a4f3ad90b9
* Added new context param (edit_managed_records) * Added new HTTP Header (X-Designate-Edit-Managed-Records:True) * Added new HTTP Query param (?edit_managed_records=True) * Added policy check (edit_managed_records), defaulting to rule:admin Change-Id: Ib68369fd7302384fd4fbd1396baa513265edb0a0 Closes-Bug: #1441283
69 lines
2.4 KiB
Python
69 lines
2.4 KiB
Python
# Copyright 2012 Managed I.T.
|
|
#
|
|
# Author: Kiall Mac Innes <kiall@managedit.ie>
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
import testtools
|
|
from oslo_log import log as logging
|
|
|
|
from designate.tests import TestCase
|
|
from designate import context
|
|
from designate import exceptions
|
|
|
|
LOG = logging.getLogger(__name__)
|
|
|
|
|
|
class TestDesignateContext(TestCase):
|
|
def test_deepcopy(self):
|
|
orig = context.DesignateContext(user='12345', tenant='54321')
|
|
copy = orig.deepcopy()
|
|
|
|
self.assertEqual(orig.to_dict(), copy.to_dict())
|
|
|
|
def test_elevated(self):
|
|
ctxt = context.DesignateContext(user='12345', tenant='54321')
|
|
admin_ctxt = ctxt.elevated()
|
|
|
|
self.assertFalse(ctxt.is_admin)
|
|
self.assertTrue(admin_ctxt.is_admin)
|
|
self.assertEqual(0, len(ctxt.roles))
|
|
|
|
def test_all_tenants(self):
|
|
ctxt = context.DesignateContext(user='12345', tenant='54321')
|
|
admin_ctxt = ctxt.elevated()
|
|
|
|
admin_ctxt.all_tenants = True
|
|
self.assertFalse(ctxt.is_admin)
|
|
self.assertTrue(admin_ctxt.is_admin)
|
|
self.assertTrue(admin_ctxt.all_tenants)
|
|
|
|
def test_all_tenants_policy_failure(self):
|
|
ctxt = context.DesignateContext(user='12345', tenant='54321')
|
|
with testtools.ExpectedException(exceptions.Forbidden):
|
|
ctxt.all_tenants = True
|
|
|
|
def test_edit_managed_records(self):
|
|
ctxt = context.DesignateContext(user='12345', tenant='54321')
|
|
admin_ctxt = ctxt.elevated()
|
|
|
|
admin_ctxt.edit_managed_records = True
|
|
|
|
self.assertFalse(ctxt.is_admin)
|
|
self.assertTrue(admin_ctxt.is_admin)
|
|
self.assertTrue(admin_ctxt.edit_managed_records)
|
|
|
|
def test_edit_managed_records_failure(self):
|
|
ctxt = context.DesignateContext(user='12345', tenant='54321')
|
|
with testtools.ExpectedException(exceptions.Forbidden):
|
|
ctxt.edit_managed_records = True
|