X-Git-Url: https://git.r.bdr.sh/rbdr/mobius/blobdiff_plain/301990cbc43d93dddb3ba308c490a55ac03fa915..df1ade5433b027f9cb905e584921692313e647f5:/hotline/transaction_handlers_test.go?ds=sidebyside

diff --git a/hotline/transaction_handlers_test.go b/hotline/transaction_handlers_test.go
index 56968a1..e379f09 100644
--- a/hotline/transaction_handlers_test.go
+++ b/hotline/transaction_handlers_test.go
@@ -1,12 +1,16 @@
 package hotline
 
 import (
+	"errors"
+	"fmt"
 	"github.com/stretchr/testify/assert"
 	"io/fs"
 	"math/rand"
 	"os"
-	"reflect"
+	"path/filepath"
+	"strings"
 	"testing"
+	"time"
 )
 
 func TestHandleSetChatSubject(t *testing.T) {
@@ -227,12 +231,21 @@ func TestHandleGetUserNameList(t *testing.T) {
 								Icon:     &[]byte{0, 2},
 								Flags:    &[]byte{0, 3},
 								UserName: []byte{0, 4},
+								Agreed:   true,
 							},
 							uint16(2): {
 								ID:       &[]byte{0, 2},
 								Icon:     &[]byte{0, 2},
 								Flags:    &[]byte{0, 3},
 								UserName: []byte{0, 4},
+								Agreed:   true,
+							},
+							uint16(3): {
+								ID:       &[]byte{0, 3},
+								Icon:     &[]byte{0, 2},
+								Flags:    &[]byte{0, 3},
+								UserName: []byte{0, 4},
+								Agreed:   false,
 							},
 						},
 					},
@@ -272,9 +285,7 @@ func TestHandleGetUserNameList(t *testing.T) {
 				t.Errorf("HandleGetUserNameList() error = %v, wantErr %v", err, tt.wantErr)
 				return
 			}
-			if !reflect.DeepEqual(got, tt.want) {
-				t.Errorf("HandleGetUserNameList() got = %v, want %v", got, tt.want)
-			}
+			assert.Equal(t, tt.want, got)
 		})
 	}
 }
@@ -294,6 +305,14 @@ func TestHandleChatSend(t *testing.T) {
 			name: "sends chat msg transaction to all clients",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessSendChat)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					UserName: []byte{0x00, 0x01},
 					Server: &Server{
 						Clients: map[uint16]*ClientConn{
@@ -344,10 +363,52 @@ func TestHandleChatSend(t *testing.T) {
 			},
 			wantErr: false,
 		},
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranChatSend, &[]byte{0, 1},
+					NewField(fieldData, []byte("hai")),
+				),
+			},
+			want: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to participate in chat.")),
+					},
+				},
+			},
+			wantErr: false,
+		},
 		{
 			name: "sends chat msg as emote if fieldChatOptions is set",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessSendChat)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					UserName: []byte("Testy McTest"),
 					Server: &Server{
 						Clients: map[uint16]*ClientConn{
@@ -379,7 +440,7 @@ func TestHandleChatSend(t *testing.T) {
 					Flags:     0x00,
 					IsReply:   0x00,
 					Type:      []byte{0, 0x6a},
-					ID:        []byte{0x9a, 0xcb, 0x04, 0x42}, // Random ID from rand.Seed(1)
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
 					ErrorCode: []byte{0, 0, 0, 0},
 					Fields: []Field{
 						NewField(fieldData, []byte("\r*** Testy McTest performed action")),
@@ -390,7 +451,7 @@ func TestHandleChatSend(t *testing.T) {
 					Flags:     0x00,
 					IsReply:   0x00,
 					Type:      []byte{0, 0x6a},
-					ID:        []byte{0xf0, 0xc5, 0x34, 0x1e}, // Random ID from rand.Seed(1)
+					ID:        []byte{0xf0, 0xc5, 0x34, 0x1e},
 					ErrorCode: []byte{0, 0, 0, 0},
 					Fields: []Field{
 						NewField(fieldData, []byte("\r*** Testy McTest performed action")),
@@ -403,6 +464,14 @@ func TestHandleChatSend(t *testing.T) {
 			name: "only sends chat msg to clients with accessReadChat permission",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessSendChat)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					UserName: []byte{0x00, 0x01},
 					Server: &Server{
 						Clients: map[uint16]*ClientConn{
@@ -442,9 +511,91 @@ func TestHandleChatSend(t *testing.T) {
 			},
 			wantErr: false,
 		},
+		{
+			name: "only sends private chat msg to members of private chat",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessSendChat)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					UserName: []byte{0x00, 0x01},
+					Server: &Server{
+						PrivateChats: map[uint32]*PrivateChat{
+							uint32(1): {
+								ClientConn: map[uint16]*ClientConn{
+									uint16(1): {
+										ID: &[]byte{0, 1},
+									},
+									uint16(2): {
+										ID: &[]byte{0, 2},
+									},
+								},
+							},
+						},
+						Clients: map[uint16]*ClientConn{
+							uint16(1): {
+								Account: &Account{
+									Access: &[]byte{255, 255, 255, 255, 255, 255, 255, 255},
+								},
+								ID: &[]byte{0, 1},
+							},
+							uint16(2): {
+								Account: &Account{
+									Access: &[]byte{0, 0, 0, 0, 0, 0, 0, 0},
+								},
+								ID: &[]byte{0, 2},
+							},
+							uint16(3): {
+								Account: &Account{
+									Access: &[]byte{0, 0, 0, 0, 0, 0, 0, 0},
+								},
+								ID: &[]byte{0, 3},
+							},
+						},
+					},
+				},
+				t: &Transaction{
+					Fields: []Field{
+						NewField(fieldData, []byte("hai")),
+						NewField(fieldChatID, []byte{0, 0, 0, 1}),
+					},
+				},
+			},
+			want: []Transaction{
+				{
+					clientID:  &[]byte{0, 1},
+					Flags:     0x00,
+					IsReply:   0x00,
+					Type:      []byte{0, 0x6a},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(fieldChatID, []byte{0, 0, 0, 1}),
