diff options
Diffstat (limited to 'django/engagementmanager/tests/test_auth_service.py')
| -rwxr-xr-x | django/engagementmanager/tests/test_auth_service.py | 244 |
1 files changed, 244 insertions, 0 deletions
diff --git a/django/engagementmanager/tests/test_auth_service.py b/django/engagementmanager/tests/test_auth_service.py new file mode 100755 index 0000000..b61de8d --- /dev/null +++ b/django/engagementmanager/tests/test_auth_service.py @@ -0,0 +1,244 @@ +# +# ============LICENSE_START========================================== +# org.onap.vvp/engagementmgr +# =================================================================== +# Copyright © 2017 AT&T Intellectual Property. All rights reserved. +# =================================================================== +# +# Unless otherwise specified, all software contained herein is licensed +# under the Apache License, Version 2.0 (the “License”); +# you may not use this software except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# +# +# Unless otherwise specified, all documentation contained herein is licensed +# under the Creative Commons License, Attribution 4.0 Intl. (the “License”); +# you may not use this documentation except in compliance with the License. +# You may obtain a copy of the License at +# +# https://creativecommons.org/licenses/by/4.0/ +# +# Unless required by applicable law or agreed to in writing, documentation +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# ============LICENSE_END============================================ +# +# ECOMP is a trademark and service mark of AT&T Intellectual Property. +from engagementmanager.models import Vendor +from engagementmanager.service.authorization_service import AuthorizationService, Permissions +from engagementmanager.tests.test_base_entity import TestBaseEntity +from engagementmanager.utils.constants import Constants +from engagementmanager.utils.request_data_mgr import request_data_mgr + + +class TestAuthService(TestBaseEntity): + + def childSetup(self): + self.createVendors([Constants.service_provider_company_name, 'Other']) + + self.createDefaultRoles() + + self.admin_user = self.creator.createUser(Vendor.objects.get( + name=Constants.service_provider_company_name), Constants.service_provider_admin_mail, + '55501000199', 'admin user', self.admin, True) + print('-----------------------------------------------------') + print('Created User:') + print('UUID: ' + str(self.admin_user.uuid)) + print('Full Name: ' + self.admin_user.full_name) + print('-----------------------------------------------------') + + # Create a user with role el + self.el_user = self.creator.createUser(Vendor.objects.get( + name=Constants.service_provider_company_name), self.randomGenerator("main-vendor-email"), + '55501000199', 'el user', self.el, True) + print('-----------------------------------------------------') + print('Created User:') + print('UUID: ' + str(self.el_user.uuid)) + print('Full Name: ' + self.el_user.full_name) + print('-----------------------------------------------------') + + self.peer_reviewer = self.creator.createUser(Vendor.objects.get( + name=Constants.service_provider_company_name), self.randomGenerator("main-vendor-email"), + '55501000199', 'peer-reviewer user', self.el, True) + print('-----------------------------------------------------') + print('Created User:') + print('UUID: ' + str(self.peer_reviewer.uuid)) + print('Full Name: ' + self.peer_reviewer.full_name) + print('-----------------------------------------------------') + + # Create another EL + self.another_el_user = self.creator.createUser(Vendor.objects.get( + name=Constants.service_provider_company_name), self.randomGenerator("main-vendor-email"), + '55501000199', 'el user2', self.el, True) + print('-----------------------------------------------------') + print('Created User:') + print('UUID: ' + str(self.another_el_user.uuid)) + print('Full Name: ' + self.another_el_user.full_name) + print('-----------------------------------------------------') + + # Create a user with role standard_user + self.user = self.creator.createUser(Vendor.objects.get( + name='Other'), self.randomGenerator("main-vendor-email"), + '55501000199', 'user', self.standard_user, True) + print('-----------------------------------------------------') + print('Created User:') + print('UUID: ' + str(self.user.uuid)) + print('Full Name: ' + self.user.full_name) + print('-----------------------------------------------------') + + # Create a user with role standard_user with SSH key + self.user_with_ssh = self.creator.createUser(Vendor.objects.get( + name='Other'), self.randomGenerator("main-vendor-email"), + '55501000199', 'ssh user', self.standard_user, True, 'just-a-fake-ssh-key') + print('-----------------------------------------------------') + print('Created User:') + print('UUID: ' + str(self.user_with_ssh.uuid)) + print('Full Name: ' + self.user_with_ssh.full_name) + print('-----------------------------------------------------') + + # Create an Engagement with team + self.engagement = self.creator.createEngagement('just-a-fake-uuid', 'Validation', None) + self.engagement.engagement_team.add(self.user, self.el_user) + self.engagement.reviewer = self.el_user + self.engagement.peer_reviewer = self.peer_reviewer + self.engagement.save() + print('-----------------------------------------------------') + print('Created Engagement:') + print('UUID: ' + str(self.engagement.uuid)) + print('-----------------------------------------------------') + + # Create another Engagement with team with SSH Key + self.engagement_ssh = self.creator.createEngagement('just-another-fake-uuid', 'Validation', None) + self.engagement_ssh.engagement_team.add(self.user_with_ssh, self.el_user) + print('-----------------------------------------------------') + print('Created Engagement:') + print('UUID: ' + str(self.engagement_ssh.uuid)) + print('-----------------------------------------------------') + + # Create another Engagement with Main Contact + self.engagement_with_contact = self.creator.createEngagement('yet-just-another-fake-uuid', 'Validation', None) + self.engagement_with_contact.engagement_team.add(self.user_with_ssh, self.el_user) + self.engagement_with_contact.contact_user = self.user_with_ssh + print('-----------------------------------------------------') + print('Created Engagement:') + print('UUID: ' + str(self.engagement_with_contact.uuid)) + print('-----------------------------------------------------') + + # Create another Engagement with Main Contact + self.engagement_4_createNS = self.creator.createEngagement('yet-just-another-fake-uuid2', 'Validation', None) + self.engagement_4_createNS.engagement_team.add(self.user_with_ssh, self.el_user) + self.engagement_4_createNS.contact_user = self.user_with_ssh + print('-----------------------------------------------------') + print('Created Engagement:') + print('UUID: ' + str(self.engagement_4_createNS.uuid)) + print('-----------------------------------------------------') + self.token = self.loginAndCreateSessionToken(self.user) + self.sshtoken = self.loginAndCreateSessionToken(self.user_with_ssh) + self.ELtoken = self.loginAndCreateSessionToken(self.el_user) + + self.checklist_template = self.creator.createDefaultCheckListTemplate() + print('-----------------------------------------------------') + print('Created Check List Template') + print('UUID: ' + str(self.checklist_template.uuid)) + print('-----------------------------------------------------') + + self.checklist = self.creator.createCheckList('some-checklist', 'Automation', 1, '{}', self.engagement, + self.checklist_template, self.el_user, self.peer_reviewer) + print('-----------------------------------------------------') + print('Created Check List') + print('UUID: ' + str(self.checklist.uuid)) + print('-----------------------------------------------------') + + def testAuthorization(self): + auth = AuthorizationService() + + ###################### + # TEST EL PERMISSIONS + ###################### + # Test Add VF for EL + auth_result, message = auth.is_user_able_to(self.el_user, Permissions.add_vf, str(self.engagement.uuid), '') + print('ADD_VF Got Result : ' + str(auth_result) + ' ' + message) + self.assertEquals(auth_result, True) + + auth_result, message = auth.is_user_able_to(self.el_user, Permissions.add_vendor, '', '') + print('ADD_VENDOR Got Result : ' + message) + self.assertEquals(auth_result, True) + + # Check that EL that belong to ENG can create next step + auth_result, message = auth.is_user_able_to( + self.el_user, Permissions.add_nextstep, str(self.engagement.uuid), '') + print('ADD_NEXTSTEP Got Result : ' + message) + self.assertEquals(auth_result, True) + + # Check that EL that does not belong to ENG cannot create next step + auth_result, message = auth.is_user_able_to( + self.another_el_user, Permissions.add_nextstep, str(self.engagement.uuid), '') + print('ADD_NEXTSTEP Got Result : ' + message) + self.assertEquals(auth_result, False) + + # Check that CL can be created only by EL that belongs to ENG + auth_result, message = auth.is_user_able_to( + self.el_user, Permissions.add_checklist, str(self.engagement.uuid), '') + print('ADD_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, True) + + # Check that CL can be created only by EL that belongs to ENG (use another el) + auth_result, message = auth.is_user_able_to( + self.another_el_user, Permissions.add_checklist, str(self.engagement.uuid), '') + print('ADD_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, False) + + auth_result, message = auth.is_user_able_to(self.user, Permissions.add_checklist, str(self.engagement.uuid), '') + print('ADD_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, False) + + # Check that only peer reviewer can do peer review + request_data_mgr.set_cl_uuid(str(self.checklist.uuid)) + auth_result, message = auth.is_user_able_to( + self.peer_reviewer, Permissions.peer_review_checklist, str(self.engagement.uuid), str(self.checklist.uuid)) + print('PEER_REVIEW_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, True) + + # Check that a user that is not defined as peer review cannot review + auth_result, message = auth.is_user_able_to( + self.el_user, Permissions.peer_review_checklist, str(self.engagement.uuid), str(self.checklist.uuid)) + print('PEER_REVIEW_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, False) + + # Check that admin which is not owner cannot approve CL + # Test is greyed out due to the fact that admin can approve any CL +# auth_result, message = auth.is_user_able_to(self.admin_user, Permissions.admin_approve_checklist, str(self.engagement.uuid), str(self.checklist.uuid)) +# print('ADMIN_APPROVE_CHECKLIST Got Result : ' + message) +# self.assertEquals(auth_result, False) + + # Check that only admin which is the cl owner can approve CL + self.checklist.owner = self.admin_user # Make admin the owner + self.checklist.save() + auth_result, message = auth.is_user_able_to( + self.admin_user, Permissions.admin_approve_checklist, str(self.engagement.uuid), str(self.checklist.uuid)) + print('ADMIN_APPROVE_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, True) + + # Check that only admin can approve CL (attempt with regular EL) + auth_result, message = auth.is_user_able_to( + self.el_user, Permissions.admin_approve_checklist, str(self.engagement.uuid), str(self.checklist.uuid)) + print('ADMIN_APPROVE_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, False) + + # Check that only admin can approve CL (attempt with regular user) + auth_result, message = auth.is_user_able_to( + self.user, Permissions.admin_approve_checklist, str(self.engagement.uuid), str(self.checklist.uuid)) + print('ADMIN_APPROVE_CHECKLIST Got Result : ' + message) + self.assertEquals(auth_result, False) |