const{checkPermission}=require("../../app/middleware/permission.middleware");describe("shipping administration security",()=>{test("customer cannot manage shipping",()=>{const req={user:{accountType:"CUSTOMER",permissions:[]},method:"POST"},res={status:jest.fn().mockReturnThis(),json:jest.fn()},next=jest.fn();checkPermission("shipping.rates.manage",{custom:true})(req,res,next);expect(res.status).toHaveBeenCalledWith(403);expect(next).not.toHaveBeenCalled();});});