@lightdash/common 0.2572.2 → 0.2573.1

package/dist/cjs/authorization/space/spaceAccessResolver.test.js

@@ -4,518 +4,7 @@ const organizationMemberProfile_1 = require("../../types/organizationMemberProfi
 const projectMemberRole_1 = require("../../types/projectMemberRole");
 const space_1 = require("../../types/space");
 const spaceAccessResolver_1 = require("./spaceAccessResolver");
-const makeInput = (overrides = {}) => ({
-    spaceUuid: 'space-1',
-    inheritsFromOrgOrProject: true,
-    directAccess: [],
-    projectAccess: [],
-    organizationAccess: [],
-    ...overrides,
-});
 describe('resolveSpaceAccess', () => {
-    it('returns empty array for empty inputs', () => {
-        const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput());
-        expect(result).toEqual([]);
-    });
-    describe('admin override', () => {
-        it('org admin gets space ADMIN', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.ADMIN,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.ADMIN);
-            expect(result[0].inheritedFrom).toBe('organization');
-        });
-        it('project admin gets space ADMIN', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.ADMIN,
-                        from: space_1.ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.ADMIN);
-        });
-        it('group admin (project group) gets space ADMIN', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.ADMIN,
-                        from: space_1.ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.ADMIN);
-        });
-        it('admin can access private space even without direct access', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: false,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.ADMIN,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.ADMIN);
-        });
-    });
-    describe('direct access', () => {
-        it('USER_ACCESS role used directly', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: space_1.SpaceMemberRole.EDITOR,
-                        groupUuid: null,
-                        from: space_1.DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-            expect(result[0].hasDirectAccess).toBe(true);
-        });
-        it('GROUP_ACCESS role used when no user role', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: space_1.SpaceMemberRole.EDITOR,
-                        groupUuid: 'group-1',
-                        from: space_1.DirectSpaceAccessOrigin.GROUP_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-            expect(result[0].hasDirectAccess).toBe(true);
-        });
-        it('user + group direct access: user role wins when higher', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: space_1.SpaceMemberRole.EDITOR,
-                        groupUuid: null,
-                        from: space_1.DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: space_1.SpaceMemberRole.VIEWER,
-                        groupUuid: 'group-1',
-                        from: space_1.DirectSpaceAccessOrigin.GROUP_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            // User access takes precedence over group access
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('public space inheritance', () => {
-        it('viewer gets viewer space role', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.VIEWER);
-            expect(result[0].hasDirectAccess).toBe(false);
-            expect(result[0].inheritedFrom).toBe('organization');
-        });
-        it('editor gets editor space role', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.EDITOR,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-        });
-        it('developer gets editor space role', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.DEVELOPER,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-        });
-        it('interactive_viewer gets viewer space role', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.INTERACTIVE_VIEWER,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.VIEWER);
-        });
-    });
-    describe('private space exclusion', () => {
-        it('non-admin without direct access excluded from private space', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: false,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.EDITOR,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(0);
-        });
-        it('private space with direct access works', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: false,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: space_1.SpaceMemberRole.EDITOR,
-                        groupUuid: null,
-                        from: space_1.DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('org MEMBER role', () => {
-        it('org MEMBER with no other access is excluded', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.MEMBER,
-                    },
-                ],
-            }));
-            // MEMBER converts to undefined project role, so no highest role → excluded
-            expect(result).toHaveLength(0);
-        });
-        it('org MEMBER with project access is included', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.EDITOR,
-                        from: space_1.ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('multiple group roles', () => {
-        it('highest group role wins', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                inheritsFromOrgOrProject: true,
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.VIEWER,
-                        from: space_1.ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.EDITOR,
-                        from: space_1.ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result).toHaveLength(1);
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
-        });
-    });
-    describe('inheritedFrom metadata', () => {
-        it('reports organization when org role is highest', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.EDITOR,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('organization');
-        });
-        it('reports project when project role is highest', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.EDITOR,
-                        from: space_1.ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('project');
-        });
-        it('reports group when group project role is highest', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.DEVELOPER,
-                        from: space_1.ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('group');
-        });
-        it('reports space_group when space group access role is highest', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: space_1.SpaceMemberRole.EDITOR,
-                        groupUuid: 'group-1',
-                        from: space_1.DirectSpaceAccessOrigin.GROUP_ACCESS,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('space_group');
-        });
-        it('reports org access when org access is highest', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.DEVELOPER,
-                    },
-                ],
-                directAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: space_1.SpaceMemberRole.VIEWER,
-                        groupUuid: null,
-                        from: space_1.DirectSpaceAccessOrigin.USER_ACCESS,
-                    },
-                ],
-            }));
-            expect(result[0].inheritedFrom).toBe('organization');
-            // Direct user access takes precedence over inherited org role
-            // for the space role, even if the org role is higher.
-            // The org source is reflected in inheritedFrom/inheritedRole.