+						NewField(fieldData, []byte{0x0d, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x00, 0x01, 0x3a, 0x20, 0x20, 0x68, 0x61, 0x69}),
+					},
+				},
+				{
+					clientID:  &[]byte{0, 2},
+					Flags:     0x00,
+					IsReply:   0x00,
+					Type:      []byte{0, 0x6a},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(fieldChatID, []byte{0, 0, 0, 1}),
+						NewField(fieldData, []byte{0x0d, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x00, 0x01, 0x3a, 0x20, 0x20, 0x68, 0x61, 0x69}),
+					},
+				},
+			},
+			wantErr: false,
+		},
 	}
 	for _, tt := range tests {
-		rand.Seed(1) // reset seed between tests to make transaction IDs predictable
 		t.Run(tt.name, func(t *testing.T) {
 			got, err := HandleChatSend(tt.args.cc, tt.args.t)
 
@@ -452,9 +603,7 @@ func TestHandleChatSend(t *testing.T) {
 				t.Errorf("HandleChatSend() error = %v, wantErr %v", err, tt.wantErr)
 				return
 			}
-			if !assert.Equal(t, tt.want, got) {
-				t.Errorf("HandleChatSend() got = %v, want %v", got, tt.want)
-			}
+			tranAssertEqual(t, tt.want, got)
 		})
 	}
 }
@@ -478,10 +627,11 @@ func TestHandleGetFileInfo(t *testing.T) {
 				cc: &ClientConn{
 					ID: &[]byte{0x00, 0x01},
 					Server: &Server{
+						FS: &OSFileStore{},
 						Config: &Config{
 							FileRoot: func() string {
 								path, _ := os.Getwd()
-								return path + "/test/config/Files"
+								return filepath.Join(path, "/test/config/Files")
 							}(),
 						},
 					},
@@ -502,7 +652,7 @@ func TestHandleGetFileInfo(t *testing.T) {
 					ErrorCode: []byte{0, 0, 0, 0},
 					Fields: []Field{
 						NewField(fieldFileName, []byte("testfile.txt")),
-						NewField(fieldFileTypeString, []byte("TEXT")),
+						NewField(fieldFileTypeString, []byte("Text File")),
 						NewField(fieldFileCreatorString, []byte("ttxt")),
 						NewField(fieldFileComment, []byte{}),
 						NewField(fieldFileType, []byte("TEXT")),
@@ -525,7 +675,7 @@ func TestHandleGetFileInfo(t *testing.T) {
 				return
 			}
 
-			// Clear the file timestamp fields to work around problems running the tests in multiple timezones
+			// Clear the fileWrapper timestamp fields to work around problems running the tests in multiple timezones
 			// TODO: revisit how to test this by mocking the stat calls
 			gotRes[0].Fields[5].Data = make([]byte, 8)
 			gotRes[0].Fields[6].Data = make([]byte, 8)
@@ -542,21 +692,65 @@ func TestHandleNewFolder(t *testing.T) {
 		t  *Transaction
 	}
 	tests := []struct {
-		setup   func()
 		name    string
 		args    args
 		wantRes []Transaction
 		wantErr bool
 	}{
+		{
+			name: "without required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+				},
+				t: NewTransaction(
+					accessCreateFolder,
+					&[]byte{0, 0},
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to create folders.")),
+					},
+				},
+			},
+			wantErr: false,
+		},
 		{
 			name: "when path is nested",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessCreateFolder)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					ID: &[]byte{0, 1},
 					Server: &Server{
 						Config: &Config{
 							FileRoot: "/Files/",
 						},
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							mfs.On("Mkdir", "/Files/aaa/testFolder", fs.FileMode(0777)).Return(nil)
+							mfs.On("Stat", "/Files/aaa/testFolder").Return(nil, os.ErrNotExist)
+							return mfs
+						}(),
 					},
 				},
 				t: NewTransaction(
@@ -570,12 +764,6 @@ func TestHandleNewFolder(t *testing.T) {
 					}),
 				),
 			},
-			setup: func() {
-				mfs := MockFileStore{}
-				mfs.On("Mkdir", "/Files/aaa/testFolder", fs.FileMode(0777)).Return(nil)
-				mfs.On("Stat", "/Files/aaa/testFolder").Return(nil, os.ErrNotExist)
-				FS = mfs
-			},
 			wantRes: []Transaction{
 				{
 					clientID:  &[]byte{0, 1},
@@ -592,11 +780,25 @@ func TestHandleNewFolder(t *testing.T) {
 			name: "when path is not nested",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessCreateFolder)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					ID: &[]byte{0, 1},
 					Server: &Server{
 						Config: &Config{
 							FileRoot: "/Files",
 						},
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							mfs.On("Mkdir", "/Files/testFolder", fs.FileMode(0777)).Return(nil)
+							mfs.On("Stat", "/Files/testFolder").Return(nil, os.ErrNotExist)
+							return mfs
+						}(),
 					},
 				},
 				t: NewTransaction(
@@ -604,12 +806,6 @@ func TestHandleNewFolder(t *testing.T) {
 					NewField(fieldFileName, []byte("testFolder")),
 				),
 			},
-			setup: func() {
-				mfs := MockFileStore{}
-				mfs.On("Mkdir", "/Files/testFolder", fs.FileMode(0777)).Return(nil)
-				mfs.On("Stat", "/Files/testFolder").Return(nil, os.ErrNotExist)
-				FS = mfs
-			},
 			wantRes: []Transaction{
 				{
 					clientID:  &[]byte{0, 1},
@@ -626,11 +822,25 @@ func TestHandleNewFolder(t *testing.T) {
 			name: "when UnmarshalBinary returns an err",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessCreateFolder)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					ID: &[]byte{0, 1},
 					Server: &Server{
 						Config: &Config{
 							FileRoot: "/Files/",
 						},
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							mfs.On("Mkdir", "/Files/aaa/testFolder", fs.FileMode(0777)).Return(nil)
