From 0f8251004a6a385d0dba361fe1a869b63e63dec4 Mon Sep 17 00:00:00 2001 From: Han-Wen Nienhuys Date: Thu, 8 Feb 2018 15:54:28 +0100 Subject: [PATCH] Add another two test cases to define ACL behavior Change-Id: I620473c10aebb67e9354cc9c659961ab92b2ddd3 --- .../server/permissions/RefControlTest.java | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/javatests/com/google/gerrit/server/permissions/RefControlTest.java b/javatests/com/google/gerrit/server/permissions/RefControlTest.java index ada46cb613..2ab5e87225 100644 --- a/javatests/com/google/gerrit/server/permissions/RefControlTest.java +++ b/javatests/com/google/gerrit/server/permissions/RefControlTest.java @@ -670,6 +670,24 @@ public class RefControlTest { assertCanUpdate("refs/heads/master", u); } + @Test + public void unblockFromParentDoesNotAffectChild() { + allow(parent, PUSH, DEVS, "refs/heads/master", true); + block(local, PUSH, DEVS, "refs/heads/master"); + + ProjectControl u = user(local, DEVS); + assertCannotUpdate("refs/heads/master", u); + } + + @Test + public void unblockFromParentDoesNotAffectChildDifferentGroups() { + allow(parent, PUSH, DEVS, "refs/heads/master", true); + block(local, PUSH, ANONYMOUS_USERS, "refs/heads/master"); + + ProjectControl u = user(local, DEVS); + assertCannotUpdate("refs/heads/master", u); + } + @Test public void unblockMoreSpecificRefInLocalWithExclusiveFlag_Fails() { block(parent, PUSH, ANONYMOUS_USERS, "refs/heads/*");