feat(e2e): teamAdmin permission tests

e2e/tests/api-driven/package.json

@@ -10,7 +10,8 @@
     "axios": "^1.4.0",
     "dotenv": "^16.3.1",
     "dotenv-expand": "^10.0.0",
-    "graphql-request": "^6.1.0",
+    "graphql": "^16.8.1",
+    "graphql-tag": "^2.12.6",
     "jsonwebtoken": "^9.0.2",
     "nock": "^13.3.1"
   },

e2e/tests/api-driven/src/permissions/helpers.ts

@@ -1,12 +1,16 @@
+import { DocumentNode, Kind } from "graphql/language";
 import { $admin, getClient } from "../client";
 import { CustomWorld } from "./steps";
 import { queries } from "./queries";
 import { createFlow, createTeam, createUser } from "../globalHelpers";
 
+export type Action = "insert" | "update" | "delete" | "select";
+export type Table = keyof typeof queries;
+
 interface PerformGQLQueryArgs {
   world: CustomWorld;
-  action: string;
-  table: string;
+  action: Action;
+  table: Table;
 }
 
 export const addUserToTeam = async (userId: number, teamId: number) => {
@@ -24,26 +28,27 @@
 };
 
 export const setup = async () => {
+  const user1Id = await createUser({ email: "[email protected]" });
   const teamId1 = await createTeam({ name: "E2E Team 1", slug: "e2e-team1" });
+  const team1FlowId = await createFlow({
+    teamId: teamId1,
+    slug: "team-1-flow",
+  });
+
+  const user2Id = await createUser({ email: "[email protected]" });
   const teamId2 = await createTeam({ name: "E2E Team 2", slug: "e2e-team2" });
-  const user1 = {
-    id: await createUser({ email: "[email protected]" }),
-    email: "[email protected]",
-  };
-  const user2 = {
-    id: await createUser({ email: "[email protected]" }),
-    email: "[email protected]",
-  };
-  const team1Flow = await createFlow({ teamId: teamId1, slug: "team-1-flow" });
-  const team2Flow = await createFlow({ teamId: teamId2, slug: "team-2-flow" });
+  const team2FlowId = await createFlow({
+    teamId: teamId2,
+    slug: "team-2-flow",
+  });
 
   const world = {
+    user1Id,
     teamId1,
+    team1FlowId,
+    user2Id,
     teamId2,
-    user1,
-    user2,
-    team1Flow,
-    team2Flow,
+    team2FlowId,
   };
 
   return world;
@@ -55,7 +60,34 @@
   table,
 }: PerformGQLQueryArgs) => {
   const query = queries[table][action];
-  const client = (await getClient(world.activeUser.email)).client;
-  const result = await client.request(query, { teamId1: world.teamId1 });
+  const variables = buildVariables(query, world);
+  const client = (await getClient(world.activeUserEmail)).client;
+  const { result } = await client.request<Record<"result", any>>(
+    query,
+    variables,
+  );
   return result;
 };
+
+/**
+ * Parse GQL query to extract variables required for query
+ * Match with values from our test world to construct variables for query
+ */
+const buildVariables = (query: DocumentNode, world: CustomWorld) => {
+  const variables = {};
+  const definitionNode = query.definitions[0];
+
+  if (definitionNode.kind !== Kind.OPERATION_DEFINITION) return variables;
+  if (!definitionNode.variableDefinitions) return variables;
+
+  Object.keys(world).forEach((key) => {
+    const isVariableUsedInQuery = definitionNode.variableDefinitions!.find(
+      (varDef) => varDef.variable.name.value === key,
+    );
+    if (isVariableUsedInQuery) {
+      variables[key] = world[key];
+    }
+  });
+
+  return variables;
+};

e2e/tests/api-driven/src/permissions/queries/flows.ts

@@ -1,12 +1,12 @@
-import { gql } from "graphql-request";
+import { gql } from "graphql-tag";
 
