7e385fc126
Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Server and lib tests / Library test (js) (push) Failing after 1m36s
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Server and lib tests / Server tests (push) Failing after 4m55s
E2e test on main branch push / notify-failure (push) Failing after 9s
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Mark stale issues and pull requests / stale (push) Successful in 40s
116 lines
2.9 KiB
Go
116 lines
2.9 KiB
Go
package automation
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/cortezaproject/corteza/server/automation/types"
|
|
"github.com/cortezaproject/corteza/server/pkg/rbac"
|
|
"github.com/cortezaproject/corteza/server/tests/helpers"
|
|
"github.com/steinfletcher/apitest-jsonpath"
|
|
)
|
|
|
|
func TestPermissionsEffective(t *testing.T) {
|
|
h := newHelper(t)
|
|
helpers.DenyMe(h, types.ComponentRbacResource(), "workflow.create")
|
|
|
|
h.apiInit().
|
|
Get("/permissions/effective").
|
|
Header("Accept", "application/json").
|
|
Expect(t).
|
|
Status(http.StatusOK).
|
|
Assert(helpers.AssertNoErrors).
|
|
End()
|
|
}
|
|
|
|
func TestPermissionsList(t *testing.T) {
|
|
h := newHelper(t)
|
|
|
|
helpers.AllowMe(h, types.ComponentRbacResource(), "grant")
|
|
|
|
h.apiInit().
|
|
Get("/permissions/").
|
|
Header("Accept", "application/json").
|
|
Expect(t).
|
|
Status(http.StatusOK).
|
|
Assert(helpers.AssertNoErrors).
|
|
Assert(jsonpath.Present(fmt.Sprintf(`$.response[? @.type=="%s"]`, types.ComponentResourceType))).
|
|
End()
|
|
}
|
|
|
|
func TestPermissionsRead(t *testing.T) {
|
|
h := newHelper(t)
|
|
helpers.AllowMe(h, types.ComponentRbacResource(), "grant")
|
|
helpers.DenyMe(h, types.ComponentRbacResource(), "workflow.create")
|
|
|
|
h.apiInit().
|
|
Get(fmt.Sprintf("/permissions/%d/rules", h.roleID)).
|
|
Header("Accept", "application/json").
|
|
Expect(t).
|
|
Status(http.StatusOK).
|
|
Assert(helpers.AssertNoErrors).
|
|
End()
|
|
}
|
|
|
|
func TestPermissionsUpdate(t *testing.T) {
|
|
h := newHelper(t)
|
|
helpers.AllowMe(h, types.ComponentRbacResource(), "grant")
|
|
|
|
h.apiInit().
|
|
Patch(fmt.Sprintf("/permissions/%d/rules", h.roleID)).
|
|
Header("Accept", "application/json").
|
|
JSON(fmt.Sprintf(`{"rules":[{"resource":"%s","operation":"workflow.create","access":"allow"}]}`, types.ComponentRbacResource())).
|
|
Expect(t).
|
|
Status(http.StatusOK).
|
|
Assert(helpers.AssertNoErrors).
|
|
End()
|
|
}
|
|
|
|
func TestPermissionsDelete(t *testing.T) {
|
|
h := newHelper(t)
|
|
p := rbac.Global()
|
|
|
|
// Make sure our user can grant
|
|
helpers.AllowMe(h, types.ComponentRbacResource(), "grant")
|
|
|
|
// New role.
|
|
permDelRole := h.roleID + 1
|
|
|
|
h.a.Len(rbac.Global().FindRulesByRoleID(permDelRole), 0)
|
|
|
|
// Setup a few fake rules for new role
|
|
helpers.Grant(rbac.AllowRule(permDelRole, types.ComponentRbacResource(), "workflow.create"))
|
|
|
|
h.a.Len(p.FindRulesByRoleID(permDelRole), 1)
|
|
|
|
h.apiInit().
|
|
Delete(fmt.Sprintf("/permissions/%d/rules", permDelRole)).
|
|
Header("Accept", "application/json").
|
|
Expect(t).
|
|
Status(http.StatusOK).
|
|
Assert(helpers.AssertNoErrors).
|
|
End()
|
|
|
|
// Make sure all rules for this role are deleted
|
|
for _, r := range p.FindRulesByRoleID(permDelRole) {
|
|
h.a.True(r.Access == rbac.Inherit)
|
|
}
|
|
}
|
|
|
|
func TestPermissionsTrace(t *testing.T) {
|
|
h := newHelper(t)
|
|
|
|
helpers.AllowMe(h, types.ComponentRbacResource(), "grant")
|
|
|
|
h.apiInit().
|
|
Get("/permissions/trace").
|
|
Query("roleID[]", "1").
|
|
Header("Accept", "application/json").
|
|
Expect(t).
|
|
Status(http.StatusOK).
|
|
Assert(helpers.AssertNoErrors).
|
|
Assert(jsonpath.Present(`$.response`)).
|
|
End()
|
|
}
|