mirror of
https://github.com/nodejs/node.git
synced 2025-04-29 06:19:07 +00:00
24e4a54471
This commit also adds a suggestion flag (if exists) when ERR_ACCESS_DENIED is thrown, so users don't need to jump into the documentation to see how to manage that permission error. PR-URL: https://github.com/nodejs/node/pull/57585 Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com>
70 lines
2.0 KiB
JavaScript
70 lines
2.0 KiB
JavaScript
// Flags: --permission --allow-fs-read=*
|
|
'use strict';
|
|
|
|
const common = require('../common');
|
|
const { isMainThread } = require('worker_threads');
|
|
|
|
if (!isMainThread) {
|
|
common.skip('This test only works on a main thread');
|
|
}
|
|
|
|
const assert = require('assert');
|
|
const childProcess = require('child_process');
|
|
|
|
if (process.argv[2] === 'child') {
|
|
process.exit(0);
|
|
}
|
|
|
|
// Guarantee the initial state
|
|
{
|
|
assert.ok(!process.permission.has('child'));
|
|
}
|
|
|
|
// When a permission is set by cli, the process shouldn't be able
|
|
// to spawn
|
|
{
|
|
assert.throws(() => {
|
|
childProcess.spawn(process.execPath, ['--version']);
|
|
}, common.expectsError({
|
|
message: 'Access to this API has been restricted. Use --allow-child-process to manage permissions.',
|
|
code: 'ERR_ACCESS_DENIED',
|
|
permission: 'ChildProcess',
|
|
}));
|
|
assert.throws(() => {
|
|
childProcess.spawnSync(process.execPath, ['--version']);
|
|
}, common.expectsError({
|
|
code: 'ERR_ACCESS_DENIED',
|
|
permission: 'ChildProcess',
|
|
}));
|
|
assert.throws(() => {
|
|
childProcess.exec(...common.escapePOSIXShell`"${process.execPath}" --version`);
|
|
}, common.expectsError({
|
|
code: 'ERR_ACCESS_DENIED',
|
|
permission: 'ChildProcess',
|
|
}));
|
|
assert.throws(() => {
|
|
childProcess.execSync(...common.escapePOSIXShell`"${process.execPath}" --version`);
|
|
}, common.expectsError({
|
|
code: 'ERR_ACCESS_DENIED',
|
|
permission: 'ChildProcess',
|
|
}));
|
|
assert.throws(() => {
|
|
childProcess.fork(__filename, ['child']);
|
|
}, common.expectsError({
|
|
code: 'ERR_ACCESS_DENIED',
|
|
permission: 'ChildProcess',
|
|
}));
|
|
assert.throws(() => {
|
|
childProcess.execFile(...common.escapePOSIXShell`"${process.execPath}" --version`);
|
|
}, common.expectsError({
|
|
code: 'ERR_ACCESS_DENIED',
|
|
permission: 'ChildProcess',
|
|
}));
|
|
assert.throws(() => {
|
|
childProcess.execFileSync(...common.escapePOSIXShell`"${process.execPath}" --version`);
|
|
}, common.expectsError({
|
|
code: 'ERR_ACCESS_DENIED',
|
|
permission: 'ChildProcess',
|
|
}));
|
|
}
|