 export const INSERT_FLOW_QUERY = gql`
-  mutation InsertFlowE2E($teamId1: Int) {
-    insert_flows(
+  mutation InsertFlowE2E($team1Id: Int) {
+    result: insert_flows(
       objects: {
         data: "{hello: 'world'}"
         slug: "e2e-test-flow"
-        team_id: $teamId1
+        team_id: $team1Id
       }
     ) {
       returning {
@@ -15,3 +15,22 @@ export const INSERT_FLOW_QUERY = gql`
     }
   }
 `;
+
+export const UPDATE_FLOW_QUERY = gql`
+  mutation UpdateFlowE2E($team1FlowId: uuid!) {
+    result: update_flows_by_pk(
+      pk_columns: { id: $team1FlowId }
+      _set: { data: "{hello: 'world2'}" }
+    ) {
+      id
+    }
+  }
+`;
+
+export const DELETE_FLOW_QUERY = gql`
+  mutation DeleteFlowE2E($team1FlowId: uuid!) {
+    result: delete_flows_by_pk(id: $team1FlowId) {
+      id
+    }
+  }
+`;

e2e/tests/api-driven/src/permissions/queries/index.ts

@@ -1,7 +1,30 @@
-import { INSERT_FLOW_QUERY } from "./flows";
+import {
+  DELETE_FLOW_QUERY,
+  INSERT_FLOW_QUERY,
+  UPDATE_FLOW_QUERY,
+} from "./flows";
+import { INSERT_OPERATION_QUERY, UPDATE_OPERATION_QUERY } from "./operations";
+import { INSERT_PUBLISHED_FLOW_QUERY } from "./publishedFlows";
+import { SELECT_TEAM_MEMBERS_QUERY } from "./teamMembers";
+import { SELECT_USERS_QUERY } from "./users";
 
 export const queries = {
   flows: {
     insert: INSERT_FLOW_QUERY,
+    update: UPDATE_FLOW_QUERY,
+    delete: DELETE_FLOW_QUERY,
   },
-};
+  users: {
+    select: SELECT_USERS_QUERY,
+  },
+  published_flows: {
+    insert: INSERT_PUBLISHED_FLOW_QUERY,
+  },
+  team_members: {
+    select: SELECT_TEAM_MEMBERS_QUERY,
+  },
+  operations: {
+    insert: INSERT_OPERATION_QUERY,
+    update: UPDATE_OPERATION_QUERY,
+  },
+} as const;

e2e/tests/api-driven/src/permissions/queries/operations.ts

@@ -0,0 +1,24 @@
+import { gql } from "graphql-tag";
+
+export const INSERT_OPERATION_QUERY = gql`
+  mutation InsertOperationE2E($team1FlowId: uuid!) {
+    result: insert_operations_one(
+      object: { data: "{}", flow_id: $team1FlowId }
+    ) {
+      id
+    }
+  }
+`;
+
+export const UPDATE_OPERATION_QUERY = gql`
+  mutation UpdateOperationE2E($team1FlowId: uuid!) {
+    result: update_operations(
+      where: { flow_id: { _eq: $team1FlowId } }
+      _set: { data: "" }
+    ) {
+      returning {
+        id
+      }
+    }
+  }
+`;

e2e/tests/api-driven/src/permissions/queries/publishedFlows.ts

@@ -0,0 +1,17 @@
+import gql from "graphql-tag";
+
+export const INSERT_PUBLISHED_FLOW_QUERY = gql`
+  mutation InsertPublishedFlowsE2E($team1FlowId: uuid!, $activeUserId: Int) {
+    result: insert_published_flows(
+      objects: {
+        data: "{}"
+        flow_id: $team1FlowId
+        publisher_id: $activeUserId
+      }
+    ) {
+      returning {
+        id
+      }
+    }
+  }
+`;

e2e/tests/api-driven/src/permissions/queries/teamMembers.ts

@@ -0,0 +1,9 @@
+import gql from "graphql-tag";
+
+export const SELECT_TEAM_MEMBERS_QUERY = gql`
+  query SelectTeamMembersE2E($user1Id: Int) {
+    result: team_members(where: { user_id: { _eq: $user1Id } }) {
+      id
+    }
+  }
+`;

e2e/tests/api-driven/src/permissions/queries/users.ts

@@ -0,0 +1,9 @@
+import gql from "graphql-tag";
+
+export const SELECT_USERS_QUERY = gql`
+  query SelectUsersE2E($user1Id: Int!) {
+    result: users_by_pk(id: $user1Id) {
+      id
+    }
+  }
+`;