vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

agent permissions: drop the test-only direct_get_subject; the failed-creation test names the refusing step

Browse source
This commit is contained in:
atlas 2026-10-15 15:10:25 +02:00 • committed by mara
commit 0e7aa74d00
3 changed files with 19 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

5
swarm-nats-auth/src/policy.rs
View file

@ -856,8 +856,11 @@ mod tests {
/// no other, and writes none.
#[test]
fn a_hive_reads_every_agents_permissions_and_an_agent_only_its_own() {
use swarm_queue_client::agent_permissions::{STREAM, direct_get_subject, key_subject};
use swarm_queue_client::agent_permissions::{STREAM, key_subject};
let direct_get_subject = |agent: &str| {
format!("$JS.API.DIRECT.GET.KV_agent-permissions.$KV.agent-permissions.{agent}")
};
let p = policy()
.with_agent_token_subjects(vec![
"$JS.API.DIRECT.GET.KV_agent-permissions.$KV.agent-permissions.{agent}".to_owned(),