internal/policy: add restricted_types behaviour test

Author: Tit Petric

internal/policy/Taskfile.yml

@@ -1,22 +1,15 @@
 ---
 version: "3"
 
-includes:
-  services:
-    taskfile: ../../docker/services/Taskfile.yml
-    dir: ../../docker/services
-
 vars:
   run: .
 
 tasks:
   default:
     desc: "Run tests"
-    deps: [ services:up ]
     requires:
       vars: [run]
     cmds:
-      - defer: { task: services:down }
       - goimports -w .
       - go fmt ./...
       - task: test

internal/policy/apply_test.go

@@ -777,12 +777,17 @@ func testPrepareApplyPolicies(tb testing.TB) (*policy.Service, []testApplyPolici
 			sessMatch: func(t *testing.T, s *user.SessionState) {
 				t.Helper()
 
+				// It should get intersection of allowed/restricted types.
 				want := map[string]user.AccessDefinition{
-					"a": { // It should get intersection of restricted types.
+					"a": {
 						AllowedTypes: []graphql.Type{
 							{Name: "Country", Fields: []string{"code"}},
 							{Name: "Person", Fields: []string{"name"}},
 						},
+						RestrictedTypes: []graphql.Type{
+							{Name: "Dog", Fields: []string{"name", "breed"}},
+							{Name: "Cat", Fields: []string{"name"}},
+						},
 						Limit: user.APILimit{},
 					},
 				}

internal/policy/testdata/policies.json

@@ -49,6 +49,23 @@
               "height"
             ]
           }
+        ],
+        "restricted_types": [
+          {
+            "name": "Dog",
+            "fields": [
+              "name",
+              "breed",
+              "country"
+            ]
+          },
+          {
+            "name": "Cat",
+            "fields": [
+              "name",
+              "country"
+            ]
+          }
         ]
       }
     },
@@ -73,6 +90,21 @@
               "mass"
             ]
           }
+        ],
+        "restricted_types": [
+          {
+            "name": "Dog",
+            "fields": [
+              "name",
+              "breed"
+            ]
+          },
+          {
+            "name": "Cat",
+            "fields": [
+              "name"
+            ]
+          }
         ]
       }
     },