+							mfs.On("Stat", "/Files/aaa/testFolder").Return(nil, os.ErrNotExist)
+							return mfs
+						}(),
 					},
 				},
 				t: NewTransaction(
@@ -641,12 +851,6 @@ func TestHandleNewFolder(t *testing.T) {
 					}),
 				),
 			},
-			setup: func() {
-				mfs := MockFileStore{}
-				mfs.On("Mkdir", "/Files/aaa/testFolder", fs.FileMode(0777)).Return(nil)
-				mfs.On("Stat", "/Files/aaa/testFolder").Return(nil, os.ErrNotExist)
-				FS = mfs
-			},
 			wantRes: []Transaction{},
 			wantErr: true,
 		},
@@ -654,11 +858,25 @@ func TestHandleNewFolder(t *testing.T) {
 			name: "fieldFileName does not allow directory traversal",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessCreateFolder)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					ID: &[]byte{0, 1},
 					Server: &Server{
 						Config: &Config{
 							FileRoot: "/Files/",
 						},
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							mfs.On("Mkdir", "/Files/testFolder", fs.FileMode(0777)).Return(nil)
+							mfs.On("Stat", "/Files/testFolder").Return(nil, os.ErrNotExist)
+							return mfs
+						}(),
 					},
 				},
 				t: NewTransaction(
@@ -666,12 +884,6 @@ func TestHandleNewFolder(t *testing.T) {
 					NewField(fieldFileName, []byte("../../testFolder")),
 				),
 			},
-			setup: func() {
-				mfs := MockFileStore{}
-				mfs.On("Mkdir", "/Files/testFolder", fs.FileMode(0777)).Return(nil)
-				mfs.On("Stat", "/Files/testFolder").Return(nil, os.ErrNotExist)
-				FS = mfs
-			},
 			wantRes: []Transaction{
 				{
 					clientID:  &[]byte{0, 1},
@@ -687,11 +899,25 @@ func TestHandleNewFolder(t *testing.T) {
 			name: "fieldFilePath does not allow directory traversal",
 			args: args{
 				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessCreateFolder)
+							access := bits[:]
+							return &access
+						}(),
+					},
 					ID: &[]byte{0, 1},
 					Server: &Server{
 						Config: &Config{
 							FileRoot: "/Files/",
 						},
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							mfs.On("Mkdir", "/Files/foo/testFolder", fs.FileMode(0777)).Return(nil)
+							mfs.On("Stat", "/Files/foo/testFolder").Return(nil, os.ErrNotExist)
+							return mfs
+						}(),
 					},
 				},
 				t: NewTransaction(
@@ -708,12 +934,6 @@ func TestHandleNewFolder(t *testing.T) {
 					}),
 				),
 			},
-			setup: func() {
-				mfs := MockFileStore{}
-				mfs.On("Mkdir", "/Files/foo/testFolder", fs.FileMode(0777)).Return(nil)
-				mfs.On("Stat", "/Files/foo/testFolder").Return(nil, os.ErrNotExist)
-				FS = mfs
-			},
 			wantRes: []Transaction{
 				{
 					clientID:  &[]byte{0, 1},
@@ -728,13 +948,13 @@ func TestHandleNewFolder(t *testing.T) {
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
-			tt.setup()
 
 			gotRes, err := HandleNewFolder(tt.args.cc, tt.args.t)
 			if (err != nil) != tt.wantErr {
 				t.Errorf("HandleNewFolder() error = %v, wantErr %v", err, tt.wantErr)
 				return
 			}
+
 			if !tranAssertEqual(t, tt.wantRes, gotRes) {
 				t.Errorf("HandleNewFolder() gotRes = %v, want %v", gotRes, tt.wantRes)
 			}
@@ -754,16 +974,23 @@ func TestHandleUploadFile(t *testing.T) {
 		wantErr bool
 	}{
 		{
-			name: "when request is valid",
+			name: "when request is valid and user has Upload Anywhere permission",
 			args: args{
 				cc: &ClientConn{
 					Server: &Server{
-						FileTransfers: map[uint32]*FileTransfer{},
+						FS:            &OSFileStore{},
+						fileTransfers: map[[4]byte]*FileTransfer{},
+						Config: &Config{
+							FileRoot: func() string { path, _ := os.Getwd(); return path + "/test/config/Files" }(),
+						}},
+					transfers: map[int]map[[4]byte]*FileTransfer{
+						FileUpload: {},
 					},
 					Account: &Account{
 						Access: func() *[]byte {
 							var bits accessBitmap
 							bits.Set(accessUploadFile)
+							bits.Set(accessUploadAnywhere)
 							access := bits[:]
 							return &access
 						}(),
@@ -805,9 +1032,6 @@ func TestHandleUploadFile(t *testing.T) {
 							return &access
 						}(),
 					},
-					Server: &Server{
-						FileTransfers: map[uint32]*FileTransfer{},
-					},
 				},
 				t: NewTransaction(
 					tranUploadFile, &[]byte{0, 1},
@@ -843,9 +1067,1700 @@ func TestHandleUploadFile(t *testing.T) {
 				t.Errorf("HandleUploadFile() error = %v, wantErr %v", err, tt.wantErr)
 				return
 			}
-			if !tranAssertEqual(t, tt.wantRes, gotRes) {
-				t.Errorf("HandleUploadFile() gotRes = %v, want %v", gotRes, tt.wantRes)
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+
+		})
+	}
+}
+
+func TestHandleMakeAlias(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr bool
+	}{
+		{
+			name: "with valid input and required permissions",
+			args: args{
+				cc: &ClientConn{
+					logger: NewTestLogger(),
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessMakeAlias)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Config: &Config{
+							FileRoot: func() string {
+								path, _ := os.Getwd()
+								return path + "/test/config/Files"
+							}(),
+						},
+						Logger: NewTestLogger(),
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							path, _ := os.Getwd()
+							mfs.On(
+								"Symlink",
+								path+"/test/config/Files/foo/testFile",
+								path+"/test/config/Files/bar/testFile",
+							).Return(nil)
+							return mfs
