pro/im_server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: scope login audit records by tenant

Browse Source
This commit is contained in:
richjohnrambo
2026-09-23 15:54:07 +08:00
parent 7d4bc4d049
commit 204043382c
5 changed files with 47 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/db/mysql/admin_governance_schema_test.go
+11 -3
View File
@@ -8,7 +8,7 @@ import (
"testing"
)
func TestEnsureIMAdminGovernanceTablesUsesSelectedTenantDatabase(t *testing.T) {
func TestEnsureIMAdminGovernanceTablesDefinesLoginAuditTenantScope(t *testing.T) {
exec := &recordingGroupSchemaExecutor{}
if err := ensureIMAdminGovernanceTables(exec); err != nil {
t.Fatal(err)
@@ -27,7 +27,15 @@ func TestEnsureIMAdminGovernanceTablesUsesSelectedTenantDatabase(t *testing.T) {
t.Fatalf("hot login state table must not be created: %s", table)
}
}
if strings.Contains(joined, "tinode.") || strings.Contains(joined, "create database") || strings.Contains(joined, "tenant_id") {
t.Fatalf("admin governance schema must stay inside the selected tenant database: %s", joined)
if strings.Contains(joined, "tinode.") || strings.Contains(joined, "create database") {
t.Fatalf("admin governance schema must use the active shared database: %s", joined)
}
start := strings.Index(joined, "create table if not exists im_user_login_logs")
if start < 0 {
t.Fatal("missing im_user_login_logs")
}
end := strings.Index(joined[start:], ") engine=")
if end < 0 || !strings.Contains(joined[start:start+end], "tenant_id bigint not null") {
t.Fatal("im_user_login_logs must declare tenant_id")
}
}