조직현황 구조변경. 총괄센터삼안 실 조직 삽입확인

backend/internal/handler/tenant_handler_test.go

@@ -610,6 +610,52 @@ func TestTenantHandler_ImportTenantsCSVResolvesParentSlugToID(t *testing.T) {
 	mockSvc.AssertExpectations(t)
 }
 
+func TestTenantHandler_ImportTenantsCSVDoesNotAssignCreatorAsOrganizationMember(t *testing.T) {
+	app := fiber.New()
+	mockSvc := new(MockTenantService)
+	h := &TenantHandler{Service: mockSvc}
+
+	app.Use(func(c *fiber.Ctx) error {
+		c.Locals("user_profile", &domain.UserProfileResponse{ID: "system-admin-id"})
+		return c.Next()
+	})
+	app.Post("/tenants/import", h.ImportTenantsCSV)
+
+	var body bytes.Buffer
+	writer := multipart.NewWriter(&body)
+	part, err := writer.CreateFormFile("file", "tenants.csv")
+	assert.NoError(t, err)
+	_, err = part.Write([]byte("name,type,parent_tenant_id,slug,memo,email_domain\nImported Org,ORGANIZATION,parent-1,imported-org,,\n"))
+	assert.NoError(t, err)
+	assert.NoError(t, writer.Close())
+
+	mockSvc.On("ListTenants", mock.Anything, 10000, 0, "").Return([]domain.Tenant{}, int64(0), nil).Once()
+	mockSvc.On(
+		"RegisterTenant",
+		mock.Anything,
+		"Imported Org",
+		"imported-org",
+		domain.TenantTypeOrganization,
+		"",
+		[]string{},
+		mock.MatchedBy(func(parentID *string) bool {
+			return parentID != nil && *parentID == "parent-1"
+		}),
+		"",
+	).Return(&domain.Tenant{ID: "imported-org-id", Name: "Imported Org", Slug: "imported-org"}, nil).Once()
+
+	req := httptest.NewRequest("POST", "/tenants/import", &body)
+	req.Header.Set("Content-Type", writer.FormDataContentType())
+	resp, _ := app.Test(req)
+
+	assert.Equal(t, http.StatusOK, resp.StatusCode)
+	var got map[string]interface{}
+	json.NewDecoder(resp.Body).Decode(&got)
+	assert.Equal(t, float64(1), got["created"])
+	assert.Equal(t, float64(0), got["failed"])
+	mockSvc.AssertExpectations(t)
+}
+
 func TestNormalizeTenantTypeAllowsOrganization(t *testing.T) {
 	assert.Equal(t, domain.TenantTypeOrganization, normalizeTenantType("organization"))
 }
@@ -681,6 +727,62 @@ func TestNormalizeTenantConfigRejectsNonTextLoginIDFields(t *testing.T) {
 	assert.Contains(t, err.Error(), "login ID fields must be text")
 }
 
+func TestNormalizeTenantConfigAcceptsTenantVisibilityAndOrgUnitType(t *testing.T) {
+	config, err := normalizeTenantConfig(map[string]any{
+		"visibility":  "internal",
+		"orgUnitType": "팀",
+	})
+
+	assert.NoError(t, err)
+	assert.Equal(t, "internal", config["visibility"])
+	assert.Equal(t, "팀", config["orgUnitType"])
+}
+
+func TestNormalizeTenantConfigRejectsInvalidTenantVisibility(t *testing.T) {
+	_, err := normalizeTenantConfig(map[string]any{
+		"visibility": "secret",
+	})
+
+	assert.Error(t, err)
+	assert.Contains(t, err.Error(), "visibility must be public, internal, or private")
+}
+
+func TestValidateTenantOrgConfigScopeRequiresHanmacFamilyDescendant(t *testing.T) {
+	hanmacFamily := domain.Tenant{ID: "family", Slug: "hanmac-family", Type: domain.TenantTypeCompanyGroup}
+	saman := domain.Tenant{ID: "saman", Slug: "saman", Type: domain.TenantTypeCompany, ParentID: &hanmacFamily.ID}
+	outsider := domain.Tenant{ID: "outsider", Slug: "outsider", Type: domain.TenantTypeCompany}
+
+	err := validateTenantOrgConfigScope(saman, []domain.Tenant{hanmacFamily, saman}, domain.JSONMap{
+		"visibility":  "private",
+		"orgUnitType": "팀",
+	})
+	assert.NoError(t, err)
+
+	err = validateTenantOrgConfigScope(outsider, []domain.Tenant{hanmacFamily, saman, outsider}, domain.JSONMap{
+		"visibility": "private",
+	})
+	assert.Error(t, err)
+	assert.Contains(t, err.Error(), "only hanmac-family descendants")
+}
+
+func TestFilterPublicTenantsExcludesInternalPrivateAndDescendants(t *testing.T) {
+	root := domain.Tenant{ID: "root", Slug: "hanmac-family"}
+	publicTenant := domain.Tenant{ID: "public", Slug: "public", ParentID: &root.ID}
+	internalTenant := domain.Tenant{ID: "internal", Slug: "internal", ParentID: &root.ID, Config: domain.JSONMap{"visibility": "internal"}}
+	privateTenant := domain.Tenant{ID: "private", Slug: "private", ParentID: &root.ID, Config: domain.JSONMap{"visibility": "private"}}
+	privateChild := domain.Tenant{ID: "private-child", Slug: "private-child", ParentID: &privateTenant.ID}
+
+	filtered := filterPublicTenants([]domain.Tenant{
+		root,
+		publicTenant,
+		internalTenant,
+		privateTenant,
+		privateChild,
+	})
+
+	assert.Equal(t, []domain.Tenant{root, publicTenant}, filtered)
+}
+
 func TestTenantHandler_ApproveTenant(t *testing.T) {
 	app := fiber.New()
 	mockSvc := new(MockTenantService)