1 files changed, 119 insertions, 0 deletions
diff --git a/catalog-be/src/test/java/org/openecomp/sdc/be/impl/aaf/RoleAuthorizationHandlerTest.java b/catalog-be/src/test/java/org/openecomp/sdc/be/impl/aaf/RoleAuthorizationHandlerTest.java
new file mode 100644
index 0000000000..fa02a72f96
--- /dev/null
+++ b/catalog-be/src/test/java/org/openecomp/sdc/be/impl/aaf/RoleAuthorizationHandlerTest.java
@@ -0,0 +1,119 @@
+/*-
+ * ============LICENSE_START=======================================================
+ * SDC
+ * ================================================================================
+ * Copyright (C) 2020 AT&T Intellectual Property. All rights reserved.
+ * ================================================================================
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ * ============LICENSE_END=========================================================
+ */
+
+package org.openecomp.sdc.be.impl.aaf;
+
+import org.aspectj.lang.JoinPoint;
+import org.aspectj.lang.Signature;
+import org.junit.Before;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.mockito.Mock;
+import org.mockito.junit.MockitoJUnitRunner;
+import org.openecomp.sdc.be.components.impl.aaf.AafPermission;
+import org.openecomp.sdc.be.components.impl.aaf.PermissionAllowed;
+import org.openecomp.sdc.be.components.impl.aaf.RoleAuthorizationHandler;
+import org.openecomp.sdc.be.components.impl.exceptions.ComponentException;
+import org.openecomp.sdc.be.config.ConfigurationManager;
+import org.openecomp.sdc.be.dao.api.ActionStatus;
+import org.openecomp.sdc.be.servlets.BeGenericServlet;
+import org.openecomp.sdc.common.api.ConfigurationSource;
+import org.openecomp.sdc.common.api.FilterDecisionEnum;
+import org.openecomp.sdc.common.impl.ExternalConfiguration;
+import org.openecomp.sdc.common.impl.FSConfigurationSource;
+import org.openecomp.sdc.common.util.ThreadLocalsHolder;
+import sun.reflect.annotation.AnnotationParser;
+
+import javax.servlet.http.HttpServletRequest;
+import java.util.Collections;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.catchThrowable;
+import static org.mockito.Mockito.when;
+
+@RunWith(MockitoJUnitRunner.class)
+public class RoleAuthorizationHandlerTest {
+
+    private RoleAuthorizationHandler roleAuthorizationHandler = new RoleAuthorizationHandler();
+    @Mock
+    JoinPoint joinPoint;
+    @Mock
+    Signature signature;
+    @Mock
+    BeGenericServlet beGenericServlet;
+    @Mock
+    HttpServletRequest httpServletRequest;
+
+
+    private static ConfigurationSource configurationSource = new FSConfigurationSource(
+            ExternalConfiguration.getChangeListener(), "src/test/resources/config/catalog-be/auth");
+    static ConfigurationManager configurationManager = new ConfigurationManager(configurationSource);
+
+    @Before
+    public void setUp() {
+        when(joinPoint.getSignature()).thenReturn(signature);
+        when(signature.toShortString()).thenReturn("methodName");
+        when(joinPoint.getThis()).thenReturn(beGenericServlet);
+        when(beGenericServlet.getServletRequest()).thenReturn(httpServletRequest);
+        ThreadLocalsHolder.setApiType(FilterDecisionEnum.EXTERNAL);
+    }
+
+    @Test
+    public void testAuthorizeRoleOnePermittedRole() {
+        String[] permsAllowed = {AafPermission.PermNames.WRITE_VALUE};
+        PermissionAllowed rolesAllowed =
+                (PermissionAllowed) AnnotationParser.annotationForMap(PermissionAllowed.class, Collections.singletonMap("value", permsAllowed));
+        when(httpServletRequest.isUserInRole(AafPermission.getEnumByString(permsAllowed[0]).getFullPermission()))
+                .thenReturn(true);
+        roleAuthorizationHandler.authorizeRole(joinPoint, rolesAllowed);
+    }
+
+    @Test
+    public void testAuthorizeRoleTwoPermittedRole() {
+        String[] permsAllowed = {AafPermission.PermNames.WRITE_VALUE, AafPermission.PermNames.READ_VALUE};
+        PermissionAllowed rolesAllowed =
+                (PermissionAllowed) AnnotationParser.annotationForMap(PermissionAllowed.class, Collections.singletonMap("value", permsAllowed));
+        when(httpServletRequest.isUserInRole(AafPermission.getEnumByString(permsAllowed[0]).getFullPermission()))
+                .thenReturn(true);
+        roleAuthorizationHandler.authorizeRole(joinPoint, rolesAllowed);
+    }
+
+    @Test
+    public void testAuthorizeRoleNonPermittedRole() {
+        String[] permsAllowed = {AafPermission.PermNames.WRITE_VALUE, AafPermission.PermNames.READ_VALUE};
+        PermissionAllowed rolesAllowed =
+                (PermissionAllowed) AnnotationParser.annotationForMap(PermissionAllowed.class, Collections.singletonMap("value", permsAllowed));
+        when(httpServletRequest.isUserInRole(AafPermission.getEnumByString(permsAllowed[0]).getFullPermission()))
+                .thenReturn(false);
+
+        ComponentException thrown = (ComponentException) catchThrowable(()->roleAuthorizationHandler.authorizeRole(joinPoint, rolesAllowed));
+        assertThat(thrown.getActionStatus()).isEqualTo(ActionStatus.AUTH_FAILED);
+    }
+
+    @Test
+    public void testAuthorizeRoleEmptyRole() {
+        String[] permsAllowed = {};
+        PermissionAllowed rolesAllowed =
+                (PermissionAllowed) AnnotationParser.annotationForMap(PermissionAllowed.class, Collections.singletonMap("value", permsAllowed));
+
+        ComponentException thrown = (ComponentException) catchThrowable(()->roleAuthorizationHandler.authorizeRole(joinPoint, rolesAllowed));
+        assertThat(thrown.getActionStatus()).isEqualTo(ActionStatus.AUTH_FAILED);
+    }
+}