DSL-based policy configuration testing for AshGrant.

This module provides a declarative way to test policy configurations without requiring a database. It tests policy configuration, not data.

Key Concept

Usage

defmodule MyApp.PolicyTests.DocumentPolicyTest do
  use AshGrant.PolicyTest

  resource MyApp.Document

  actor :reader, %{role: :reader}
  actor :author, %{role: :author, id: "author_001"}
  actor :guest, %{permissions: []}

  describe "read access" do
    test "reader can read" do
      assert_can :reader, :read
    end

    test "guest cannot read" do
      assert_cannot :guest, :read
    end

    test "reader can read published documents" do
      assert_can :reader, :read, %{status: :published}
    end
  end

  describe "update access" do
    test "author can update own drafts" do
      assert_can :author, :update, %{author_id: "author_001", status: :draft}
    end
  end
end

Action Specifiers

You can specify actions in several ways:

assert_can :actor, :read                    # shorthand for action: :read
assert_can :actor, action: :approve         # specific action name
assert_can :actor, action_type: :update     # any action of this type

Running Tests

# Run all policy tests
mix ash_grant.verify

# Run specific file
mix ash_grant.verify test/policy_tests/document_test.exs

# Run with verbose output
mix ash_grant.verify --verbose