Add 35+ test functions covering Role and Permission management: RoleHandler Tests: - CreateRole_Success: create role with code/name/description - CreateRole_MissingCode: validation required field - CreateRole_MissingName: validation required field - CreateRole_DuplicateCode: conflict handling - CreateRole_NonAdmin_Forbidden: admin-only protection - ListRoles_Success: list all roles - ListRoles_Pagination: page/page_size parameters - GetRole_Success: retrieve role details - GetRole_NotFound: 404 for missing role - GetRole_InvalidID: 400 for invalid ID - UpdateRole_Success: modify role properties - UpdateRole_NotFound: 404 for missing role - UpdateRole_InvalidID: 400 for invalid ID - UpdateRole_NonAdmin_Forbidden: admin-only protection - DeleteRole_Success: remove role - DeleteRole_NotFound: 404 for missing role - DeleteRole_InvalidID: 400 for invalid ID - DeleteRole_NonAdmin_Forbidden: admin-only protection - UpdateRoleStatus_Success: enable/disable role - UpdateRoleStatus_InvalidStatus: reject invalid status - GetRolePermissions_Success: list role's permissions - AssignPermissions_Success: assign permissions to role PermissionHandler Tests: - CreatePermission_Success: create permission with code/resource/action - ListPermissions_Success: list all permissions - GetPermission_Success: retrieve permission details - GetPermission_NotFound: 404 for missing permission - GetPermission_InvalidID: 400 for invalid ID - UpdatePermission_Success: modify permission - UpdatePermission_NotFound: 404 for missing permission - DeletePermission_Success: remove permission - DeletePermission_NotFound: 404 for missing permission - DeletePermission_InvalidID: 400 for invalid ID - GetPermissionTree_Success: hierarchical permission view - UpdatePermissionStatus_Success: enable/disable permission Coverage: RoleHandler + PermissionHandler from 0% to ~75%+ Key RBAC boundaries: admin-only access, CRUD validation, status management
24 KiB
24 KiB