fix: enforce account data boundaries and real-data integrity

2026-07-22 23:30:05 +08:00
parent 835bb947d9
commit 51d7c067a4
7 changed files with 541 additions and 92 deletions
@@ -44,6 +44,11 @@ class FrontendContractTests(unittest.TestCase):
        self.assertEqual(views, navigation)
        self.assertEqual(len(views), 13)

+    def test_public_knowledge_editors_are_hidden_for_non_admins(self):
+        self.assertIn('document.querySelector("#reasonForm").hidden = !isAdmin;', self.script)
+        self.assertIn('document.querySelector("#sectorPhaseManager").hidden = !isAdmin;', self.script)
+        self.assertIn('const canManage = state.user?.role === "admin";', self.script)
+

 if __name__ == "__main__":
    unittest.main()