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranMakeFileAlias, &[]byte{0, 1},
+					NewField(fieldFileName, []byte("testFile")),
+					NewField(fieldFilePath, EncodeFilePath(strings.Join([]string{"foo"}, "/"))),
+					NewField(fieldFileNewPath, EncodeFilePath(strings.Join([]string{"bar"}, "/"))),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0xd1},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields:    []Field(nil),
+				},
+			},
+			wantErr: false,
+		},
+		{
+			name: "when symlink returns an error",
+			args: args{
+				cc: &ClientConn{
+					logger: NewTestLogger(),
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessMakeAlias)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Config: &Config{
+							FileRoot: func() string {
+								path, _ := os.Getwd()
+								return path + "/test/config/Files"
+							}(),
+						},
+						Logger: NewTestLogger(),
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							path, _ := os.Getwd()
+							mfs.On(
+								"Symlink",
+								path+"/test/config/Files/foo/testFile",
+								path+"/test/config/Files/bar/testFile",
+							).Return(errors.New("ohno"))
+							return mfs
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranMakeFileAlias, &[]byte{0, 1},
+					NewField(fieldFileName, []byte("testFile")),
+					NewField(fieldFilePath, EncodeFilePath(strings.Join([]string{"foo"}, "/"))),
+					NewField(fieldFileNewPath, EncodeFilePath(strings.Join([]string{"bar"}, "/"))),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("Error creating alias")),
+					},
+				},
+			},
+			wantErr: false,
+		},
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					logger: NewTestLogger(),
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Config: &Config{
+							FileRoot: func() string {
+								path, _ := os.Getwd()
+								return path + "/test/config/Files"
+							}(),
+						},
+					},
+				},
+				t: NewTransaction(
+					tranMakeFileAlias, &[]byte{0, 1},
+					NewField(fieldFileName, []byte("testFile")),
+					NewField(fieldFilePath, []byte{
+						0x00, 0x01,
+						0x00, 0x00,
+						0x03,
+						0x2e, 0x2e, 0x2e,
+					}),
+					NewField(fieldFileNewPath, []byte{
+						0x00, 0x01,
+						0x00, 0x00,
+						0x03,
+						0x2e, 0x2e, 0x2e,
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to make aliases.")),
+					},
+				},
+			},
+			wantErr: false,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleMakeAlias(tt.args.cc, tt.args.t)
+			if (err != nil) != tt.wantErr {
+				t.Errorf("HandleMakeAlias(%v, %v)", tt.args.cc, tt.args.t)
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleGetUser(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when account is valid",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessOpenUser)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{
+							"guest": {
+								Login:    "guest",
+								Name:     "Guest",
+								Password: "password",
+								Access:   &[]byte{1},
+							},
+						},
+					},
+				},
+				t: NewTransaction(
+					tranGetUser, &[]byte{0, 1},
+					NewField(fieldUserLogin, []byte("guest")),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0x01, 0x60},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(fieldUserName, []byte("Guest")),
+						NewField(fieldUserLogin, negateString([]byte("guest"))),
+						NewField(fieldUserPassword, []byte("password")),
+						NewField(fieldUserAccess, []byte{1}),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranGetUser, &[]byte{0, 1},
+					NewField(fieldUserLogin, []byte("nonExistentUser")),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to view accounts.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when account does not exist",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessOpenUser)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranGetUser, &[]byte{0, 1},
+					NewField(fieldUserLogin, []byte("nonExistentUser")),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("Account does not exist.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleGetUser(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleGetUser(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleDeleteUser(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when user dataFile",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessDeleteUser)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{
+							"testuser": {
+								Login:    "testuser",
+								Name:     "Testy McTest",
+								Password: "password",
+								Access:   &[]byte{1},
+							},
+						},
+						FS: func() *MockFileStore {
+							mfs := &MockFileStore{}
+							mfs.On("Remove", "Users/testuser.yaml").Return(nil)
+							return mfs
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranDeleteUser, &[]byte{0, 1},
+					NewField(fieldUserLogin, negateString([]byte("testuser"))),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0x1, 0x5f},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields:    []Field(nil),
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranDeleteUser, &[]byte{0, 1},
