14 lines
1.0 KiB
TypeScript
14 lines
1.0 KiB
TypeScript
// Why the account module's procedures need no tenant-isolation fixture, for the generated suite's
|
|
// `exempt` list (test/isolation.test.ts): all three are user-scoped and take no organization and no id.
|
|
|
|
export const accountIsolationExempt: Readonly<Record<string, string>> = {
|
|
"account.data.export": "it takes no organization and no id: the only account it exports is the signed-in user's",
|
|
"account.deletion.status": "it takes no organization and no id: it answers only about the signed-in user's account",
|
|
"account.deletion.request": "it takes no organization and no id: the only account it deletes is the signed-in user's",
|
|
"account.analytics.request": "it takes no organization and no id: the only subject it names is the signed-in user",
|
|
"account.analytics.status":
|
|
"it takes no organization; its ticket is signed for the signed-in user, and another's answers NotFound",
|
|
"account.analytics.export":
|
|
"it takes no organization; its ticket is signed for the signed-in user, and another's answers NotFound",
|
|
}
|