From acc3e665d00ef31c47e39f40dba54fc63d19a72e Mon Sep 17 00:00:00 2001 From: mickey-mikey <149929346+mickey-mikey@users.noreply.github.com> Date: Wed, 4 Mar 2026 16:40:50 +1100 Subject: [PATCH] fix: assert cumulative readonly scope in tasks full-level test Addresses CodeRabbit Review 3 nitpick: verify TASKS_READONLY_SCOPE is present at full level, confirming cumulative scope expansion. Co-Authored-By: Claude Opus 4.6 --- tests/test_permissions.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tests/test_permissions.py b/tests/test_permissions.py index 7f89e85..51d3c7e 100644 --- a/tests/test_permissions.py +++ b/tests/test_permissions.py @@ -129,9 +129,10 @@ class TestGetScopesForPermission: assert TASKS_READONLY_SCOPE in scopes def test_tasks_full_includes_write_scope(self): - """Full level should include write scope from manage.""" + """Full level should include write and readonly scopes from lower levels.""" scopes = get_scopes_for_permission("tasks", "full") assert TASKS_SCOPE in scopes + assert TASKS_READONLY_SCOPE in scopes def test_tasks_manage_is_valid_level(self): """tasks:manage should be accepted by parse_permissions_arg."""