From f0629ba1a47dea633a5537a09efce5d09f84d381 Mon Sep 17 00:00:00 2001 From: pavlov346346-source Date: Sat, 12 Sep 2026 08:53:42 +0300 Subject: [PATCH] test: enforce owner-only employee roles --- tests/employee-create-v1774.mjs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/tests/employee-create-v1774.mjs b/tests/employee-create-v1774.mjs index 82a9847..12ea70f 100644 --- a/tests/employee-create-v1774.mjs +++ b/tests/employee-create-v1774.mjs @@ -7,4 +7,6 @@ check(src.includes('return await finalize(existingUserId, false, null)'),'existi check(src.includes('retryStatus === "existing"'),'partial/concurrent auth creation retries finalize'); check(src.includes('sun_employee_finalize_v28'),'employee finalize RPC remains required'); check(!src.includes('if (prep.data?.status !== "new")'),'old early-return bug is removed'); -if(bad)process.exit(1); +check(src.includes('new Set(["manager", "kitchen", "courier", "viewer"])'),'employee endpoint cannot create another company owner/admin'); +check(!src.includes('new Set(["admin", "manager"'),'admin role is excluded from employee creation'); +if(bad)process.exit(1); \ No newline at end of file