kevin-asprec 430c8ee7f8 test(05-04): add comprehensive API RBAC integration tests ...

- 43 tests covering authentication (401), authorization (403), and tenant isolation
- withPermission HOF returns 401 for unauthenticated, 403 for unauthorized
- withPortalAuth returns 401/403 for non-portal users
- All 5 roles (ADMIN, OFFICE_STAFF, COLLECTOR, TECHNICIAN, CLIENT) tested against all subjects
- COLLECTOR cannot access billing/reports/subscriber management writes
- TECHNICIAN cannot access payment/invoice/report endpoints
- CLIENT can only read own data, create tickets
- Two-tenant isolation: subscribers, invoices, payments invisible across tenants
- Cross-tenant ID lookup returns null (no data leakage)
- INFRA-03 satisfied

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-05 17:44:19 +08:00

.planning

docs(05-05): complete End-to-End Workflow Tests plan

2026-03-05 17:43:36 +08:00

prisma

feat(05-03): TicketComment model and portal ticket service

2026-03-05 17:33:13 +08:00

public

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

src

test(05-04): add comprehensive API RBAC integration tests

2026-03-05 17:44:19 +08:00

.dockerignore

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

.env

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

.env.example

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

docker-compose.yml

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

Dockerfile

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

eslint.config.mjs

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

next-env.d.ts

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

next.config.ts

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

package-lock.json

feat(01-04): CASL permission definitions and ability factory

2026-03-04 18:52:39 +08:00

package.json

feat(01-04): CASL permission definitions and ability factory

2026-03-04 18:52:39 +08:00

postcss.config.mjs

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

tsconfig.json

feat(01-01): Next.js 15 project with Docker Compose dev environment

2026-03-04 18:24:59 +08:00

vitest.config.ts

fix(01): use localhost DATABASE_URL for vitest host-side test execution

2026-03-04 18:48:43 +08:00

Description

No description provided

819 KiB

Languages

TypeScript 96.6%

Shell 3.3%