Format and add integration test for vector_search_endpoint support in…

… databricks_permissions
databricks · Nov 12, 2024 · f68d0e4 · f68d0e4
1 parent ad76876
commit f68d0e4
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 1 deletion.
diff --git a/internal/acceptance/permissions_test.go b/internal/acceptance/permissions_test.go
@@ -866,6 +866,27 @@ func TestAccPermissions_ServingEndpoint(t *testing.T) {
 	})
 }
 
+func TestAccPermissions_VectorSearchEndpoint(t *testing.T) {
+	loadDebugEnvIfRunsFromIDE(t, "workspace")
+	if isGcp(t) {
+		skipf(t)("Vector Search endpoints are not supported on GCP")
+	}
+	endpointTemplate := `
+	resource "databricks_vector_search_endpoint" "endpoint" {
+		name = "{var.STICKY_RANDOM}"
+		endpoint_type = "STANDARD"
+	}
+`
+	WorkspaceLevel(t, Step{
+		Template: experimentTemplate + makePermissionsTestStage("vector_search_endpoint_id", "databricks_vector_search_endpoint.endpoint.endpoint_id", groupPermissions("CAN_USE")),
+	}, Step{
+		Template: experimentTemplate + makePermissionsTestStage("vector_search_endpoint_id", "databricks_vector_search_endpoint.endpoint.endpoint_id", currentPrincipalPermission(t, "CAN_MANAGE"), groupPermissions("CAN_MANAGE")),
+	}, Step{
+		Template:    experimentTemplate + makePermissionsTestStage("vector_search_endpoint_id", "databricks_vector_search_endpoint.endpoint.endpoint_id", currentPrincipalPermission(t, "CAN_USE"), groupPermissions("CAN_MANAGE")),
+		ExpectError: regexp.MustCompile("cannot remove management permissions for the current user for mlflowExperiment, allowed levels: CAN_MANAGE"),
+	})
+}
+
 func TestAccPermissions_Alert(t *testing.T) {
 	loadDebugEnvIfRunsFromIDE(t, "workspace")
 	alertTemplate := `

diff --git a/permissions/permission_definitions.go b/permissions/permission_definitions.go
@@ -737,7 +737,7 @@ func allResourcePermissions() []resourcePermissions {
 			objectType:        "vector-search-endpoint",
 			requestObjectType: "vector-search-endpoints",
 			allowedPermissionLevels: map[string]permissionLevelOptions{
-				"CAN_USE":   {isManagementPermission: false},
+				"CAN_USE":    {isManagementPermission: false},
 				"CAN_MANAGE": {isManagementPermission: true},
 			},
 			updateAclCustomizers: []update.ACLCustomizer{update.AddCurrentUserAsManage},