add partial denied

Author: dsherret

tests/specs/permission/ignore_env/config/__test__.jsonc

@@ -0,0 +1,8 @@
+{
+  "envs": {
+    "VAR1": "1",
+    "VAR2": "2"
+  },
+  "args": "run --quiet -P main.ts",
+  "output": "undefined\nundefined\n[Object: null prototype] {}\n"
+}

tests/specs/permission/ignore_env/config/deno.json

@@ -0,0 +1,9 @@
+{
+  "permissions": {
+    "default": {
+      "env": {
+        "ignore": true
+      }
+    }
+  }
+}

tests/specs/permission/ignore_env/main.ts renamed to tests/specs/permission/ignore_env/config/main.ts

@@ -0,0 +1,7 @@
+console.log(Deno.env.get("VAR1"));
+console.log(Deno.env.get("VAR2"));
+const object = Deno.env.toObject();
+console.log(object);
+if ("VAR1" in object) {
+  throw "FAILED";
+}

tests/specs/permission/ignore_env/__test__.jsonc renamed to tests/specs/permission/ignore_env/flags/__test__.jsonc

@@ -1,7 +1,6 @@
 {
   "args": "run --allow-env --deny-env=FOOBAR main.ts",
-  "output": "main.out",
-  "exitCode": 1,
+  "output": "",
   "envs": {
     "FOOBAR": "FOOBAR"
   }

tests/specs/permission/ignore_env/flags/main.ts

@@ -1 +1,7 @@
-console.log(Deno.env.toObject());
+const obj = Deno.env.toObject();
+if (obj["PATH"] == null) {
+  throw "FAIL";
+}
+if ("FOOBAR" in obj) {
+  throw "FAIL2";
+}

tests/specs/run/permission_env_allow_and_deny/__test__.jsonc

@@ -14,6 +14,19 @@ Deno.test({ permissions: { env: true } }, function envSuccess() {
   assertNotEquals(Deno.env.get("TEST_VAR"), env["TEST_VAR"]);
 });
 
+Deno.test({
+  permissions: {
+    env: {
+      allow: true,
+      deny: ["PATH"],
+    },
+  },
+}, function envDenySuccess() {
+  // should allow getting it and not contain the denied path
+  const env = Deno.env.toObject();
+  assertEquals(env["PATH"], undefined);
+});
+
 Deno.test({ permissions: { env: true } }, function envNotFound() {
   const r = Deno.env.get("env_var_does_not_exist!");
   assertEquals(r, undefined);