actually check permissions to fix tests

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

ocis-pkg/middleware/account.go

@@ -5,6 +5,7 @@ import (
 	"net/http"
 
 	"github.com/cs3org/reva/pkg/token/manager/jwt"
+	"github.com/cs3org/reva/pkg/user"
 	"github.com/micro/go-micro/v2/metadata"
 	"github.com/owncloud/ocis/ocis-pkg/account"
 )
@@ -49,18 +50,21 @@ func ExtractAccountUUID(opts ...account.Option) func(http.Handler) http.Handler
 				return
 			}
 
-			user, err := tokenManager.DismantleToken(r.Context(), token)
+			u, err := tokenManager.DismantleToken(r.Context(), token)
 			if err != nil {
 				opt.Logger.Error().Err(err)
 				return
 			}
 
+			// store user in context for request
+			ctx := user.ContextSetUser(r.Context(), u)
+
 			// Important: user.Id.OpaqueId is the AccountUUID. Set this way in the account uuid middleware in ocis-proxy.
 			// https://github.com/owncloud/ocis-proxy/blob/ea254d6036592cf9469d757d1295e0c4309d1e63/pkg/middleware/account_uuid.go#L109
-			ctx := context.WithValue(r.Context(), UUIDKey, user.Id.OpaqueId)
+			ctx = context.WithValue(ctx, UUIDKey, u.Id.OpaqueId)
 			// TODO: implement token manager in cs3org/reva that uses generic metadata instead of access token from header.
-			ctx = metadata.Set(ctx, AccountID, user.Id.OpaqueId)
-			ctx = metadata.Set(ctx, RoleIDs, string(user.Opaque.Map["roles"].Value))
+			ctx = metadata.Set(ctx, AccountID, u.Id.OpaqueId)
+			ctx = metadata.Set(ctx, RoleIDs, string(u.Opaque.Map["roles"].Value))
 			next.ServeHTTP(w, r.WithContext(ctx))
 		})
 	}