fix: unify staging admin access

2026-07-29 11:28:15 +08:00
parent 5b5f72d403
commit 248e1b8a07
42 changed files with 223 additions and 776 deletions
@@ -22,10 +22,10 @@ test("anonymous admin access is 401", () => {
  });
 });

-test("viewer may read but may not write", () => {
+test("viewer may neither read nor write", () => {
  assert.deepEqual(authorizeAdminAccess(user(["user", "viewer"]), "read"), {
-    allowed: true,
-    role: "viewer",
+    allowed: false,
+    status: 403,
  });
  assert.deepEqual(authorizeAdminAccess(user(["viewer"]), "write"), {
    allowed: false,