This commit is contained in:
@@ -0,0 +1,13 @@
|
||||
// Why the account module's procedures need no tenant-isolation fixture, for the generated suite's
|
||||
// `exempt` list (test/isolation.test.ts): all three are user-scoped and take no organization and no id.
|
||||
|
||||
export const accountIsolationExempt: Readonly<Record<string, string>> = {
|
||||
"account.data.export": "it takes no organization and no id: the only account it exports is the signed-in user's",
|
||||
"account.deletion.status": "it takes no organization and no id: it answers only about the signed-in user's account",
|
||||
"account.deletion.request": "it takes no organization and no id: the only account it deletes is the signed-in user's",
|
||||
"account.analytics.request": "it takes no organization and no id: the only subject it names is the signed-in user",
|
||||
"account.analytics.status":
|
||||
"it takes no organization; its ticket is signed for the signed-in user, and another's answers NotFound",
|
||||
"account.analytics.export":
|
||||
"it takes no organization; its ticket is signed for the signed-in user, and another's answers NotFound",
|
||||
}
|
||||
Reference in New Issue
Block a user