package auth

import "testing"

func TestDefaultStaffRoleAllows(t *testing.T) {
	t.Parallel()
	if !DefaultStaffRoleAllows(StaffRoleAdmin, "billing.checkout") {
		t.Fatal("admin allows all")
	}
	if !DefaultStaffRoleAllows(StaffRoleDeveloper, "catalog.vector_categories") {
		t.Fatal("developer allows debug catalog")
	}
	if DefaultStaffRoleAllows(StaffRoleSupportStaff, "billing.checkout") {
		t.Fatal("support_staff denies billing checkout")
	}
	if !DefaultStaffRoleAllows(StaffRoleSupportStaff, "support.center") {
		t.Fatal("support_staff allows support.center")
	}
	if DefaultStaffRoleAllows("", "dashboard.overview") {
		t.Fatal("unknown role denies")
	}
}

func TestStaffRoleAllowsAdminRoute(t *testing.T) {
	t.Parallel()
	if !StaffRoleAllowsAdminRoute(StaffRoleAdmin, "/admin/billing") {
		t.Fatal("admin billing")
	}
	if StaffRoleAllowsAdminRoute(StaffRoleSupportStaff, "/admin/billing") {
		t.Fatal("support_staff no billing")
	}
	if !StaffRoleAllowsAdminRoute(StaffRoleSupportStaff, "/admin/support") {
		t.Fatal("support_staff support queue")
	}
	if StaffRoleFromPlatformAdmin(true) != StaffRoleAdmin {
		t.Fatal("platform admin maps to admin")
	}
	if StaffRoleFromPlatformAdmin(false) != "" {
		t.Fatal("non-admin maps empty")
	}
}