lucicfg/testdata/acl/normalize_acls.star

load('@stdlib//internal/luci/lib/acl.star', 'acl', 'aclimpl')


def test_works():
  # Empty list is fine.
  assert.eq(aclimpl.normalize_acls([]), [])

  # Sorts and dedups.
  ents = [
      acl.entry(acl.BUILDBUCKET_WRITER, groups=['a', 'b'], users='a@example.com'),
      acl.entry(acl.BUILDBUCKET_READER, users='b@example.com'),
      acl.entry(acl.BUILDBUCKET_READER, users='a@example.com'),
      acl.entry(acl.BUILDBUCKET_READER, users=['a@example.com', 'c@example.com']),
      acl.entry(acl.BUILDBUCKET_READER),  # should be ignored
      acl.entry(acl.BUILDBUCKET_READER, groups='b'),
      acl.entry(acl.BUILDBUCKET_READER, groups='a'),
  ]
  assert.eq([(e.role, e.user, e.group) for e in aclimpl.normalize_acls(ents)], [
      (acl.BUILDBUCKET_READER, None, 'a'),
      (acl.BUILDBUCKET_READER, None, 'b'),
      (acl.BUILDBUCKET_READER, 'a@example.com', None),
      (acl.BUILDBUCKET_READER, 'b@example.com', None),
      (acl.BUILDBUCKET_READER, 'c@example.com', None),
      (acl.BUILDBUCKET_WRITER, None, 'a'),
      (acl.BUILDBUCKET_WRITER, None, 'b'),
      (acl.BUILDBUCKET_WRITER, 'a@example.com', None),
  ])


test_works()