,
-                        from: DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('org MEMBER role', () => {
-        it('org MEMBER with no other access is excluded', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.MEMBER,
-                    },
-                ],
-            }));
-            // MEMBER converts to undefined project role, so no highest role → excluded
-            expect(result).toHaveLength(0);
-        });
-        it('org MEMBER with project access is included', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.EDITOR,
-                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('multiple group roles', () => {
-        it('highest group role wins', () => {
-            const result = resolveSpaceAccess(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.VIEWER,
-                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.EDITOR,
-                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('inheritedFrom metadata', () => {
-        it('reports organization when org role is highest', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.EDITOR,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('organization');
-        });
-        it('reports project when project role is highest', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.EDITOR,
-                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('project');
-        });
-        it('reports group when group project role is highest', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.DEVELOPER,
-                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('group');
-        });
-        it('reports space_group when space group access role is highest', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: SpaceMemberRole.EDITOR,
-                        groupUuid: 'group-1',
-                        from: DirectSpaceAccessOrigin.GROUP_ACCESS,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('space_group');
-        });
-        it('reports org access when org access is highest', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.DEVELOPER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: SpaceMemberRole.VIEWER,
-                        groupUuid: null,
-                        from: DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('organization');
-            // Direct user access takes precedence over inherited org role
-            // for the space role, even if the org role is higher.
-            // The org source is reflected in inheritedFrom/inheritedRole.
-            expect(result[0].role).toBe(SpaceMemberRole.VIEWER);
-        });
-    });
-    describe('projectRole field', () => {
-        it('only considers org + direct project membership (not groups)', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.DEVELOPER,
-                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            // projectRole should be VIEWER (from org), not DEVELOPER (from group)
-            expect(result[0].projectRole).toBe(ProjectMemberRole.VIEWER);
-        });
-        it('includes direct project membership in projectRole', () => {
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: ProjectMemberRole.EDITOR,
-                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result[0].projectRole).toBe(ProjectMemberRole.EDITOR);
-        });
-    });
-    describe('multiple users', () => {
-        it('resolves access for multiple users independently', () => {
-            const orgAccess = [
-                {
-                    userUuid: 'user-1',
-                    spaceUuid: 'space-1',
-                    role: OrganizationMemberRole.EDITOR,
-                },
-                {
-                    userUuid: 'user-2',
-                    spaceUuid: 'space-1',
-                    role: OrganizationMemberRole.VIEWER,
-                },
-            ];
-            const directAccess = [
-                {
-                    userUuid: 'user-2',
-                    spaceUuid: 'space-1',
-                    role: SpaceMemberRole.ADMIN,
-                    groupUuid: null,
-                    from: DirectSpaceAccessOrigin.USER_ACCESS,
-                },
-            ];
-            const projectAccess = [];
-            const result = resolveSpaceAccess(makeInput({
-                organizationAccess: orgAccess,
-                directAccess,
-                projectAccess,
-            }));
-            expect(result).toHaveLength(2);
-            const user1 = result.find((r) => r.userUuid === 'user-1');
-            const user2 = result.find((r) => r.userUuid === 'user-2');
-            expect(user1?.role).toBe(SpaceMemberRole.EDITOR);
-            expect(user1?.hasDirectAccess).toBe(false);
-            expect(user2?.role).toBe(SpaceMemberRole.ADMIN);
-            expect(user2?.hasDirectAccess).toBe(true);
-        });
-    });
-});
-describe('resolveSpaceAccessWithInheritance', () => {
     const makeChainInput = (overrides = {}) => ({
         spaceUuid: 'child-space',
         inheritsFromOrgOrProject: true,
@@ -523,12 +12,12 @@ describe('resolveSpaceAccessWithInheritance', () => {
         ...overrides,
     });
     it('returns empty array for empty inputs', () => {
-        const result = resolveSpaceAccessWithInheritance(makeChainInput());
+        const result = resolveSpaceAccess(makeChainInput());
         expect(result).toEqual([]);
     });
     describe('single-space chain (backward compat)', () => {
         it('org admin gets space ADMIN', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                 ],
@@ -544,7 +33,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
         });
         it('direct user access on single space resolves correctly', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -574,7 +63,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('most permissive wins across chain', () => {
         it('USER_ACCESS EDITOR on parent beats USER_ACCESS VIEWER on child', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -614,7 +103,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(true);
         });
         it('GROUP_ACCESS EDITOR on parent beats USER_ACCESS VIEWER on child', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -653,7 +142,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
         });
         it('USER_ACCESS EDITOR on child already wins (child is higher)', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -692,7 +181,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
         });
         it('three-level chain: grandparent ADMIN wins over child VIEWER', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -737,7 +226,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('hasDirectAccess', () => {
         it('is false when user has direct access only on parent (inherited)', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -765,7 +254,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(false);
         });
         it('is true when user has direct access on the leaf space', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -792,7 +281,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(true);
         });
         it('is false when user has group access only on parent', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -821,7 +310,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].inheritedFrom).toBe('parent_space');
         });
         it('is false when user has only project/org access', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                 ],
@@ -839,7 +328,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('inheritedFrom metadata', () => {
         it('reports parent_space when winning role is from ancestor', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -867,7 +356,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].inheritedFrom).toBe('parent_space');
         });
         it('reports parent_space when group access is from ancestor', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -896,7 +385,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(false);
         });
         it('does not report parent_space when winning role is from leaf', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -925,7 +414,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('private chain', () => {
         it('no access without direct access on private chain', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 inheritsFromOrgOrProject: false,
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
@@ -949,7 +438,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result).toHaveLength(0);
         });
         it('admin without direct access is excluded (CASL handles admin access)', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 inheritsFromOrgOrProject: false,
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
@@ -965,7 +454,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result).toHaveLength(0);
         });
         it('direct access on parent grants access on private child', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 inheritsFromOrgOrProject: false,
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
@@ -996,7 +485,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('multiple users', () => {
         it('resolves each user independently', () => {
-            const result = resolveSpaceAccessWithInheritance(makeChainInput({
+            const result = resolveSpaceAccess(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',