fix: use intersection for user group policies

2026-10-07 18:07:47 +08:00 · 2026-05-11 17:00:07 +08:00
parent e16a225eb3
commit 9bed5e9f83
9 changed files with 294 additions and 74 deletions
@@ -1962,6 +1962,34 @@ mod tests {
        assert_eq!(policy, Some(vec!["gpt-4.1".to_string()]));
    }

+    #[test]
+    fn list_policy_intersects_multiple_group_restrictions() {
+        let groups = vec![
+            sample_group(
+                "team-a",
+                10,
+                Some(vec!["gpt-5", "gpt-4.1"]),
+                "specific",
+                None,
+                "system",
+            ),
+            sample_group(
+                "team-b",
+                20,
+                Some(vec!["gpt-4.1", "gemini-2.5-pro"]),
+                "specific",
+                None,
+                "system",
+            ),
+        ];
+
+        let policy = resolve_effective_list_policy(None, "unrestricted", &groups, |group| {
+            (&group.allowed_models_mode, group.allowed_models.clone())
+        });
+
+        assert_eq!(policy, Some(vec!["gpt-4.1".to_string()]));
+    }
+
    #[test]
    fn user_unrestricted_does_not_bypass_group_restrictions() {
        let groups = vec![sample_group(