snapshot of https://github.com/espocrm/espocrm.git (master, 2026-09-18; blobs > 131072B omitted)

frontend/test/spec/test.acl-manager.js

@@ -0,0 +1,73 @@
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM – Open Source CRM application.
+ * Copyright (C) 2014-2026 EspoCRM, Inc.
+ * Website: https://www.espocrm.com
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ *
+ * The interactive user interfaces in modified source and object code versions
+ * of this program must display Appropriate Legal Notices, as required under
+ * Section 5 of the GNU Affero General Public License version 3.
+ *
+ * In accordance with Section 7(b) of the GNU Affero General Public License version 3,
+ * these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
+ ************************************************************************/
+
+describe('acl-manager', () => {
+    let acl;
+
+    beforeEach(function (done) {
+		require('acl-manager', Acl => {
+			acl = new Acl();
+
+			acl.user = {
+				isAdmin: () => false
+            };
+			done();
+		});
+	});
+
+	it("should check an access properly", () => {
+		acl.set({
+			table: {
+				Lead: {
+					read: 'team',
+					edit: 'own',
+					delete: 'no',
+				},
+				Opportunity: false,
+				Meeting: true
+			}
+		});
+
+		expect(acl.check('Lead', 'read')).toBe(true);
+
+		expect(acl.check('Lead', 'read', false, false)).toBe(true);
+		expect(acl.check('Lead', 'read', false, true)).toBe(true);
+		expect(acl.check('Lead', 'read', true)).toBe(true);
+
+		expect(acl.check('Lead', 'edit')).toBe(true);
+		expect(acl.check('Lead', 'edit', false, true)).toBe(true);
+		expect(acl.check('Lead', 'edit', true, false)).toBe(true);
+
+		expect(acl.check('Lead', 'delete')).toBe(false);
+
+		expect(acl.check('Account', 'edit')).toBe(false);
+
+		expect(acl.check('Opportunity', 'edit')).toBe(false);
+		expect(acl.check('Meeting', 'edit')).toBe(true);
+	});
+});