+					NewField(fieldUserLogin, negateString([]byte("testuser"))),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to delete accounts.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleDeleteUser(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleDeleteUser(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleGetMsgs(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "returns news data",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessNewsReadArt)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						FlatNews: []byte("TEST"),
+					},
+				},
+				t: NewTransaction(
+					tranGetMsgs, &[]byte{0, 1},
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x65},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(fieldData, []byte("TEST")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranGetMsgs, &[]byte{0, 1},
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to read news.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleGetMsgs(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleGetMsgs(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleNewUser(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranNewUser, &[]byte{0, 1},
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to create new accounts.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleNewUser(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleNewUser(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleListUsers(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranNewUser, &[]byte{0, 1},
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to view accounts.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleListUsers(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleListUsers(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleDownloadFile(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{},
+				},
+				t: NewTransaction(tranDownloadFile, &[]byte{0, 1}),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to download files.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "with a valid file",
+			args: args{
+				cc: &ClientConn{
+					transfers: map[int]map[[4]byte]*FileTransfer{
+						FileDownload: {},
+					},
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessDownloadFile)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						FS:            &OSFileStore{},
+						fileTransfers: map[[4]byte]*FileTransfer{},
+						Config: &Config{
+							FileRoot: func() string { path, _ := os.Getwd(); return path + "/test/config/Files" }(),
+						},
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					accessDownloadFile,
+					&[]byte{0, 1},
+					NewField(fieldFileName, []byte("testfile.txt")),
+					NewField(fieldFilePath, []byte{0x0, 0x00}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x2},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(fieldRefNum, []byte{0x52, 0xfd, 0xfc, 0x07}),
+						NewField(fieldWaitingCount, []byte{0x00, 0x00}),
+						NewField(fieldTransferSize, []byte{0x00, 0x00, 0x00, 0xa5}),
+						NewField(fieldFileSize, []byte{0x00, 0x00, 0x00, 0x17}),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when client requests to resume 1k test file at offset 256",
+			args: args{
+				cc: &ClientConn{
+					transfers: map[int]map[[4]byte]*FileTransfer{
+						FileDownload: {},
+					}, Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessDownloadFile)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						FS: &OSFileStore{},
+
+						// FS: func() *MockFileStore {
+						// 	path, _ := os.Getwd()
+						// 	testFile, err := os.Open(path + "/test/config/Files/testfile-1k")
+						// 	if err != nil {
+						// 		panic(err)
+						// 	}
+						//
+						// 	mfi := &MockFileInfo{}
+						// 	mfi.On("Mode").Return(fs.FileMode(0))
+						// 	mfs := &MockFileStore{}
+						// 	mfs.On("Stat", "/fakeRoot/Files/testfile.txt").Return(mfi, nil)
+						// 	mfs.On("Open", "/fakeRoot/Files/testfile.txt").Return(testFile, nil)
+						// 	mfs.On("Stat", "/fakeRoot/Files/.info_testfile.txt").Return(nil, errors.New("no"))
+						// 	mfs.On("Stat", "/fakeRoot/Files/.rsrc_testfile.txt").Return(nil, errors.New("no"))
+						//
+						// 	return mfs
+						// }(),
+						fileTransfers: map[[4]byte]*FileTransfer{},
+						Config: &Config{
+							FileRoot: func() string { path, _ := os.Getwd(); return path + "/test/config/Files" }(),
+						},
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					accessDownloadFile,
+					&[]byte{0, 1},
+					NewField(fieldFileName, []byte("testfile-1k")),
+					NewField(fieldFilePath, []byte{0x00, 0x00}),
+					NewField(
+						fieldFileResumeData,
+						func() []byte {
+							frd := FileResumeData{
+								Format:    [4]byte{},
+								Version:   [2]byte{},
+								RSVD:      [34]byte{},
+								ForkCount: [2]byte{0, 2},
+								ForkInfoList: []ForkInfoList{
+									{
+										Fork:     [4]byte{0x44, 0x41, 0x54, 0x41}, // "DATA"
+										DataSize: [4]byte{0, 0, 0x01, 0x00},       // request offset 256
+										RSVDA:    [4]byte{},
+										RSVDB:    [4]byte{},
+									},
+									{
+										Fork:     [4]byte{0x4d, 0x41, 0x43, 0x52}, // "MACR"
+										DataSize: [4]byte{0, 0, 0, 0},
+										RSVDA:    [4]byte{},
+										RSVDB:    [4]byte{},
+									},
+								},
+							}
+							b, _ := frd.BinaryMarshal()
+							return b
+						}(),
+					),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x2},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(fieldRefNum, []byte{0x52, 0xfd, 0xfc, 0x07}),
