Add subintent auth tests

radix-engine-tests/tests/system/mod.rs

@@ -75,3 +75,4 @@ mod vault;
 mod vault_burn;
 mod vault_freeze;
 mod worktop;
+mod subintent_auth;

radix-engine-tests/tests/system/subintent_auth.rs

@@ -0,0 +1,85 @@
+use radix_common::prelude::{FromPublicKey, NonFungibleGlobalId, XRD};
+use radix_engine::errors::{RuntimeError, SystemModuleError};
+use radix_engine::transaction::ExecutionConfig;
+use radix_engine_interface::macros::dec;
+use radix_rust::btreeset;
+use radix_transactions::builder::ManifestV2Builder;
+use radix_transactions::model::{ManifestIntent, TestTransaction};
+use scrypto_test::ledger_simulator::LedgerSimulatorBuilder;
+
+#[test]
+fn should_not_be_able_to_use_root_auth_in_subintent() {
+    // Arrange
+    let mut ledger = LedgerSimulatorBuilder::new().build();
+    let (public_key, _, account) = ledger.new_allocated_account();
+
+    // Act
+    let intents = vec![
+        {
+            let manifest = ManifestV2Builder::new_v2()
+                .lock_standard_test_fee(account)
+                .yield_to_child(ManifestIntent(0), ())
+                .build();
+
+            (manifest, ledger.next_transaction_nonce(), vec![1])
+        },
+        {
+            let manifest = ManifestV2Builder::new_v2()
+                .withdraw_from_account(account, XRD, dec!(10))
+                .deposit_entire_worktop(account)
+                .build();
+
+            (manifest, ledger.next_transaction_nonce(), vec![])
+        }
+    ];
+
+    let receipt = ledger.execute_transaction(
+        TestTransaction::new_v2_from_nonce(intents)
+            .prepare()
+            .expect("expected transaction to be preparable")
+            .get_executable(btreeset![NonFungibleGlobalId::from_public_key(&public_key)]),
+        ExecutionConfig::for_test_transaction(),
+    );
+
+    // Assert
+    receipt.expect_specific_failure(|e| matches!(e, RuntimeError::SystemModuleError(SystemModuleError::AuthError(..))));
+}
+
+
+#[test]
+fn should_be_able_to_use_separate_auth_in_subintent() {
+    // Arrange
+    let mut ledger = LedgerSimulatorBuilder::new().build();
+    let (public_key, _, account) = ledger.new_allocated_account();
+
+    // Act
+    let intents = vec![
+        {
+            let manifest = ManifestV2Builder::new_v2()
+                .lock_standard_test_fee(account)
+                .yield_to_child(ManifestIntent(0), ())
+                .build();
+
+            (manifest, ledger.next_transaction_nonce(), vec![1])
+        },
+        {
+            let manifest = ManifestV2Builder::new_v2()
+                .withdraw_from_account(account, XRD, dec!(10))
+                .deposit_entire_worktop(account)
+                .build();
+
+            (manifest, ledger.next_transaction_nonce(), vec![])
+        }
+    ];
+
+    let receipt = ledger.execute_transaction(
+        TestTransaction::new_v2_from_nonce(intents)
+            .prepare()
+            .expect("expected transaction to be preparable")
+            .get_executable(btreeset![NonFungibleGlobalId::from_public_key(&public_key)]),
+        ExecutionConfig::for_test_transaction(),
+    );
+
+    // Assert
+    receipt.expect_commit_success();
+}