35 lines
1.5 KiB
TypeScript
35 lines
1.5 KiB
TypeScript
import {
|
|
type PrivacyRetentionPolicyFieldKey,
|
|
type RetentionPolicyLimitCarrier,
|
|
privacyRetentionLocalAllowsLowerLevel,
|
|
privacyRetentionParentAllowsField
|
|
} from "../src/features/privacy/policyLogic";
|
|
|
|
function assert(condition: unknown, message: string): void {
|
|
if (!condition) throw new Error(message);
|
|
}
|
|
|
|
const field: PrivacyRetentionPolicyFieldKey = "raw_campaign_json_retention_days";
|
|
|
|
const parentPolicy: RetentionPolicyLimitCarrier = {
|
|
allow_lower_level_limits: {
|
|
store_raw_campaign_json: true,
|
|
raw_campaign_json_retention_days: false,
|
|
generated_eml_retention_days: true,
|
|
stored_report_detail_retention_days: true,
|
|
mock_mailbox_retention_days: true,
|
|
audit_detail_retention_days: true,
|
|
audit_detail_level: true
|
|
}
|
|
};
|
|
|
|
const localPatch: RetentionPolicyLimitCarrier = {
|
|
allow_lower_level_limits: { raw_campaign_json_retention_days: true }
|
|
};
|
|
|
|
assert(!privacyRetentionParentAllowsField(parentPolicy, field), "parent lock should disable the local field control");
|
|
assert(!privacyRetentionLocalAllowsLowerLevel(localPatch, parentPolicy, field, false), "local allow=true must not override a parent lock");
|
|
assert(privacyRetentionParentAllowsField(null, field), "missing parent policy should allow local field controls");
|
|
assert(privacyRetentionLocalAllowsLowerLevel({}, null, field, false), "unlocked inherited lower-level controls should remain enabled");
|
|
assert(!privacyRetentionLocalAllowsLowerLevel({ allow_lower_level_limits: { [field]: false } }, null, field, true), "system policy can disable lower-level choices");
|