+						NewField(fieldWaitingCount, []byte{0x00, 0x00}),
+						NewField(fieldTransferSize, []byte{0x00, 0x00, 0x03, 0x8d}),
+						NewField(fieldFileSize, []byte{0x00, 0x00, 0x03, 0x00}),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleDownloadFile(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleDownloadFile(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleUpdateUser(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when action is create user without required permission",
+			args: args{
+				cc: &ClientConn{
+					logger: NewTestLogger(),
+					Server: &Server{
+						Logger: NewTestLogger(),
+					},
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranUpdateUser,
+					&[]byte{0, 0},
+					NewField(fieldData, []byte{
+						0x00, 0x04, // field count
+
+						0x00, 0x69, // fieldUserLogin = 105
+						0x00, 0x03,
+						0x9d, 0x9d, 0x9d,
+
+						0x00, 0x6a, // fieldUserPassword = 106
+						0x00, 0x03,
+						0x9c, 0x9c, 0x9c,
+
+						0x00, 0x66, // fieldUserName = 102
+						0x00, 0x03,
+						0x61, 0x61, 0x61,
+
+						0x00, 0x6e, // fieldUserAccess = 110
+						0x00, 0x08,
+						0x60, 0x70, 0x0c, 0x20, 0x03, 0x80, 0x00, 0x00,
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to create new accounts.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when action is modify user without required permission",
+			args: args{
+				cc: &ClientConn{
+					logger: NewTestLogger(),
+					Server: &Server{
+						Logger: NewTestLogger(),
+						Accounts: map[string]*Account{
+							"bbb": {},
+						},
+					},
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranUpdateUser,
+					&[]byte{0, 0},
+					NewField(fieldData, []byte{
+						0x00, 0x04, // field count
+
+						0x00, 0x69, // fieldUserLogin = 105
+						0x00, 0x03,
+						0x9d, 0x9d, 0x9d,
+
+						0x00, 0x6a, // fieldUserPassword = 106
+						0x00, 0x03,
+						0x9c, 0x9c, 0x9c,
+
+						0x00, 0x66, // fieldUserName = 102
+						0x00, 0x03,
+						0x61, 0x61, 0x61,
+
+						0x00, 0x6e, // fieldUserAccess = 110
+						0x00, 0x08,
+						0x60, 0x70, 0x0c, 0x20, 0x03, 0x80, 0x00, 0x00,
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to modify accounts.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when action is delete user without required permission",
+			args: args{
+				cc: &ClientConn{
+					logger: NewTestLogger(),
+					Server: &Server{
+						Accounts: map[string]*Account{
+							"bbb": {},
+						},
+					},
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranUpdateUser,
+					&[]byte{0, 0},
+					NewField(fieldData, []byte{
+						0x00, 0x01,
+						0x00, 0x65,
+						0x00, 0x03,
+						0x88, 0x9e, 0x8b,
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to delete accounts.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleUpdateUser(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleUpdateUser(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleDelNewsArt(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "without required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranDelNewsArt,
+					&[]byte{0, 0},
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to delete news articles.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleDelNewsArt(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleDelNewsArt(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleDisconnectUser(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "without required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranDelNewsArt,
+					&[]byte{0, 0},
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to disconnect users.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when target user has 'cannot be disconnected' priv",
+			args: args{
+				cc: &ClientConn{
+					Server: &Server{
+						Clients: map[uint16]*ClientConn{
+							uint16(1): {
+								Account: &Account{
+									Login: "unnamed",
+									Access: func() *[]byte {
+										var bits accessBitmap
+										bits.Set(accessCannotBeDiscon)
+										access := bits[:]
+										return &access
+									}(),
+								},
+							},
+						},
+					},
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessDisconUser)
+							access := bits[:]
+							return &access
+						}(),
+					},
+				},
+				t: NewTransaction(
+					tranDelNewsArt,
+					&[]byte{0, 0},
+					NewField(fieldUserID, []byte{0, 1}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("unnamed is not allowed to be disconnected.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleDisconnectUser(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleDisconnectUser(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleSendInstantMsg(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when client 1 sends a message to client 2",
+			args: args{
+				cc: &ClientConn{
+					ID:       &[]byte{0, 1},
+					UserName: []byte("User1"),
+					Server: &Server{
+						Clients: map[uint16]*ClientConn{
+							uint16(2): {
+								AutoReply: []byte(nil),
+							},
+						},
+					},
+				},
+				t: NewTransaction(
+					tranSendInstantMsg,
+					&[]byte{0, 1},
+					NewField(fieldData, []byte("hai")),
+					NewField(fieldUserID, []byte{0, 2}),
+				),
+			},
+			wantRes: []Transaction{
+				*NewTransaction(
+					tranServerMsg,
+					&[]byte{0, 2},
