8b84378fe1
Elevate MiroFish/CrowdSight from single-container dev to a SaaS foundation: - Local memory backend (Zep-compatible): memory services/models, local graph builder + updater, AgentActivity seam, import-boundary isolation; Zep stays default, local is opt-in behind MEMORY_BACKEND. Semantic parity not yet proven. - Durable product persistence: projects/simulations/reports schema (migration 0007) + tenant/owner-scoped ProductRepository + dual-write + scoped_project read-first + ArtifactStore abstraction; durable JobQueue + worker.py. - SaaS hardening: durable RateLimiter (wired to login), UsageService (LLM accounting), redacted AuditService, idempotency, CORS allowlist, safe API errors, single-use PasswordResetService + endpoints (covers invite-pending). - Exactly 3 roles (super_admin/admin/user) with tenant authz policy. - Admin UI: GET/POST/PATCH /api/admin/users + GET/PUT /api/admin/settings (super-admin only, encrypted/masked); AdminView.vue + SettingsView.vue with admin/super-admin route guards, th/en i18n. - Production deploy topology: multi-stage Dockerfile (frontend build + gunicorn wsgi + nginx SPA-proxy + supervisord worker), backend/wsgi.py, gunicorn dep. Backend 197 passed; frontend 10 tests + build green. ruff unavailable (gap). No commit of credentials; secrets handled via env/.env.example. Deferred: Zep semantic A/B parity, object storage cutover, mobile QA, EasyPanel container build of deploy topology.
69 lines
2.7 KiB
Python
69 lines
2.7 KiB
Python
import tempfile
|
|
from pathlib import Path
|
|
|
|
from app.models.project import ProjectManager
|
|
|
|
|
|
def test_project_manager_lists_only_requested_tenant_and_owner():
|
|
original_dir = ProjectManager.PROJECTS_DIR
|
|
with tempfile.TemporaryDirectory() as temp_dir:
|
|
ProjectManager.PROJECTS_DIR = str(Path(temp_dir) / "projects")
|
|
try:
|
|
project_a = ProjectManager.create_project(
|
|
"A1", organization_id="org-a", owner_user_id="user-a"
|
|
)
|
|
ProjectManager.create_project(
|
|
"A2", organization_id="org-a", owner_user_id="user-b"
|
|
)
|
|
ProjectManager.create_project(
|
|
"B1", organization_id="org-b", owner_user_id="user-c"
|
|
)
|
|
|
|
org_a = ProjectManager.list_projects(organization_id="org-a")
|
|
assert {project.name for project in org_a} == {"A1", "A2"}
|
|
own = ProjectManager.list_projects(
|
|
organization_id="org-a", owner_user_id="user-a"
|
|
)
|
|
assert [project.project_id for project in own] == [project_a.project_id]
|
|
finally:
|
|
ProjectManager.PROJECTS_DIR = original_dir
|
|
|
|
|
|
def test_project_scope_lookup_fails_closed_for_legacy_unowned_records():
|
|
original_dir = ProjectManager.PROJECTS_DIR
|
|
with tempfile.TemporaryDirectory() as temp_dir:
|
|
ProjectManager.PROJECTS_DIR = str(Path(temp_dir) / "projects")
|
|
try:
|
|
legacy = ProjectManager.create_project("Legacy")
|
|
assert ProjectManager.get_project_for_scope(
|
|
legacy.project_id, organization_id="org-a", owner_user_id="user-a"
|
|
) is None
|
|
finally:
|
|
ProjectManager.PROJECTS_DIR = original_dir
|
|
|
|
|
|
def test_delete_project_requires_matching_organization_and_owner_scope():
|
|
original_dir = ProjectManager.PROJECTS_DIR
|
|
with tempfile.TemporaryDirectory() as temp_dir:
|
|
ProjectManager.PROJECTS_DIR = str(Path(temp_dir) / "projects")
|
|
try:
|
|
project = ProjectManager.create_project(
|
|
"Tenant project", organization_id="org-a", owner_user_id="user-a"
|
|
)
|
|
|
|
assert ProjectManager.delete_project(
|
|
project.project_id,
|
|
organization_id="org-b",
|
|
owner_user_id="user-b",
|
|
) is False
|
|
assert ProjectManager.get_project(project.project_id) is not None
|
|
|
|
assert ProjectManager.delete_project(
|
|
project.project_id,
|
|
organization_id="org-a",
|
|
owner_user_id="user-a",
|
|
) is True
|
|
assert ProjectManager.get_project(project.project_id) is None
|
|
finally:
|
|
ProjectManager.PROJECTS_DIR = original_dir
|