Add keychain_access_control tests

Author: sschmid

test/macos_keychain.bash

@@ -8,9 +8,16 @@ _delete_keychain() {
   security delete-keychain "${PW_KEYCHAIN}"
 }
 
-_config_append_macos_keychain() {
+_config_append_macos_keychain_keychain_access_control_always_allow() {
   cat >> "${PW_CONFIG}" << EOF
 [macos_keychain]
 keychain_access_control = always-allow
 EOF
 }
+
+_config_append_macos_keychain_keychain_access_control_confirm() {
+  cat >> "${PW_CONFIG}" << EOF
+[macos_keychain]
+keychain_access_control = confirm
+EOF
+}

test/macos_keychain.bats

@@ -8,7 +8,7 @@ setup() {
   _set_config_with_copy_paste
   # shellcheck disable=SC2016
   _config_append_with_plugin '$PW_HOME/plugins/macos_keychain'
-  _config_append_macos_keychain
+  _config_append_macos_keychain_keychain_access_control_always_allow
   pw init "${PW_KEYCHAIN}" <<< "${KEYCHAIN_TEST_PASSWORD}"
 }
 
@@ -181,6 +181,21 @@ ${MULTI_LINE_NOTES}
 EOF
 }
 
+@test "adds item with access control always-allow" {
+  assert_adds_item "${PW_1}" "${NAME_A}"
+  run security dump-keychain -a "${PW_KEYCHAIN}"
+  assert_success
+  assert_output --partial "com.apple.security"
+}
+
+@test "adds item with access control confirm" {
+  _config_append_macos_keychain_keychain_access_control_confirm
+  assert_adds_item "${PW_1}" "${NAME_A}"
+  run security dump-keychain -a "${PW_KEYCHAIN}"
+  assert_success
+  refute_output --partial "com.apple.security"
+}
+
 ################################################################################
 # add another
 ################################################################################