test: enforce owner-only employee roles
This commit is contained in:
parent
879a7e0f83
commit
f0629ba1a4
@ -7,4 +7,6 @@ check(src.includes('return await finalize(existingUserId, false, null)'),'existi
|
||||
check(src.includes('retryStatus === "existing"'),'partial/concurrent auth creation retries finalize');
|
||||
check(src.includes('sun_employee_finalize_v28'),'employee finalize RPC remains required');
|
||||
check(!src.includes('if (prep.data?.status !== "new")'),'old early-return bug is removed');
|
||||
check(src.includes('new Set(["manager", "kitchen", "courier", "viewer"])'),'employee endpoint cannot create another company owner/admin');
|
||||
check(!src.includes('new Set(["admin", "manager"'),'admin role is excluded from employee creation');
|
||||
if(bad)process.exit(1);
|
||||
Loading…
Reference in New Issue
Block a user