+					NewField(fieldData, []byte("hai")),
+					NewField(fieldUserName, []byte("User1")),
+					NewField(fieldUserID, []byte{0, 1}),
+					NewField(fieldOptions, []byte{0, 1}),
+				),
+				{
+					clientID:  &[]byte{0, 1},
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0x0, 0x6c},
+					ID:        []byte{0, 0, 0, 0},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields:    []Field(nil),
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "when client 2 has autoreply enabled",
+			args: args{
+				cc: &ClientConn{
+					ID:       &[]byte{0, 1},
+					UserName: []byte("User1"),
+					Server: &Server{
+						Clients: map[uint16]*ClientConn{
+							uint16(2): {
+								ID:        &[]byte{0, 2},
+								UserName:  []byte("User2"),
+								AutoReply: []byte("autohai"),
+							},
+						},
+					},
+				},
+				t: NewTransaction(
+					tranSendInstantMsg,
+					&[]byte{0, 1},
+					NewField(fieldData, []byte("hai")),
+					NewField(fieldUserID, []byte{0, 2}),
+				),
+			},
+			wantRes: []Transaction{
+				*NewTransaction(
+					tranServerMsg,
+					&[]byte{0, 2},
+					NewField(fieldData, []byte("hai")),
+					NewField(fieldUserName, []byte("User1")),
+					NewField(fieldUserID, []byte{0, 1}),
+					NewField(fieldOptions, []byte{0, 1}),
+				),
+				*NewTransaction(
+					tranServerMsg,
+					&[]byte{0, 1},
+					NewField(fieldData, []byte("autohai")),
+					NewField(fieldUserName, []byte("User2")),
+					NewField(fieldUserID, []byte{0, 2}),
+					NewField(fieldOptions, []byte{0, 1}),
+				),
+				{
+					clientID:  &[]byte{0, 1},
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0x0, 0x6c},
+					ID:        []byte{0, 0, 0, 0},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields:    []Field(nil),
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleSendInstantMsg(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleSendInstantMsg(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleDeleteFile(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when user does not have required permission to delete a folder",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Config: &Config{
+							FileRoot: func() string {
+								return "/fakeRoot/Files"
+							}(),
+						},
+						FS: func() *MockFileStore {
+							mfi := &MockFileInfo{}
+							mfi.On("Mode").Return(fs.FileMode(0))
+							mfi.On("Size").Return(int64(100))
+							mfi.On("ModTime").Return(time.Parse(time.Layout, time.Layout))
+							mfi.On("IsDir").Return(false)
+							mfi.On("Name").Return("testfile")
+
+							mfs := &MockFileStore{}
+							mfs.On("Stat", "/fakeRoot/Files/aaa/testfile").Return(mfi, nil)
+							mfs.On("Stat", "/fakeRoot/Files/aaa/.info_testfile").Return(nil, errors.New("err"))
+							mfs.On("Stat", "/fakeRoot/Files/aaa/.rsrc_testfile").Return(nil, errors.New("err"))
+
+							return mfs
+						}(),
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranDeleteFile, &[]byte{0, 1},
+					NewField(fieldFileName, []byte("testfile")),
+					NewField(fieldFilePath, []byte{
+						0x00, 0x01,
+						0x00, 0x00,
+						0x03,
+						0x61, 0x61, 0x61,
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0x9a, 0xcb, 0x04, 0x42},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to delete files.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "deletes all associated metadata files",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessDeleteFile)
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Config: &Config{
+							FileRoot: func() string {
+								return "/fakeRoot/Files"
+							}(),
+						},
+						FS: func() *MockFileStore {
+							mfi := &MockFileInfo{}
+							mfi.On("Mode").Return(fs.FileMode(0))
+							mfi.On("Size").Return(int64(100))
+							mfi.On("ModTime").Return(time.Parse(time.Layout, time.Layout))
+							mfi.On("IsDir").Return(false)
+							mfi.On("Name").Return("testfile")
+
+							mfs := &MockFileStore{}
+							mfs.On("Stat", "/fakeRoot/Files/aaa/testfile").Return(mfi, nil)
+							mfs.On("Stat", "/fakeRoot/Files/aaa/.info_testfile").Return(nil, errors.New("err"))
+							mfs.On("Stat", "/fakeRoot/Files/aaa/.rsrc_testfile").Return(nil, errors.New("err"))
+
+							mfs.On("RemoveAll", "/fakeRoot/Files/aaa/testfile").Return(nil)
+							mfs.On("Remove", "/fakeRoot/Files/aaa/testfile.incomplete").Return(nil)
+							mfs.On("Remove", "/fakeRoot/Files/aaa/.rsrc_testfile").Return(nil)
+							mfs.On("Remove", "/fakeRoot/Files/aaa/.info_testfile").Return(nil)
+
+							return mfs
+						}(),
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranDeleteFile, &[]byte{0, 1},
+					NewField(fieldFileName, []byte("testfile")),
+					NewField(fieldFilePath, []byte{
+						0x00, 0x01,
+						0x00, 0x00,
+						0x03,
+						0x61, 0x61, 0x61,
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0x0, 0xcc},
+					ID:        []byte{0x0, 0x0, 0x0, 0x0},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields:    []Field(nil),
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleDeleteFile(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleDeleteFile(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+
+			tt.args.cc.Server.FS.(*MockFileStore).AssertExpectations(t)
+		})
+	}
+}
+
