secure_privacy 0.1.2

Privacy controls for classification, consent, retention, pseudonymization, and redaction.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

//! BDD tests for consent policy (Milestone 6).

use secure_privacy::consent::{ConsentDecision, ConsentPolicy, ConsentPurpose};
use security_events::sink::InMemorySink;

// --- Feature: Consent Policy ---

#[test]
fn given_consent_granted_when_processing_checked_then_allowed() {
    let sink = InMemorySink::new();
    let purpose = ConsentPurpose::new("analytics");
    let mut policy = ConsentPolicy::new(purpose.clone());
    policy.grant();

    let decision = policy.check_consent(&purpose, &sink);
    assert_eq!(decision, ConsentDecision::Allowed);
    assert!(sink.events().is_empty(), "No event for allowed consent");
}

#[test]
fn given_consent_denied_when_processing_checked_then_denied_with_event() {
    let sink = InMemorySink::new();
    let purpose = ConsentPurpose::new("analytics");
    let mut policy = ConsentPolicy::new(purpose.clone());
    policy.deny();

    let decision = policy.check_consent(&purpose, &sink);
    assert_eq!(decision, ConsentDecision::Denied);
    assert_eq!(sink.events().len(), 1, "Denial should emit an event");
}

#[test]
fn given_no_consent_record_when_processing_checked_then_not_collected() {
    let sink = InMemorySink::new();
    let purpose = ConsentPurpose::new("analytics");
    let policy = ConsentPolicy::new(purpose.clone());

    let decision = policy.check_consent(&purpose, &sink);
    assert_eq!(decision, ConsentDecision::NotCollected);
    assert_eq!(sink.events().len(), 1, "NotCollected should emit an event");
}

#[test]
fn given_consent_granted_then_withdrawn_when_processing_checked_then_withdrawn() {
    let sink = InMemorySink::new();
    let purpose = ConsentPurpose::new("analytics");
    let mut policy = ConsentPolicy::new(purpose.clone());
    policy.grant();
    policy.withdraw();

    let decision = policy.check_consent(&purpose, &sink);
    assert_eq!(decision, ConsentDecision::Withdrawn);
    assert_eq!(sink.events().len(), 1, "Withdrawal should emit an event");
}

#[test]
fn given_consent_for_analytics_when_used_for_marketing_then_purpose_mismatch() {
    let sink = InMemorySink::new();
    let analytics = ConsentPurpose::new("analytics");
    let marketing = ConsentPurpose::new("marketing");
    let mut policy = ConsentPolicy::new(analytics);
    policy.grant();

    let decision = policy.check_consent(&marketing, &sink);
    assert_eq!(decision, ConsentDecision::PurposeMismatch);
    assert_eq!(
        sink.events().len(),
        1,
        "Purpose mismatch should emit an event"
    );
}