typesec-macro 0.10.0

Procedural macros for typesec — derive(TypesecRole) and policy! macro
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use quote::quote;

use crate::policy_dsl::policy_impl;
use crate::shared::pascal_to_snake;

#[test]
fn converts_pascal_case_role_names_to_snake_case() {
    assert_eq!(pascal_to_snake("AnalystReadOnly"), "analyst_read_only");
    assert_eq!(pascal_to_snake("AITrainer"), "ai_trainer");
    assert_eq!(pascal_to_snake("HTTPAuditLog"), "http_audit_log");
    assert_eq!(pascal_to_snake("Reader"), "reader");
}

#[test]
fn policy_macro_rejects_unknown_parent_role() {
    let err = policy_impl(quote! {
        role Writer extends Reader {
            can [write] on ["docs/*"];
        }
    })
    .expect_err("unknown parent should fail");

    assert!(err.to_string().contains("unknown role `Reader`"));
}

#[test]
fn policy_macro_rejects_cyclic_inheritance() {
    let err = policy_impl(quote! {
        role Reader extends Writer {
            can [read] on ["docs/*"];
        }
        role Writer extends Reader {
            can [write] on ["docs/*"];
        }
    })
    .expect_err("inheritance cycle should fail");

    assert!(err.to_string().contains("circular role inheritance"));
}