+func TestHandleGetFileNameList(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when fieldFilePath is a drop box, but user does not have accessViewDropBoxes ",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+
+						Config: &Config{
+							FileRoot: func() string {
+								path, _ := os.Getwd()
+								return filepath.Join(path, "/test/config/Files/getFileNameListTestDir")
+							}(),
+						},
+					},
+				},
+				t: NewTransaction(
+					tranGetFileNameList, &[]byte{0, 1},
+					NewField(fieldFilePath, []byte{
+						0x00, 0x01,
+						0x00, 0x00,
+						0x08,
+						0x64, 0x72, 0x6f, 0x70, 0x20, 0x62, 0x6f, 0x78, // "drop box"
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0, 0, 0, 0},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to view drop boxes.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "with file root",
+			args: args{
+				cc: &ClientConn{
+					Server: &Server{
+						Config: &Config{
+							FileRoot: func() string {
+								path, _ := os.Getwd()
+								return filepath.Join(path, "/test/config/Files/getFileNameListTestDir")
+							}(),
+						},
+					},
+				},
+				t: NewTransaction(
+					tranGetFileNameList, &[]byte{0, 1},
+					NewField(fieldFilePath, []byte{
+						0x00, 0x00,
+						0x00, 0x00,
+					}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0xc8},
+					ID:        []byte{0, 0, 0, 0},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(
+							fieldFileNameWithInfo,
+							func() []byte {
+								fnwi := FileNameWithInfo{
+									fileNameWithInfoHeader: fileNameWithInfoHeader{
+										Type:       [4]byte{0x54, 0x45, 0x58, 0x54},
+										Creator:    [4]byte{0x54, 0x54, 0x58, 0x54},
+										FileSize:   [4]byte{0, 0, 0x04, 0},
+										RSVD:       [4]byte{},
+										NameScript: [2]byte{},
+										NameSize:   [2]byte{0, 0x0b},
+									},
+									name: []byte("testfile-1k"),
+								}
+								b, _ := fnwi.MarshalBinary()
+								return b
+							}(),
+						),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleGetFileNameList(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleGetFileNameList(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
+			}
+
+			tranAssertEqual(t, tt.wantRes, gotRes)
+		})
+	}
+}
+
+func TestHandleGetClientInfoText(t *testing.T) {
+	type args struct {
+		cc *ClientConn
+		t  *Transaction
+	}
+	tests := []struct {
+		name    string
+		args    args
+		wantRes []Transaction
+		wantErr assert.ErrorAssertionFunc
+	}{
+		{
+			name: "when user does not have required permission",
+			args: args{
+				cc: &ClientConn{
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							access := bits[:]
+							return &access
+						}(),
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+					},
+				},
+				t: NewTransaction(
+					tranGetClientInfoText, &[]byte{0, 1},
+					NewField(fieldUserID, []byte{0, 1}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0, 0x00},
+					ID:        []byte{0, 0, 0, 0},
+					ErrorCode: []byte{0, 0, 0, 1},
+					Fields: []Field{
+						NewField(fieldError, []byte("You are not allowed to get client info.")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+		{
+			name: "with a valid user",
+			args: args{
+				cc: &ClientConn{
+					UserName:   []byte("Testy McTest"),
+					RemoteAddr: "1.2.3.4:12345",
+					Account: &Account{
+						Access: func() *[]byte {
+							var bits accessBitmap
+							bits.Set(accessGetClientInfo)
+							access := bits[:]
+							return &access
+						}(),
+						Name:  "test",
+						Login: "test",
+					},
+					Server: &Server{
+						Accounts: map[string]*Account{},
+						Clients: map[uint16]*ClientConn{
+							uint16(1): {
+								UserName:   []byte("Testy McTest"),
+								RemoteAddr: "1.2.3.4:12345",
+								Account: &Account{
+									Access: func() *[]byte {
+										var bits accessBitmap
+										bits.Set(accessGetClientInfo)
+										access := bits[:]
+										return &access
+									}(),
+									Name:  "test",
+									Login: "test",
+								},
+							},
+						},
+					},
+					transfers: map[int]map[[4]byte]*FileTransfer{
+						FileDownload:   {},
+						FileUpload:     {},
+						FolderDownload: {},
+						FolderUpload:   {},
+					},
+				},
+				t: NewTransaction(
+					tranGetClientInfoText, &[]byte{0, 1},
+					NewField(fieldUserID, []byte{0, 1}),
+				),
+			},
+			wantRes: []Transaction{
+				{
+					Flags:     0x00,
+					IsReply:   0x01,
+					Type:      []byte{0x1, 0x2f},
+					ID:        []byte{0, 0, 0, 0},
+					ErrorCode: []byte{0, 0, 0, 0},
+					Fields: []Field{
+						NewField(fieldData, []byte(
+							strings.Replace(`Nickname:   Testy McTest
+Name:       test
+Account:    test
+Address:    1.2.3.4:12345
+
+-------- File Downloads ---------
+
+None.
+
+------- Folder Downloads --------
+
+None.
+
+--------- File Uploads ----------
+
+None.
+
+-------- Folder Uploads ---------
+
+None.
+
+------- Waiting Downloads -------
+
+None.
+
+`, "\n", "\r", -1)),
+						),
+						NewField(fieldUserName, []byte("Testy McTest")),
+					},
+				},
+			},
+			wantErr: assert.NoError,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			gotRes, err := HandleGetClientInfoText(tt.args.cc, tt.args.t)
+			if !tt.wantErr(t, err, fmt.Sprintf("HandleGetClientInfoText(%v, %v)", tt.args.cc, tt.args.t)) {
+				return
 			}
+			tranAssertEqual(t, tt.wantRes, gotRes)
 		})
 	}
 }