找出这些生成的授权测试为何能在没有保护租户隔离的情况下通过。
JavaScript
import assert from "node:assert/strict";
function canRead(user, record) {
return user.tenantId === record.tenantId;
}
const tenantA = { tenantId: "a" };
const tenantBRecord = { tenantId: "b" };
function generatedTest() {
const canRead = () => true;
assert.equal(canRead(tenantA, tenantBRecord), true);
try {
canRead(tenantA, tenantBRecord);
} catch {
assert.ok(true);
}
}
generatedTest();