feat: more role backend and admin/writer roles additions and adjustments

test/update_restart_http_test.go

@@ -56,10 +56,11 @@ func newRestartHTTP(t *testing.T) *restartHTTP {
 	h.markers = infraUpdate.NewJSONRestartRequestStore(h.markerPath)
 	h.resultFiles = infraUpdate.NewJSONResultStore(h.resultPath)
 	container := &api.UseCases{
-		Token:              h.token,
-		GetUserUseCase:     useCases.NewGetUserUseCase(newUpdateUserRepo()),
-		GetMyAuthorUseCase: useCases.NewGetMyAuthorUseCase(plainAuthors()),
-		GetMyAccessUseCase: useCases.NewGetMyAccessUseCase(newSeededMockRoleRepo()),
+		Token:                  h.token,
+		GetUserUseCase:         useCases.NewGetUserUseCase(newUpdateUserRepo()),
+		CheckPermissionUseCase: useCases.NewCheckPermissionUseCase(newSeededMockRoleRepo()),
+		GetMyAuthorUseCase:     useCases.NewGetMyAuthorUseCase(plainAuthors()),
+		GetMyAccessUseCase:     useCases.NewGetMyAccessUseCase(newSeededMockRoleRepo()),
 		GetUpdateStatusUseCase: useCases.NewGetUpdateStatusUseCase(
 			h.store, h.jobs, h.helper, h.resultFiles, h.markers, updateRunning, false, h.clock.Now),
 		RequestRestartUseCase: useCases.NewRequestRestartUseCase(
@@ -260,8 +261,8 @@ func TestRestartHTTP(t *testing.T) {
 			{"no jwt cookie", 0, 0, http.StatusUnauthorized, ""},
 			{"a stale token version", updateOwnerId, 1, http.StatusUnauthorized, apperr.UnauthorizedErrorMessage + "\n"},
 			{"an unverified owner", updateUnverifiedOwner, 0, http.StatusForbidden, apperr.VerificationRequiredErrorMessage + "\n"},
-			{"an admin", updateAdminId, 0, http.StatusForbidden, apperr.OwnerRequiredErrorMessage + "\n"},
-			{"an admin with a bad body", updateAdminId, 0, http.StatusForbidden, apperr.OwnerRequiredErrorMessage + "\n"},
+			{"an admin", updateAdminId, 0, http.StatusForbidden, apperr.MissingPermissionErrorMessage + "\n"},
+			{"an admin with a bad body", updateAdminId, 0, http.StatusForbidden, apperr.MissingPermissionErrorMessage + "\n"},
 		}
 		for _, tc := range cases {
 			t.Run(tc.name, func(t *testing.T) {