-            expect(result[0].role).toBe(space_1.SpaceMemberRole.VIEWER);
-        });
-    });
-    describe('projectRole field', () => {
-        it('only considers org + direct project membership (not groups)', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.DEVELOPER,
-                        from: space_1.ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
-                    },
-                ],
-            }));
-            // projectRole should be VIEWER (from org), not DEVELOPER (from group)
-            expect(result[0].projectRole).toBe(projectMemberRole_1.ProjectMemberRole.VIEWER);
-        });
-        it('includes direct project membership in projectRole', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                    },
-                ],
-                projectAccess: [
-                    {
-                        userUuid: 'user-1',
-                        spaceUuid: 'space-1',
-                        role: projectMemberRole_1.ProjectMemberRole.EDITOR,
-                        from: space_1.ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
-                    },
-                ],
-            }));
-            expect(result[0].projectRole).toBe(projectMemberRole_1.ProjectMemberRole.EDITOR);
-        });
-    });
-    describe('multiple users', () => {
-        it('resolves access for multiple users independently', () => {
-            const orgAccess = [
-                {
-                    userUuid: 'user-1',
-                    spaceUuid: 'space-1',
-                    role: organizationMemberProfile_1.OrganizationMemberRole.EDITOR,
-                },
-                {
-                    userUuid: 'user-2',
-                    spaceUuid: 'space-1',
-                    role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
-                },
-            ];
-            const directAccess = [
-                {
-                    userUuid: 'user-2',
-                    spaceUuid: 'space-1',
-                    role: space_1.SpaceMemberRole.ADMIN,
-                    groupUuid: null,
-                    from: space_1.DirectSpaceAccessOrigin.USER_ACCESS,
-                },
-            ];
-            const projectAccess = [];
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeInput({
-                organizationAccess: orgAccess,
-                directAccess,
-                projectAccess,
-            }));
-            expect(result).toHaveLength(2);
-            const user1 = result.find((r) => r.userUuid === 'user-1');
-            const user2 = result.find((r) => r.userUuid === 'user-2');
-            expect(user1?.role).toBe(space_1.SpaceMemberRole.EDITOR);
-            expect(user1?.hasDirectAccess).toBe(false);
-            expect(user2?.role).toBe(space_1.SpaceMemberRole.ADMIN);
-            expect(user2?.hasDirectAccess).toBe(true);
-        });
-    });
-});
-describe('resolveSpaceAccessWithInheritance', () => {
     const makeChainInput = (overrides = {}) => ({
         spaceUuid: 'child-space',
         inheritsFromOrgOrProject: true,
@@ -525,12 +14,12 @@ describe('resolveSpaceAccessWithInheritance', () => {
         ...overrides,
     });
     it('returns empty array for empty inputs', () => {
-        const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput());
+        const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput());
         expect(result).toEqual([]);
     });
     describe('single-space chain (backward compat)', () => {
         it('org admin gets space ADMIN', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                 ],
@@ -546,7 +35,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].role).toBe(space_1.SpaceMemberRole.ADMIN);
         });
         it('direct user access on single space resolves correctly', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -576,7 +65,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('most permissive wins across chain', () => {
         it('USER_ACCESS EDITOR on parent beats USER_ACCESS VIEWER on child', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -616,7 +105,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(true);
         });
         it('GROUP_ACCESS EDITOR on parent beats USER_ACCESS VIEWER on child', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -655,7 +144,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
         });
         it('USER_ACCESS EDITOR on child already wins (child is higher)', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -694,7 +183,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].role).toBe(space_1.SpaceMemberRole.EDITOR);
         });
         it('three-level chain: grandparent ADMIN wins over child VIEWER', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -739,7 +228,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('hasDirectAccess', () => {
         it('is false when user has direct access only on parent (inherited)', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -767,7 +256,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(false);
         });
         it('is true when user has direct access on the leaf space', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -794,7 +283,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(true);
         });
         it('is false when user has group access only on parent', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -823,7 +312,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].inheritedFrom).toBe('parent_space');
         });
         it('is false when user has only project/org access', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                 ],
@@ -841,7 +330,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('inheritedFrom metadata', () => {
         it('reports parent_space when winning role is from ancestor', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -869,7 +358,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].inheritedFrom).toBe('parent_space');
         });
         it('reports parent_space when group access is from ancestor', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
                     {
@@ -898,7 +387,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result[0].hasDirectAccess).toBe(false);
         });
         it('does not report parent_space when winning role is from leaf', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',
@@ -927,7 +416,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('private chain', () => {
         it('no access without direct access on private chain', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 inheritsFromOrgOrProject: false,
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
@@ -951,7 +440,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result).toHaveLength(0);
         });
         it('admin without direct access is excluded (CASL handles admin access)', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 inheritsFromOrgOrProject: false,
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
@@ -967,7 +456,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
             expect(result).toHaveLength(0);
         });
         it('direct access on parent grants access on private child', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 inheritsFromOrgOrProject: false,
                 chainDirectAccess: [
                     { spaceUuid: 'child-space', directAccess: [] },
@@ -998,7 +487,7 @@ describe('resolveSpaceAccessWithInheritance', () => {
     });
     describe('multiple users', () => {
         it('resolves each user independently', () => {
-            const result = (0, spaceAccessResolver_1.resolveSpaceAccessWithInheritance)(makeChainInput({
+            const result = (0, spaceAccessResolver_1.resolveSpaceAccess)(makeChainInput({
                 chainDirectAccess: [
                     {
                         spaceUuid: 'child-space',