objection-authorize/tests/insert.test.js

require('./utils/trxify-tests')

const ACLs = require('./acls')
const BaseUser = require('./models/user')
const authorizePlugin = require('../src')

describe.each(ACLs)('Insert queries (%s)', (library, acl) => {
  class User extends authorizePlugin(acl, library)(BaseUser) {}

  test('restrict insert query based on their create access', async () => {
    // create user while anonymous
    await User.query().authorize().insert({ id: 3 })

    // can't create user while logged in
    await expect(
      User.query().authorize({ id: 4, role: 'user' }).insert({ id: 5 })
    ).rejects.toThrow()
  })
})